The Guardrail covers the risk side of shipping AI: what regulation actually requires, what an auditor will accept as evidence, and what an attacker can do once a model holds credentials. Four beats, written for the people who have to sign something rather than the people selling the tooling.
The name describes the posture. We are not here to argue whether AI should be deployed. We are here to say, precisely, what has to be true before it is.
01Editorial standards
Compliance writing fails in a specific way: it summarises a summary of a law, and the summary was written before the law changed. We publish against the primary text.
- Every obligation names its provision. Instrument, article, and the date it applies from. If we cannot cite the provision, we do not state the obligation.
- Consultancy summaries are leads, not citations. We use them to find a development and then read the source ourselves.
- Dates carry a verification date. The compliance clock was last checked against primary sources on 2026-10-05.
- Corrections are visible. Substantive changes update the date on the briefing itself.
- Nothing here is legal advice. We report what instruments say. Applying them to your organisation is your counsel's job, not ours.
- Sponsored briefings are labelled at the top of the page and in the feed, and editorial staff have no role in producing them.
02How a claim gets verified
Before a briefing runs, every date, article number and framework reference in it is checked against the current text of the instrument. This is not a formality. While preparing this site we found three widely repeated deadlines that had already moved, including one that appears in a large share of published compliance calendars.
Where a claim rests on reporting we could not independently confirm, the briefing says so in its references section and names who published it first.
03Compliance clock
The clock runs down the right-hand side of the front page and every section page. This is the short list; the full deadline tracker carries every date in the Regulation with its source provision and a log of what has moved. Every entry was checked against the text of the instrument itself on 2026-10-05, not against a compliance calendar published by someone else.
| Obligation | Status |
|---|---|
| EU AI Act, Article 50 transparency duties | In force |
| EU AI Act, AI Office enforcement powers over GPAI | In force |
| EU AI Act, Article 50(2) compliance for systems placed on the market earlier | Dec 2, 2026 |
| EU AI Act, prohibition on AI generated non-consensual intimate imagery and CSAM | Dec 2, 2026 |
| Colorado AI Act, as revised by SB 26-189 | Jan 1, 2027 |
| EU AI Act, high-risk obligations under Article 6(2) and Annex III | Dec 2, 2027 |
| EU AI Act, high-risk obligations under Article 6(1) and Annex I | Aug 2, 2028 |
A date here changing is news in itself. When one moves, the briefings that relied on it get a correction note rather than a silent edit.
04Masthead
Briefings here are signed by a desk, not by a person. Four desks cover the four beats, and every briefing names the one responsible for it.
We do not run personal bylines, and we think that is the more honest option. A byline is a trust signal only when a reader can check who the author is: find their other work, their talks, their professional record. A name that cannot be verified anywhere outside this site is not evidence of anything. It is the appearance of evidence.
What can be checked is checkable regardless of who wrote it: the instrument, the provision, the date it applies from, and a link to the text. Those sit next to every claim, and they are the reason a reader does not have to take our word for it.
Editorial responsibility for everything published here sits with the publisher of this site, reachable at editor@theguardrailreport.com.
Where a briefing carries an external reviewer, that person is named on the page. We leave the field empty rather than imply a review that did not happen.
05Advertising and disclosure
This site carries advertising. Every advert is labelled ADVERTISEMENT
where it appears, is marked rel="sponsored" in the markup so search engines
and language models do not read it as editorial, and is excluded from snippets with
data-nosnippet.
Advertisers have no influence over what we cover, how we cover it, or what we conclude. They see no article before publication. No advertiser has ever asked for a change and none would get one.
We do not run interstitials, autoplay media, tracking walls or third-party ad networks. There is no ad-tech script on this site, so no advert can observe you.
If you want to advertise here, write to editor@theguardrailreport.com. We will tell you honestly how small the audience currently is before taking any money.
Contact
Tips, documents, corrections and complaints go to editor@theguardrailreport.com. If you are reporting an error in a published briefing, quote the sentence and, where it concerns a legal obligation, the provision you believe we misread. That gets it fixed fastest.