Notes on AI policy and records.

Posts

A woman stands by a window working on a laptop.

What is shadow AI?

AI already in use at your agency that no one approved and no one can see.

A woman works on a laptop at a desk with stacks of paper files while a man in a suit stands beside a whiteboard.

What is an AI audit trail, and what makes one trustworthy

Who used which AI tool, what was sent and returned, when, and whether policy held.

Rows of wooden legislative desks with nameplates and small flags.

What evidence does an auditor expect for AI use in a state agency?

A current AI inventory, proof your AI policy was followed, and a running record of AI use.

An older man and a woman in business clothes stand by a bright window reading papers together.

An AI acceptable use policy is not enforcement

Most agencies have an AI acceptable use policy. Few can show it held.

A woman holding a paper and a man leaning over a laptop look at the screen together.

How do you prove what an AI model was given?

A record made when the request was sent, naming who and what.

A police officer in uniform writes on a notepad.

What are the audit trail requirements for AI use in a police department?

CJIS sets a general audit floor for any system touching CJI.

A stone county courthouse with a clock tower stands behind trees on a sunny day.

Is an AI-generated police report discoverable?

Discovery rules and Brady decide whether an AI police report draft is disclosed.

A woman hands papers across a conference table to two seated men beside a ballot box with a flag.

What would New York City's AI kill switch bill require?

Outside validation, a shut-down capability for AI models, and 24-hour incident reports from city contractors.

A long aisle of labelled wooden file drawers in a records room.

What has to be preserved when an officer uses AI to draft a report?

Keep what the tool was given, the AI's first draft, and who used it.

A police officer in daylight speaks with a driver through a car window.

What CJIS requires before staff use AI

What auditors will ask, and what a defensible record looks like.

A man with headphones works on a laptop beside a large monitor.

How do you stop an AI coding agent from running destructive commands?

Limit what it can reach, require approval for irreversible actions, and keep a record of what it tried.

Four colleagues of different ages gather around a laptop at a table by a large window.

Agentic AI governance: control the action, not the prompt

Why agentic AI governance must move to the action boundary.

See Verillian on a real device.

The Verillian console home for the last 30 days: 10 devices, 684 requests, 613 allowed and 71 denied, the Enforce, Audit and Contain cards with the two active holds, and the latest refused requests.The Verillian console home for the last 30 days: 10 devices, 684 requests, 613 allowed and 71 denied, the Enforce card with two suggested policies waiting, and the top of the Audit card.