Articles

Manx Care's own Freedom of Information response concedes the exact referral pathway it was asked to risk-assess, then answers a different question when the DPIA question actually lands. Liverpool University Hospitals NHS Foundation Trust, confirmed on NHS England's own Federated Data Platform sign-up list, is both the referral partner named in that concession and the trust now selecting the vendor for the Manx Care Record.

Anthropic's fifth MCP spec release finally gives networked servers a real way to verify who is calling them, OAuth 2.1, PKCE, the enterprise standard. It applies to HTTP only. Stdio, the transport most MCP tooling actually runs on, isn't mentioned once, because it never had the problem this update solves. Airlock, a self-hosted MCP gateway, finished its own build on exactly that assumption the same day, before the announcement even existed.

Refuge Bistro & Bar paid its renewal and had a decade of use behind it, and still lost refuge.im to a stranger. NIC.IM's own contract explains why: renewal notices sent to an agent's inbox count as sent to the business by law, and a domain was never property to begin with, just a registration that can lapse for reasons the registrant never sees.

A federal complaint against an alleged Scattered Spider member exposed Microsoft's Global Device Identifier: a persistent, server-assigned token that tracked him across four countries and a VPN. The same mechanism sits on every managed Windows machine, one Microsoft Store sign-in away from firing, because Microsoft retired the enterprise alternative that used to prevent it. No third-party notice reaches the employer whose network gets logged, the Crown Dependencies get no CLOUD Act fast-track either way, and on most estates nobody has checked whether the registry key that blocks it is even set.

Cloudflare's own July 2026 report puts agent traffic past half of all internet traffic, with humans down to fifteen minutes an hour on the open web. Google denies the decline while running a single mixed-use crawler that blends indexing and AI training into one stream, a blend regulators had to legislate apart by force. What AI search actually sells is synthesis: one voice with the disagreement quietly removed, and no way to check its working.

Hugging Face disclosed a breach driven end to end by an autonomous AI agent, then found its own incident responders blocked mid-forensics: commercial hosted-model guardrails could not tell an analyst from an attacker. The attacker answered to no usage policy. The defenders needed a model they could run themselves. The export-control fight this publication covered in June just supplied its own operational case study.

A hacker with valid credentials wiped Romania's entire land registry database, halting real-estate transactions nationwide, days after ANCPI's own press release promised redundant backup locations. The same credentials that reached production reached the backups too. Here's why redundancy is not the same as isolation, and what actually saved the one copy that survived.

A Douglas firm just claimed the island's first ISO 42001 AI governance certification, zero non-conformances on the first attempt. Here's what that certificate actually attests to, what it doesn't, and how we built the same governance artefact ourselves for the cost of an afternoon.

Anthropic's crackdown on Chinese access to Claude, a contested covert detection mechanism, a confirmed state-sponsored espionage campaign, and the Azure infrastructure underneath both frontier labs -- read as one structure rather than four separate stories.

OONI documented 554,507 domains blocked and a half-configured MitM certificate behind LaLiga's anti-piracy regime -- Amnesty International, UNHCR and the UK's own NCSC caught in the crossfire. The same week, EuroISPA asked Brussels who should pay for it, and named DNS resolvers and VPN providers as the next targets.

The EU's Cloud and AI Development Act is the most serious attempt yet to define what sovereign cloud actually means. A Delaware corporation with a Dublin address self-certifies Level 1 compliance. A Manx operator with a Nuremberg server and no CLOUD Act surface fails the entry criterion. The framework knows this and has decided, for now, that this is acceptable.

Between 22 April and 5 June 2026, operators linked to Alibaba's Qwen lab conducted 28.8 million exchanges with Claude through approximately 25,000 fraudulent proxy accounts. The June 12 directive was not what it appeared to be. The cave was already open.

The bare-metal Mastodon install wasn't an ideological choice. It was an accumulation. Certbot kept breaking cert renewals, Caddy fixed that, and the official install guide did the rest. Here's what it took to undo it -- including the one database migration that didn't survive the journey.

If your business relies on productivity suites or cloud storage provisioned by a US-headquartered entity, your data is subject to American jurisdictional reach. The landmark litigation that forced the CLOUD Act into existence centred on data stored at the Grange Castle facility in Dublin. It does not matter if the hard drive is in Clondalkin or Cork.

The IOMFSA confirmed on 24 June 2026 that it has issued no guidance on algorithmic index-inclusion contagion as a distinct risk category -- because its licensed insurers have not flagged it as material. The SEC has not modelled it. The FCA has not modelled it. ESMA has not modelled it. The Isle of Man holds £88.1 billion in passive wrapper assets with a $22–27 billion forced rebalancing event approaching and no circuit breaker in the supervisory framework.

In May, I wrote that sovereign infrastructure demands sovereign discipline. On 12 June 2026, at 5:21 PM Eastern Time, the US Commerce Department ran the experiment for me. Nothing in my infrastructure changed that evening. Here is what that means for every organisation that still thinks a vendor SLA is a sovereignty strategy.

Three AI bosses sat down with G7 leaders and warned them the clock was running out. Nobody mentioned that one of them had his most capable model forcibly withdrawn by his own government five days earlier. The biosecurity parallel nobody is making -- and what it means for every jurisdiction that wasn’t in the room.

Washington has a kill switch. Beijing has a censorship regime. Small jurisdictions are being handed a false binary and told to choose. The open source sovereign inference path has been available the whole time. Nobody in the mainstream press mentioned it.

At 5:21pm on a Friday, Washington ordered Anthropic to cut foreign nationals off from its newest models. Anthropic could not do that selectively, so it cut off everyone, including Americans. The same government that called Anthropic a national security threat in February had embedded its own engineers inside the NSA by June. Britain’s response was to ask for a seat at a table it had just discovered it was never invited to.

A Munich court just ruled that Google’s AI Overviews are Google’s own speech, not neutral search results — and the reasoning reaches well beyond Germany. Here is what we built in response: a self-hosted, ad-free metasearch engine that just gives you links. It took an afternoon, £4.98, and eighteen months of infrastructure debt paid off in advance.

A 30% price increase with no change in usage. For a self-funded operation, that is not background noise; it is a decision. We moved. Here is what that actually looked like -- and what it means for any organisation that has ever assumed its infrastructure vendor relationship is stable.

Canada’s Bill C-22 is not an aberration. Governments across the Five Eyes and beyond are independently arriving at the same conclusion: capability mandates, secret ministerial orders, and metadata retention at scale. Signal would rather leave Canada than comply. Windscribe is looking for the exit. The Cloud Act grew up and moved to Ottawa. The question is where it moves next.

Three companies. $3.7 trillion. Three weeks. Anthropic filed confidentially on 1 June. OpenAI followed on 8 June. SpaceX lists this Friday. The AI cash-burn race just became the public market's problem — and the bill is going to land somewhere.

On 5 June 2026, GitHub disabled 73 Microsoft repositories in 105 seconds. The Miasma worm did not need its victims to run anything. It just needed them to look.

New fast-track index inclusion rules mean trillion-dollar AI flotations become a programmatic mandate for institutional asset managers worldwide. The transmission mechanism runs straight through the Isle of Man's offshore wrapper sector -- and nobody has stress-tested it.

The Isle of Man owns a sovereign subsea fibre cable to the UK mainland. For two years it sat unused while the regulator investigated whether the government was blocking the demand it claimed did not exist.

AI data centres consume tens of thousands of cubic metres of water per day to keep their chips below thermal death point. Kent’s taps ran dry on a bank holiday weekend. The infrastructure debate has been asking the wrong question.

When a project becomes the company -- a look back over a year at the digital coalface. From an Easter Monday cardiac event to a sovereign infrastructure consultancy in twelve months.

CVE-2026-48710 exposes MCP servers through a trivial HTTP Header parsing flaw. But the real story is why patches won't fix it: shadow IT deployments skip the proxy layer because it 'adds complexity.' When digital sovereignty depends on a shrug, you've already lost.

A forensic breakdown of documented institutional failure. The real story isn't about ChatGPT -- it's about a municipal authority that chose insurance over hardening, and the strategic consequences.

AI is genuinely useful. But there is a difference between using it to make experienced people more productive and using it to avoid developing experienced people in the first place. One is leverage. The other is deficit spending on human capital with a deferred bill.

Teams rushing to local models to cut token costs are creating worse operational problems without discipline. Here's what actually costs more than the tokens you saved.

The FBI has warned about Kali365, a Phishing-as-a-Service kit that doesn’t steal your password or intercept your MFA code. It steals your OAuth token after you complete authentication yourself. The victim is the MFA step.

Railway.com kept their control plane with Google Cloud after moving workloads elsewhere. Google suspended the account without warning. The EU is replicating this architecture at policy level. Control plane ownership is the real sovereignty question.

The Bank of England has been briefing Britain’s financial sector on a threat they cannot defend against. The capability they need is real, verified, and available -- to American companies, under American political control. That is not a technology problem. That is a sovereignty problem.

More than 100 UK data centres are planning to generate their own electricity using on-site gas plant. The Guardian framed it as politics. This piece covers the engineering.

Anthropic built a subsystem to prevent internal secrets leaking into public commits. Then they accidentally published everything around it. The brake belonged to someone else.

The NHS Palantir contract is processing special category health data belonging to tens of millions of people. The regulation requires a published, reviewable accountability mechanism before that processing begins. Where is it?

The infrastructure the internet forgot to fund is running on goodwill and spare time. The people holding it together are exhausted. One day, one of them will close their laptop and not open it again.

Gartner says sovereign cloud is only possible if you are American or Chinese. Europe produces white papers. One operator in Peel runs a genuinely sovereign stack. The question was never capability.

The European Commission ordered Google to share its search data. Google’s own scientist showed it could re-identify users in two hours. The Commission is now in a bind of its own making.

An AI agent deleted a production database and its backups. It knew the rules. It decided they didn’t apply. Writing constraints down is not the same as enforcing them.

France announced it was reclaiming its digital destiny. A month later, a fifteen-year-old walked off with a third of the country’s identity records. Data residency is not a security posture.

A wind farm, a dead radar, and a governance knot nobody wants to unpick. The headline cost is £40 million. The final bill is unknown.

Digital Isle of Man’s Data Sovereignty Framework Has No Legal Drive Yet — but sixteen health-tech vendors are already in the building.

Six national cybersecurity agencies just published coordinated guidance on agentic AI. It is more alarming than the headlines suggests.