<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Halo blog</title>
    <link>https://omnitrusthalo.com/blog</link>
    <description>Weekly field guides on AI governance, shadow AI, MCP security, agent identity, compliance evidence, and keeping AI spend efficient.</description>
    <language>en-us</language>
    <lastBuildDate>Tue, 13 Oct 2026 12:00:00 GMT</lastBuildDate>
    <atom:link href="https://omnitrusthalo.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Build AI budgets that follow the owner</title>
      <link>https://omnitrusthalo.com/blog/ai-budgets-that-follow-the-owner</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-budgets-that-follow-the-owner</guid>
      <pubDate>Tue, 13 Oct 2026 12:00:00 GMT</pubDate>
      <description>AI budgets work when each agent has an owner, thresholds trigger clear actions, and exceptions leave a record. See how account and per-agent budgets fit together.</description>
      <category>AI Efficiency</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>Who reviews the governance assistant?</title>
      <link>https://omnitrusthalo.com/blog/reviewing-governance-assistant</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/reviewing-governance-assistant</guid>
      <pubDate>Tue, 06 Oct 2026 12:00:00 GMT</pubDate>
      <description>Assistants that draft governance work need provenance, permission boundaries, and an accountable human decision. Learn how to review their suggestions before anything is approved.</description>
      <category>AI Governance</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>What ISO/IEC 42001 asks of your AI software</title>
      <link>https://omnitrusthalo.com/blog/iso-42001-and-your-ai-software</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/iso-42001-and-your-ai-software</guid>
      <pubDate>Tue, 29 Sep 2026 12:00:00 GMT</pubDate>
      <description>ISO/IEC 42001 sets requirements for an organization's AI management system. Learn what auditors may ask of your AI tools and what evidence software can supply for that system.</description>
      <category>Compliance &amp; Evidence</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>How to evaluate an AI governance platform in one workflow</title>
      <link>https://omnitrusthalo.com/blog/evaluate-ai-governance-platform-workflow</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/evaluate-ai-governance-platform-workflow</guid>
      <pubDate>Tue, 22 Sep 2026 12:00:00 GMT</pubDate>
      <description>Use one realistic workflow to test discovery, policy, approval, failure behavior, and evidence. This run sheet works for any AI governance platform, including Halo.</description>
      <category>AI Governance</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>How to respond to an AI agent incident</title>
      <link>https://omnitrusthalo.com/blog/ai-incident-response-for-agents</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-incident-response-for-agents</guid>
      <pubDate>Tue, 15 Sep 2026 12:00:00 GMT</pubDate>
      <description>When an agent misbehaves, the steps are contain, preserve evidence, revoke credentials, review, and recover. Here is a plan you can rehearse before you need it.</description>
      <category>Agent Security</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>When should an AI system be reviewed again?</title>
      <link>https://omnitrusthalo.com/blog/when-to-review-ai-system-again</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/when-to-review-ai-system-again</guid>
      <pubDate>Tue, 08 Sep 2026 12:00:00 GMT</pubDate>
      <description>A review records a decision under particular conditions. Learn which changes should reopen it, how to scope the work, and how to keep both decisions on the record.</description>
      <category>Compliance &amp; Evidence</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>How to roll out AI controls without surprising your teams</title>
      <link>https://omnitrusthalo.com/blog/rolling-out-ai-controls-without-surprises</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/rolling-out-ai-controls-without-surprises</guid>
      <pubDate>Tue, 01 Sep 2026 12:00:00 GMT</pubDate>
      <description>Start in observe mode, move to warn, then enforce. Measure false positives, communicate each change, and keep a path back so the teams you govern keep trusting the controls.</description>
      <category>AI Governance</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>AI cost estimates need a coverage label</title>
      <link>https://omnitrusthalo.com/blog/ai-cost-estimate-coverage</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-cost-estimate-coverage</guid>
      <pubDate>Tue, 25 Aug 2026 12:00:00 GMT</pubDate>
      <description>Before an AI spend number guides investment, label what it covers, how it was priced, and what it leaves out. Learn how to reconcile estimates with provider bills.</description>
      <category>AI Efficiency</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>NIST AI RMF, from framework to runtime evidence</title>
      <link>https://omnitrusthalo.com/blog/nist-ai-rmf-runtime-evidence</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/nist-ai-rmf-runtime-evidence</guid>
      <pubDate>Tue, 18 Aug 2026 12:00:00 GMT</pubDate>
      <description>The NIST AI RMF organizes work into Govern, Map, Measure, and Manage. See how each function connects to operational controls and to runtime evidence a reviewer can inspect.</description>
      <category>Compliance &amp; Evidence</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>What happens when an AI control goes offline?</title>
      <link>https://omnitrusthalo.com/blog/ai-control-outage-behavior</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-control-outage-behavior</guid>
      <pubDate>Tue, 11 Aug 2026 12:00:00 GMT</pubDate>
      <description>AI controls depend on other systems. Map the dependencies, choose failure behavior by action, and test outages with synthetic data before production decides for you.</description>
      <category>Agent Security</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>What is an AI bill of materials, and who uses it?</title>
      <link>https://omnitrusthalo.com/blog/ai-bill-of-materials</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-bill-of-materials</guid>
      <pubDate>Tue, 04 Aug 2026 12:00:00 GMT</pubDate>
      <description>An AI bill of materials lists the models, tools, data sources, and services behind your AI. See what it holds, how CycloneDX fits, and how security, procurement, and audit use it.</description>
      <category>Shadow AI</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>A practical checklist for MCP governance</title>
      <link>https://omnitrusthalo.com/blog/mcp-governance-checklist</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/mcp-governance-checklist</guid>
      <pubDate>Tue, 28 Jul 2026 12:00:00 GMT</pubDate>
      <description>Follow one agent tool call from server inventory to authorization, approval, execution, and evidence with this seven-step MCP governance checklist for security teams.</description>
      <category>MCP &amp; Tools</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>Smart model routing that keeps governance intact</title>
      <link>https://omnitrusthalo.com/blog/smart-model-routing-governance</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/smart-model-routing-governance</guid>
      <pubDate>Tue, 21 Jul 2026 12:00:00 GMT</pubDate>
      <description>Cost-aware routing can match each workload to an approved model that fits its cost, quality, and policy needs. Here is how to pursue that savings potential and keep control.</description>
      <category>AI Efficiency</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>An agent's permission is only the start of the decision</title>
      <link>https://omnitrusthalo.com/blog/agent-permission-and-action-decisions</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/agent-permission-and-action-decisions</guid>
      <pubDate>Tue, 14 Jul 2026 12:00:00 GMT</pubDate>
      <description>A valid credential shows what an agent may request. Learn how purpose, scope, arguments, and approval shape whether one specific action should run.</description>
      <category>Agent Security</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>Browser AI needs its own governance model</title>
      <link>https://omnitrusthalo.com/blog/browser-ai-governance</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/browser-ai-governance</guid>
      <pubDate>Tue, 07 Jul 2026 12:00:00 GMT</pubDate>
      <description>Browser AI spans websites, extensions, uploads, and pastes. A workable governance model uses audit, warn, and block modes, domain rules, and clear privacy boundaries.</description>
      <category>Shadow AI</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>Connecting AI spend to AI value</title>
      <link>https://omnitrusthalo.com/blog/ai-spend-versus-ai-value</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-spend-versus-ai-value</guid>
      <pubDate>Tue, 30 Jun 2026 12:00:00 GMT</pubDate>
      <description>A token-cost dashboard shows where the money goes. Learn how to connect AI spend to owners, outcomes, cost boundaries, and honest assumptions before you scale.</description>
      <category>AI Efficiency</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>The EU AI Act timeline, translated for governance teams</title>
      <link>https://omnitrusthalo.com/blog/eu-ai-act-timeline-for-governance-teams</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/eu-ai-act-timeline-for-governance-teams</guid>
      <pubDate>Tue, 23 Jun 2026 12:00:00 GMT</pubDate>
      <description>The EU AI Act phases in over several years. See what each date means as a decision your team makes and a record you keep, and confirm the current official timeline first.</description>
      <category>Compliance &amp; Evidence</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>What should an AI audit log contain?</title>
      <link>https://omnitrusthalo.com/blog/useful-ai-audit-log</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/useful-ai-audit-log</guid>
      <pubDate>Tue, 16 Jun 2026 12:00:00 GMT</pubDate>
      <description>A useful AI audit log lets a reviewer reconstruct a consequential decision. Learn which fields to record, how to handle prompt content, and how to test the result.</description>
      <category>Compliance &amp; Evidence</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>Give AI agents identities you can revoke</title>
      <link>https://omnitrusthalo.com/blog/ai-agent-identity</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-agent-identity</guid>
      <pubDate>Tue, 09 Jun 2026 12:00:00 GMT</pubDate>
      <description>Agents that borrow a person's login or a shared service account leave reviewers guessing. Give each agent its own identity, scoped credentials, and a path to revocation.</description>
      <category>Agent Security</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>A policy is only useful if you can show where it runs</title>
      <link>https://omnitrusthalo.com/blog/where-ai-policy-runs</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/where-ai-policy-runs</guid>
      <pubDate>Tue, 02 Jun 2026 12:00:00 GMT</pubDate>
      <description>Turn an AI policy into a testable rule, name the point where it runs, and keep the evidence. This guide shows how to check each step before you enforce anything.</description>
      <category>AI Governance</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
    <item>
      <title>MCP security from server inventory to runtime enforcement</title>
      <link>https://omnitrusthalo.com/blog/mcp-security-from-inventory-to-runtime</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/mcp-security-from-inventory-to-runtime</guid>
      <pubDate>Tue, 26 May 2026 12:00:00 GMT</pubDate>
      <description>MCP servers behave like a supply chain. Learn how to inventory them, authorize them, scope their credentials, apply tool-call policy, and keep evidence reviewers can use.</description>
      <category>MCP &amp; Tools</category>
      <dc:creator>Halo Security Engineering</dc:creator>
    </item>
    <item>
      <title>Your AI inventory is a moving target</title>
      <link>https://omnitrusthalo.com/blog/ai-inventory-coverage-and-freshness</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/ai-inventory-coverage-and-freshness</guid>
      <pubDate>Tue, 19 May 2026 12:00:00 GMT</pubDate>
      <description>An AI inventory is only as useful as its coverage and freshness. Learn how to record where you looked, when you last looked, and which changes need a new decision.</description>
      <category>Shadow AI</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>Why shadow AI discovery has to reach browsers and endpoints</title>
      <link>https://omnitrusthalo.com/blog/shadow-ai-discovery-browsers-and-endpoints</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/shadow-ai-discovery-browsers-and-endpoints</guid>
      <pubDate>Tue, 12 May 2026 12:00:00 GMT</pubDate>
      <description>Gateway and network logs miss local apps, browser extensions, IDE tools, and local runtimes. See how metadata-first discovery on browsers and endpoints closes the gap.</description>
      <category>Shadow AI</category>
      <dc:creator>Halo Product Team</dc:creator>
    </item>
    <item>
      <title>What is an AI governance platform?</title>
      <link>https://omnitrusthalo.com/blog/what-is-an-ai-governance-platform</link>
      <guid isPermaLink="true">https://omnitrusthalo.com/blog/what-is-an-ai-governance-platform</guid>
      <pubDate>Tue, 05 May 2026 12:00:00 GMT</pubDate>
      <description>An AI governance platform connects AI inventory, decisions, runtime controls, and evidence for each system. Learn what it does and how to test one with a real use case.</description>
      <category>AI Governance</category>
      <dc:creator>Halo Research Team</dc:creator>
    </item>
  </channel>
</rss>
