The AI Act from an engineer's desk: Articles 12-15
Human oversight, accuracy, robustness, cybersecurity. What AI Act Articles 12, 13, 14, 15 actually require of a high-risk system, in engineering terms.
Essays from the field.
Notes on building sovereign AI, EU regulations, and shipping software when cloud isn't an option.
GDPR and the AI Act in one SaaS
A case study from a regulated Polish SaaS: how Article 32 GDPR and Article 9 of the AI Act were mapped onto one working risk-management system.
Ten flaws AI writes into your code
Hardcoded secrets, SQL injection, path traversal, weak crypto. The CWEs that recur in AI-generated code, with a prevention pattern for each.
AI consultancy in Poland: seven questions first
The seven questions that separate a serious AI consultancy from a generalist IT shop that added a slide about large language models.
Sovereign AI: what it means for an EU company
AI running on infrastructure under your jurisdiction, with auditable data flows. The definition, the regulatory drivers and the case for a 50-person firm.
Three ways to deploy: from air-gap to cloud
Most firms think sovereign AI = on-prem or nothing. That is a false binary. There are three tracks, and most regulated SMEs will end up on Track B.
Dense or MoE: which open model to pick
Four open-weight models, hardware requirements that match reality, and a decision tree that does not lie about VRAM. As of May 2026.
Fractional AI Architect: when it pays off
EU AI Act enforcement starts 2 August 2026. Here is what a Fractional AI Architect actually does, and why most regulated SMEs need one now.
The coding model that stays on your servers (2026)
Qwen3-Coder-30B-A3B activates 3.3B parameters per token and fits a 48 GB workstation at AWQ 4-bit. Apache 2.0 licence.
Sovereign AI - why now
Three EU regulations killed the cloud-AI default for regulated SMEs in 2025. Here's what replaces it, and what you should build instead.
Essays from the field.