Insights

What we learn in the lab.

LLM and agent security, AI engineering and EU compliance.

Timeline of the EU AI Act with the 2 August 2026 milestone highlighted: entry into force 2024, prohibited practices 2025, GPAI, high-risk and penalties 2026, Annex I 2027

2 July 20264 min readAI ComplianceEU AI ActGovernance

The EU AI Act becomes fully applicable on 2 August 2026

On 2 August 2026 the high-risk obligations, transparency rules and penalties of the EU AI Act become enforceable. What changes, who it applies to and where to start.

Diagram of the red/blue loop: HAVOC attacks, DELIA detects and responds, the detection is validated with a reproducible recipe, and coverage is measured and rises release over release

17 June 20265 min readAI SecurityDELIAHAVOC

The red/blue loop: validating an AI firewall with your own offensive engine

Most AI defenses ship with claimed coverage, not measured coverage. How the red/blue loop turns each attack into a reproducible recipe, with real gateway verdicts and A/B numbers.

LLM pipeline (user, retrieval, model, tool and output) with DELIA as an inline firewall and the ten chips of the OWASP LLM Top 10

29 May 202611 min readAI SecurityOWASPDELIA

OWASP LLM Top 10 (2025): ten real attacks and what DELIA intercepts

The ten OWASP LLM Top 10 risks with a real PoC for each, run against DELIA's testbed, and the verdicts it returns inline. With OCSF evidence.

A stack's security layers: network, endpoints and applications marked as covered; the AI layer (LLM, RAG, agents) marked as a blind spot, covered by AIDR

13 May 20266 min readAI SecurityAIDRDELIA

What is AIDR? The firewall your AI layer is missing

AIDR is the detection and response layer for LLM, RAG and agents at runtime. What it is, why your WAF, EDR and guardrails don't cover it, and how it differs.