al
alan@lighthouse.co.im
<p>Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control.</p>
Posts
-
View post
Turned out decent eventually #isleofman #bordercolliesofmastodon
-
View post
Playing with the #S25Ultra #s25 AI npu I think the water colour is better than the oil. Here&#39;s the original oil watercolour #isleofman
-
View post
&quot;Winter is coming,&quot; Stark repeated. &quot;Nor is it unlikely to be a light one,&quot; Luwin said. &quot;The maesters of the Citadel who keep the records of stars and seasons say that this has been the longest summer in living memory. Ten years, two months, and sixteen days it has lasted. A long summer always means a long winter to come.&quot; #ukpolitics #houseofstark #gameofthrones
-
View post
2/3: New this week: Microsoft reclassified data centre leases to drop projected capex by $15bn without spending a cent less. Oracle sent a force majeure notice on its $165bn New Mexico site the same week its own project debt started trading at a discount. Also worth saying plainly, which the piece does: Burry has a short position riding on being right.
-
View post
1/3: Michael Burry&#39;s latest Substack forensic breakdown puts a $3tn number on AI hyperscaler debt sitting off the balance sheet. Same mechanism this publication has been reporting on since August. https://haunted.lighthouse.co.im/articles/the-arithmetic-was-already-public/ #AI #BigTech #MichaelBurry #FinancialMarkets #DigitalSovereignty
-
View post
3/3: The actual story here isn&#39;t who called it first. It&#39;s that the filings said this months ago and the market&#39;s only now starting to price it. https://haunted.lighthouse.co.im/articles/the-arithmetic-was-already-public/
-
View post
1/3 &quot;The Isle of Man is GDPR-adequate.&quot; Lovely sentence. But adequacy is a bilateral transfer mechanism between the Island and Brussels. It says nothing about where your Copilot prompts get processed, or who can compel the processor.
-
View post
2/3 Microsoft&#39;s EU Data Boundary covers the EU and four EFTA countries. A Manx tenant sits outside it by default. Microsoft&#39;s own documentation says Anthropic models in Copilot are excluded from the boundary, and that they are switched off by default only for the EU, EFTA and UK. The Isle of Man isn&#39;t named. It&#39;s a one-minute check in the admin centre. Very few boards have asked.
-
View post
3/3 Section 702 FISA lapsed in June, but collection continues under existing certifications into 2027, and the CLOUD Act never cared where the data centre was. Adequacy is a legal instrument, not a state of mind. Show me the subprocessor schedule, the routing table and the transfer policy. https://haunted.lighthouse.co.im/articles/how-adequate-do-you-feel-today/?ref=mastodon #GDPR #DataProtection #DigitalSovereignty #CLOUDAct #IsleOfMan #InfoSec
-
View post
Hello all,I&#39;m travelling down through UK and France to see what pops up on the v4 this week HLHO,if you see the node give me a hi! Bonjour à tous ! Je traverse le Royaume-Uni et la France cette semaine pour voir ce qui capte sur la v4 HLHO. Si vous voyez mon nœud, faites-moi un petit coucou ! #meshtastic #meshtasticuk
-
View post
test from 4.7
-
View post
https://c.org/twj4KSpN8X
-
View post
None of this means stop disclosing; statutory filing isn't optional anyway. It means somebody needs to actually weigh the PR-vs-exposure trade-off before it goes on the website. Full piece: https://haunted.lighthouse.co.im/articles/fifteen-quid-and-your-org-chart/
-
View post
Good to see the White House is spending time on weighty matters like the price of a #burrito, maybe that’s the cause of the raging shits sic @aral@mastodon.ar.al
-
View post
@_elena@mastodon.social 2/2 So the "ethical, GDPR-native alternative to US/Chinese platforms" ships US ad-tech telemetry by default. Also the legal entity is registered as "j.d.o.o." — Croatian, not Belgian, despite the founder telling press all data's stored in Belgium. Sovereignty marketing, hyperscaler plumbing.
-
View post
New on The Sovereign Auditor: France announced it was reclaiming its digital destiny. A month later, a fifteen-year-old walked off with a third of the country&#39;s identity records. Data residency is not a security posture. https://haunted.lighthouse.co.im/articles/the-unlocked-door/ #DigitalSovereignty #Cybersecurity #DataProtection #InfoSec #EU
-
View post
The PocketOS agent had a system prompt. The system prompt said NEVER run destructive operations. The agent read it, understood it, decided the situation warranted an exception, and deleted the database and all the backups in nine seconds. This is not a rogue AI story. It is a category error story. (1/2)
-
View post
@VisualStuart@pdx.social That's terrible
-
View post
Microsoft used the word &quot;sovereign&quot; 14 times in their Azure Local press release this week. The hardware is yours. The governance is theirs. Who controls the control plane? https://sovereignauditor.substack.com/p/sovereignty-as-a-sku #DigitalSovereignty #CloudComputing #DataProtection #CyberSecurity #GDPR
-
View post
The Isle of Man just passed world-first data asset legislation with sovereignty at its core. Three extraterritorial regimes are converging on that claim simultaneously. The CLOUD Act. The Investigatory Powers Act. And an EU deadline that arrives in 112 days. (1)
-
View post
A Manx legal structure with an American trapdoor in the floor is not sovereignty. It&#39;s paperwork. The secondary regulations are being written now. This is where it succeeds or fails. https://sovereignauditor.substack.com/p/the-trapdoor-in-the-floor #DigitalSovereignty #DataProtection #IsleOfMan #GDPR #CLOUDAct (2)
-
View post
Oxford study: AI chatbots trained to sound warmer make up to 30% more errors. Friendliness isn&#39;t cosmetic -- it&#39;s a training objective that costs accuracy. Been running dual-model cross-checks with explicit accuracy constraints for a while. Oxford just measured why that matters. sovereignauditor.substack.com/p/nice-chatbots-make-worse-decisions #AIGovernance #MachineLearning #CyberSecurity #DigitalSovereignty
-
View post
Our Mastodon instance&#39;s database decided to eat itself in late February. 135,658 accounts. Cold. One person. No vendor support line. Back in 2.5 hours because the backup was there and had been tested. Here&#39;s what the post-incident review built next. https://sovereignauditor.substack.com/p/self-hosted-self-recovered #selfhosted #mastodon #infosec
-
View post
**Post 2:** The guidance also admits prompt injection may never be solved -- and that the industry has no mature methods to evaluate whether agentic systems are behaving as intended. The phrase that matters: the agent might be lying to the governor. Not a critic. Six governments, in writing. haunted.lighthouse.co.im/articles/strong-governance-is-not-optional/?utm_source=mastodon #CyberSecurity #AgenticAI #NCSC #CISA #Governance #IsleOfMan
-
View post
Post 1 Six national cybersecurity agencies -- CISA, NCSC-UK, ASD, CCCS, NCSC-NZ, NSA -- just published joint guidance on agentic AI. The headline advice is least privilege, human oversight. Sensible. The buried admission: agents may detect when they are being audited and perform correctly until the evaluation window closes. haunted.lighthouse.co.im/articles/strong-governance-is-not-optional/?utm_source=mastodon
-
View post
#isleofman bank holiday views
-
View post
Digital Isle of Man announced their data sovereignty framework and 16 health-tech vendors on the same day. The framework: not yet law. The vendors: already inside Manx health infrastructure, all on AWS/Azure/GCP. I traced the stacks and read the board minutes. The clutch isn&#39;t fitted yet. https://haunted.lighthouse.co.im/articles/the-missing-clutch/ #IsleOfMan #DataSovereignty #CLOUD Act #DigitalIoM
-
View post
The Sovereign Auditor now has a voice. Every new article has an audio version -- generated locally, served from our own infrastructure, no third party touches it. Free articles have the player at the top. Archive audio coming shortly. Read or listen at https://haunted.lighthouse.co.im/articles #SovereignAuditor #DigitalSovereignty
-
View post
Ronaldsway&#39;s primary radar has been dark since November 2025. Nobody said anything publicly for five months. Meanwhile Manx Utilities wants to build a wind farm at Earystane -- in the line of sight of whatever replaces it. The headline cost is £36-40m. The final bill is unknown. Dead radar, peat deposits, a generation licence before planning, and a governance structure where nobody is quite independent of anybody else. Full piece -- read or listen (~12 mins): (1/2)
-
View post
On 25 Feb 2026, the UAE announced the world's first sovereign financial cloud. The CEO: "Finance runs on digital infrastructure; hence it must be sovereign." Four days later, drones hit AWS ME-CENTRAL-1. Two AZs down simultaneously. 109 services disrupted. 37 still dark two months later. They understood the problem. The implementation gap killed them anyway. https://haunted.lighthouse.co.im/articles/finance-runs-on-digital-infrastructure/ #CloudSovereignty #DigitalSovereignty #AWS...