I turn policy into systems that enforce it.
Practitioner in runtime AI governance for regulated enterprises, across product, delivery, and public evidence.
- Colloxa: governance infrastructure
- Delivery: regulated lending environments
- The Control Plane: field notes
The AI Governance Execution Gap
Most organisations treat AI governance as a policy problem. The risk lives at runtime: the moment sensitive data, regulated context, or decisioning logic enters an AI model without enforceable control or evidence.
The control plane closes that gap: classify interactions, enforce policy, coach users, escalate risk, and produce audit-ready proof.
Read the framework →︎What I build in production.
Colloxa is the product proof: AI governance infrastructure that enforces policy at runtime and produces regulator-ready records for regulated enterprises.
POPIA · GDPR · EU AI Act · ISO 42001 · NDPR · Rwanda DPL · Zimbabwe CDPA · Kenya DPA
Control Fabric · Evidence Fabric · Agentic Risk Fabric · Trust Operations Fabric
Frameworks: POPIA, GDPR, EU AI Act, ISO 42001
Four fabrics: Control, Evidence, Agentic Risk, Trust Operations
Pilot by invitation
Technology, governance, and execution
One discipline in three mediums: build enforceable systems, run delivery where stakes are real, write as a practitioner in public.
- BuildingColloxa turns POPIA, GDPR, the EU AI Act, and ISO 42001 into technical enforcement and regulator-ready evidence.See governance infrastructure
- DeliveryDelivery leadership in regulated lending environments keeps the work grounded in operational reality: engineering, product, and compliance under real constraints.See delivery track record
- WritingThe Control Plane is the public record: AI governance from someone building the infrastructure. Tries Too Hard and my books carry judgement, leadership, and the human side of systems.Read The Control Plane
Why Africa matters for governance infrastructure
Operating context: South Africa. Design thesis: multi-regime layering across Zimbabwe National AI Strategy, POPIA, GDPR, the EU AI Act, and emerging African regulation. Country deep dives (including Zimbabwe) test whether runtime assurance can be built before production scale. That complexity produces infrastructure-first thinking.
Read the Africa essay →︎A practitioner thinking out loud
Field notes from building governance infrastructure: enforcement, evidence, and the operational gaps policy leaves behind.
- Field noteZimbabwe’s AI Governance Skip-Layer MomentThe country can build AI control infrastructure before AI systems reach production scale, or repeat the Western mistake of governing after deployment.
- Field noteAI governance without enforcement is theatreThe prompt is not the risk. The policy gap is.
- Field noteAfrica’s AI Governance Advantage Is InfrastructureWe have a chance to build evidence, control and accountability into the systems still being formed.
- Field notePrivacy by design failedPrivacy by design is not a compliance checkbox
Work with me.
Frameworks and evidence on this site. Colloxa when you need runtime infrastructure. Direct contact for delivery, advisory, and implementation conversations.