Infrastructure / REPORTEncryption comes after discovery. Immutable copies, separate credentials, monitored deletion events and rehearsed restores are what actually preserve the ability to recover.
AI / REPORTLocal inference removes a real risk category, but storage, telemetry and model extraction still matter. Verifying the claim takes more than reading a policy.
Policy / REPORTPhishing resistant sign in is a genuine improvement, but recovery, shared devices and support scripts are where adoption is stalling.
AI / REPORTAgents take actions, and most deployments cannot reconstruct why. The fix is unglamorous: tool permissions, approval gates, logged trajectories and rehearsed shutdowns.