Tag
Backend
-
What the EU AI Act actually requires of a masking layer
The Act never says masking. Three articles, on data, logging and human oversight, each describe a property a masking layer either has or does not.
-
Your model is not the product. The pipeline around it is.
Swap the model and almost nothing changes. Swap the masking layer, the permissions, or the monitoring, and the system stops running or starts leaking.
-
Permissions that travel with the person
An AI assistant should own no permissions. It borrows the rights of the person using it, and that single design choice bounds every attack path.