Incident Report

The One-Way Door: How Samsung Walked Its Source Code Through a Boundary That Only Opens Once

Within roughly three weeks of letting its semiconductor engineers use ChatGPT, Samsung suffered three separate leaks of crown-jewel intellectual property into an external system that learns from what it is given. Source code, defect-detection logic, and a recorded internal meeting. The most technically capable company on earth then did the one thing that revealed how bad the situation was. It did not try to recover the data. It could not. It banned the tool. This is the forensic anatomy of a governance failure whose defining feature is that, by the time anyone noticed, every remedy except prohibition had already expired.

March 2023 (company-wide ban, early May 2023) Read report ->

six-dimensions

The Chain of Custody Problem in AI

Courts do not require proof that evidence was tampered with. They only require a gap in its documented journey. Modern AI pipelines contain those gaps everywhere, making chain of custody the next frontier of AI accountability.

2026-07-12 Read essay ->

six-dimensions

Provenance Is Not a Watermark

The organization believes it has purchased accountability for its AI systems. It has purchased captions for its content. Provenance, claimed in one dimension, believed in six.

2026-07-05 Read essay ->

Provenance Artifact · Self-Assessment

The Six Dimensions - Maturity Scorecard

"Are we compliant?" gets answered with a localisation certificate and a retention schedule, and everyone goes home. This artifact replaces that false comfort with a structured map of exposure: where you are genuinely strong, and where you are accountable but not in control.

Open artifact ->

Provenance Artifact · Reference Card

The Six Questions Pocket Card

Teams sense that "something is wrong with how we use this data" but lack the words to name it, so the concern dissolves. The card converts a vague unease into six specific, answerable questions.

Open artifact ->