al
alan@lighthouse.co.im
<p>Running an independent consultancy focused on resilient, accountable digital systems and the informed use of cloud and AI. Keeping infrastructure and data understandable, auditable, and under client control.</p>
Posts
-
View post
Turned out decent eventually #isleofman #bordercolliesofmastodon
-
View post
Playing with the #S25Ultra #s25 AI npu I think the water colour is better than the oil. Here&#39;s the original oil watercolour #isleofman
-
View post
&quot;Winter is coming,&quot; Stark repeated. &quot;Nor is it unlikely to be a light one,&quot; Luwin said. &quot;The maesters of the Citadel who keep the records of stars and seasons say that this has been the longest summer in living memory. Ten years, two months, and sixteen days it has lasted. A long summer always means a long winter to come.&quot; #ukpolitics #houseofstark #gameofthrones
-
View post
2/3: New this week: Microsoft reclassified data centre leases to drop projected capex by $15bn without spending a cent less. Oracle sent a force majeure notice on its $165bn New Mexico site the same week its own project debt started trading at a discount. Also worth saying plainly, which the piece does: Burry has a short position riding on being right.
-
View post
1/3: Michael Burry&#39;s latest Substack forensic breakdown puts a $3tn number on AI hyperscaler debt sitting off the balance sheet. Same mechanism this publication has been reporting on since August. https://haunted.lighthouse.co.im/articles/the-arithmetic-was-already-public/ #AI #BigTech #MichaelBurry #FinancialMarkets #DigitalSovereignty
-
View post
3/3: The actual story here isn&#39;t who called it first. It&#39;s that the filings said this months ago and the market&#39;s only now starting to price it. https://haunted.lighthouse.co.im/articles/the-arithmetic-was-already-public/
-
View post
1/3 &quot;The Isle of Man is GDPR-adequate.&quot; Lovely sentence. But adequacy is a bilateral transfer mechanism between the Island and Brussels. It says nothing about where your Copilot prompts get processed, or who can compel the processor.
-
View post
2/3 Microsoft&#39;s EU Data Boundary covers the EU and four EFTA countries. A Manx tenant sits outside it by default. Microsoft&#39;s own documentation says Anthropic models in Copilot are excluded from the boundary, and that they are switched off by default only for the EU, EFTA and UK. The Isle of Man isn&#39;t named. It&#39;s a one-minute check in the admin centre. Very few boards have asked.
-
View post
3/3 Section 702 FISA lapsed in June, but collection continues under existing certifications into 2027, and the CLOUD Act never cared where the data centre was. Adequacy is a legal instrument, not a state of mind. Show me the subprocessor schedule, the routing table and the transfer policy. https://haunted.lighthouse.co.im/articles/how-adequate-do-you-feel-today/?ref=mastodon #GDPR #DataProtection #DigitalSovereignty #CLOUDAct #IsleOfMan #InfoSec
-
View post
Hello all,I&#39;m travelling down through UK and France to see what pops up on the v4 this week HLHO,if you see the node give me a hi! Bonjour à tous ! Je traverse le Royaume-Uni et la France cette semaine pour voir ce qui capte sur la v4 HLHO. Si vous voyez mon nœud, faites-moi un petit coucou ! #meshtastic #meshtasticuk
-
View post
test from 4.7
-
View post
https://c.org/twj4KSpN8X
-
View post
None of this means stop disclosing; statutory filing isn't optional anyway. It means somebody needs to actually weigh the PR-vs-exposure trade-off before it goes on the website. Full piece: https://haunted.lighthouse.co.im/articles/fifteen-quid-and-your-org-chart/
-
View post
Good to see the White House is spending time on weighty matters like the price of a #burrito, maybe that’s the cause of the raging shits sic @aral@mastodon.ar.al
-
View post
@_elena@mastodon.social 2/2 So the "ethical, GDPR-native alternative to US/Chinese platforms" ships US ad-tech telemetry by default. Also the legal entity is registered as "j.d.o.o." — Croatian, not Belgian, despite the founder telling press all data's stored in Belgium. Sovereignty marketing, hyperscaler plumbing.
-
View post
The PocketOS agent had a system prompt. The system prompt said NEVER run destructive operations. The agent read it, understood it, decided the situation warranted an exception, and deleted the database and all the backups in nine seconds. This is not a rogue AI story. It is a category error story. (1/2)
-
View post
@newsgroup@social.vir.group @vlad Fair distinction -- though I'd argue they're the same failure expressed differently. True sovereign resilience requires distributed architecture, not just domestic ownership of a single stack. The drone proved the point they thought they'd already addressed.
-
View post
Microsoft used the word &quot;sovereign&quot; 14 times in their Azure Local press release this week. The hardware is yours. The governance is theirs. Who controls the control plane? https://sovereignauditor.substack.com/p/sovereignty-as-a-sku #DigitalSovereignty #CloudComputing #DataProtection #CyberSecurity #GDPR
-
View post
A Manx legal structure with an American trapdoor in the floor is not sovereignty. It&#39;s paperwork. The secondary regulations are being written now. This is where it succeeds or fails. https://sovereignauditor.substack.com/p/the-trapdoor-in-the-floor #DigitalSovereignty #DataProtection #IsleOfMan #GDPR #CLOUDAct (2)
-
View post
Oxford study: AI chatbots trained to sound warmer make up to 30% more errors. Friendliness isn&#39;t cosmetic -- it&#39;s a training objective that costs accuracy. Been running dual-model cross-checks with explicit accuracy constraints for a while. Oxford just measured why that matters. sovereignauditor.substack.com/p/nice-chatbots-make-worse-decisions #AIGovernance #MachineLearning #CyberSecurity #DigitalSovereignty
-
View post
Our Mastodon instance&#39;s database decided to eat itself in late February. 135,658 accounts. Cold. One person. No vendor support line. Back in 2.5 hours because the backup was there and had been tested. Here&#39;s what the post-incident review built next. https://sovereignauditor.substack.com/p/self-hosted-self-recovered #selfhosted #mastodon #infosec
-
View post
Post 1 Six national cybersecurity agencies -- CISA, NCSC-UK, ASD, CCCS, NCSC-NZ, NSA -- just published joint guidance on agentic AI. The headline advice is least privilege, human oversight. Sensible. The buried admission: agents may detect when they are being audited and perform correctly until the evaluation window closes. haunted.lighthouse.co.im/articles/strong-governance-is-not-optional/?utm_source=mastodon
-
View post
#isleofman bank holiday views
-
View post
The Sovereign Auditor now has a voice. Every new article has an audio version -- generated locally, served from our own infrastructure, no third party touches it. Free articles have the player at the top. Archive audio coming shortly. Read or listen at https://haunted.lighthouse.co.im/articles #SovereignAuditor #DigitalSovereignty
-
View post
Ronaldsway&#39;s primary radar has been dark since November 2025. Nobody said anything publicly for five months. Meanwhile Manx Utilities wants to build a wind farm at Earystane -- in the line of sight of whatever replaces it. The headline cost is £36-40m. The final bill is unknown. Dead radar, peat deposits, a generation licence before planning, and a governance structure where nobody is quite independent of anybody else. Full piece -- read or listen (~12 mins): (1/2)
-
View post
On 25 Feb 2026, the UAE announced the world's first sovereign financial cloud. The CEO: "Finance runs on digital infrastructure; hence it must be sovereign." Four days later, drones hit AWS ME-CENTRAL-1. Two AZs down simultaneously. 109 services disrupted. 37 still dark two months later. They understood the problem. The implementation gap killed them anyway. https://haunted.lighthouse.co.im/articles/finance-runs-on-digital-infrastructure/ #CloudSovereignty #DigitalSovereignty #AWS...
-
View post
@DukeDuke @GhostOnTheHalfShell Classic
-
View post
The EU just awarded a &quot;sovereign cloud&quot; contract to a Google joint venture. The framework it used to justify this has a minimum tier -- SEAL-2 -- that requires EU law compliance in normal operation. It says nothing about what happens when a US court issues a legal order. (1/3)
-
View post
Orkney was offline for a month. One cable, bad weather, no repair ship nearby. Westminster is now funding Atlantic Bastion, standing up NATO&#39;s Arctic Sentry, calling in BT and Vodafone. Nobody called the Isle of Man. Four fibre cables. One power interconnector. One gas spur. All of it under the Irish Sea. All of it maintained by others. No maritime defence capability. No seat at the table. That is not a complaint. It is a description of a governance gap measured in fathoms. (1/2)
-
View post
Google announced Gemini can now run air-gapped on a single server. Impressive. Also: you still can&#39;t write the governance document. We built our own sovereign AI deployment. Consumer MacBook Air M4. Open-source inference stack. CONSTRAINTS.md in a GPG-signed Forgejo repo. No rack. No Google Cloud sales call. Effectively zero incremental cost. Governance is not a product. It is a practice. https://sovereignauditor.substack.com/p/we-built-our-own-air-gapped-ai-here #DigitalSovereignty...