Sources

Digital Omnibus: MoFo (Dec 1 2025), Sidley (Jun 22 2026), Consilium (Jun 29 2026), Gibson Dunn (new dates), Jones Walker (what stayed live); CEN-CENELEC JTC 21 acceleration (Oct 23 2025); GPAI enforcement: Latham 2025, Praxikon 2026; draft classification guidelines (Commission, 19 May 2026; DLA Piper analysis Jun 2026); Freshfields deployer/provider #22 (Feb 26 2025); Annex III and Articles 12/14/25/26/49/71/73 (artificialintelligenceact.eu); Art. 73 draft guidance (Sep 26 2025; Latham); provenance research: arXiv 2604.04103 (Apr 2026), arXiv 2605.17169 (May 2026), arXiv 2607.08028 (Jul 2026), NIST AI 600-1; Deloitte Australia refund (Fortune Oct 2025; Vectara commentary [vendor]); CD-14: EDRi statement, Euronews (Jul 9 2025), Bloomberg "Stop the Clock" (Jul 3 2025), Commission refusal (Jul 4 2025), TechPolicy.Press multi-agent gap (Jan 13 2026); enforcement readiness: IAPP directory (Jun 17 2026); sovereignty: Kemp IT Law and cloudmagazin (Data Act), Commission CADA proposal (Jun 3 2026) + Covington (Jun 11 2026), AWS ESC GA (Jan 15 2026) [vendor], dpdpa.com rules analysis, KPMG on RBI FREE-AI (Aug 2025), RBI draft MRM (Jun 24 2026; secondary, verify), Hunton and Cooley on Colorado (2026), King & Spalding on state laws/EO, Loeb & Loeb and Bird & Bird on China; governance tooling: The Register and Fortune on ServiceNow kill switches (May 2026), Secure Privacy buyer's guide 2026, Gartner TRiSM and market-size notes; boards: ISS-Corporate 2026, NACD 2026 Outlook and Q2 2026 Directorship, Deloitte board effectiveness; standards: Atoro 42001 count (unofficial), ISO 42005/42006 pages, CSA agentic NIST-RMF profile; ISACA AAIA (May 2025). Re-verification list (quarterly, this track's own): OJ final text; final classification guidelines; final Art. 73 guidance; first JTC 21 citations; first enforcement actions; member-state readiness; RBI MRM final; CADA progress; China agent rules; weakly-sourced cost and count figures (flagged inline).

Added 2026-10-14 (accessed 12 to 14 October 2026): Queensland Government AI governance policy v2.0.0 https://www.forgov.qld.gov.au/information-technology/queensland-government-enterprise-architecture-qgea/qgea-directions-and-guidance/qgea-policies-standards-and-guidelines/artificial-intelligence-governance-policy and the FAIRA framework page https://www.forgov.qld.gov.au/information-technology/queensland-government-enterprise-architecture-qgea/qgea-directions-and-guidance/qgea-policies-standards-and-guidelines/faira-framework; Digital Transformation Agency, policy for the responsible use of AI in government v2.0 https://www.digital.gov.au/ai/ai-in-government-policy (page timed out; read through search summaries); OAIC resources on transparency for AI and automated decision-making (30 Sep 2026) https://www.oaic.gov.au/news/media-centre/new-resources-on-transparency-for-use-of-ai-and-automated-decision-making, with the law-firm reading at https://www.allens.com.au/insights-news/insights/2026/10/mandatory-automated-decision-making-disclosure-requirements-are-coming-key-takeaways-from-the-oaic-guidance/ [secondary]; APRA letter to industry on AI (30 Apr 2026) https://www.apra.gov.au/apra-letter-to-industry-on-artificial-intelligence-ai; MAS guidelines on AI risk management for financial institutions (7 Oct 2026) https://www.mas.gov.sg/-/media/mas-media-library/regulation/guidelines/bd/guidelines-on-artificial-intelligence-risk-management-for-financial-institutions/guidelines-on-artificial-intelligence-risk-management.pdf; IMDA Model AI Governance Framework for Agentic AI v1.5 (20 May 2026) https://www.imda.gov.sg/assets/63438074-73f6-4dcc-a281-030f42642cf4.pdf.