Sources
All accessed 2026-08-19. [vendor] marks vendor-published claims about the publisher's own market.
Digital Omnibus: MoFo (Dec 1 2025), Sidley (Jun 22 2026), Consilium (Jun 29 2026), Gibson Dunn (new dates), Jones Walker (what stayed live); CEN-CENELEC JTC 21 acceleration (Oct 23 2025); GPAI enforcement: Latham 2025, Praxikon 2026; draft classification guidelines (Commission, 19 May 2026; DLA Piper analysis Jun 2026); Freshfields deployer/provider #22 (Feb 26 2025); Annex III and Articles 12/14/25/26/49/71/73 (artificialintelligenceact.eu); Art. 73 draft guidance (Sep 26 2025; Latham); provenance research: arXiv 2604.04103 (Apr 2026), arXiv 2605.17169 (May 2026), arXiv 2607.08028 (Jul 2026), NIST AI 600-1; Deloitte Australia refund (Fortune Oct 2025; Vectara commentary [vendor]); CD-14: EDRi statement, Euronews (Jul 9 2025), Bloomberg "Stop the Clock" (Jul 3 2025), Commission refusal (Jul 4 2025), TechPolicy.Press multi-agent gap (Jan 13 2026); enforcement readiness: IAPP directory (Jun 17 2026); sovereignty: Kemp IT Law and cloudmagazin (Data Act), Commission CADA proposal (Jun 3 2026) + Covington (Jun 11 2026), AWS ESC GA (Jan 15 2026) [vendor], dpdpa.com rules analysis, KPMG on RBI FREE-AI (Aug 2025), RBI draft MRM (Jun 24 2026; secondary, verify), Hunton and Cooley on Colorado (2026), King & Spalding on state laws/EO, Loeb & Loeb and Bird & Bird on China; governance tooling: The Register and Fortune on ServiceNow kill switches (May 2026), Secure Privacy buyer's guide 2026, Gartner TRiSM and market-size notes; boards: ISS-Corporate 2026, NACD 2026 Outlook and Q2 2026 Directorship, Deloitte board effectiveness; standards: Atoro 42001 count (unofficial), ISO 42005/42006 pages, CSA agentic NIST-RMF profile; ISACA AAIA (May 2025). Re-verification list (quarterly, this track's own): OJ final text; final classification guidelines; final Art. 73 guidance; first JTC 21 citations; first enforcement actions; member-state readiness; RBI MRM final; CADA progress; China agent rules; weakly-sourced cost and count figures (flagged inline).
Source: research/R11-governance-risk-sovereignty/sources.md in the evidence repository behind this site.