Every item cites a source that was opened and read. Primary sources come first: the lab's own report, the agency's own page, the vendor's own advisory. Press is a fallback when the primary cannot be reached, and an item carried on press is upgraded when the primary opens.
Nothing is invented or estimated. A CVE number, figure, date or quote that cannot be verified is dropped rather than guessed. Where sources disagree on a figure, the primary wins and the disagreement is noted. The same event arriving from several directions is filed once.
The board reports; it does not recommend or forecast.
An empty lane on a quiet day is the honest outcome. Lanes are never padded.
A tier describes the kind of claim, not the identity of the publisher. The same lab can land in two tiers in one post: “our model escaped its sandbox” is on the record; “our model scores 92% on a cyber benchmark” is self-reported.
| Confirmed by org | The organisation that was affected says it happened to them. |
| Claimed by attacker | The attacker says they did it, and nobody else has stood behind it. |
| Reported by researchers | Security researchers reported it and the victim has not confirmed. |
| Reported by press | Established press reported it and no primary source could be opened. |
| On the record | A statement the speaker has formally put in its own name, where it is the only possible authority and the statement is itself the event: a bill is introduced, an agency issues an alert, a lab discloses what its own model did. |
| Self-reported, untested | A testable claim where the party measuring is the party being measured and no one independent has checked: benchmark scores, capability assertions, launches written to read as findings. Flagged, not endorsed. |
Each item sits in one lane: what AI systems can now do (Capability), what governments and standards bodies do about it (Policy), defensive tooling and guidance (Defense), real-world incidents (Attacks), and how insurers and investors price the risk (Markets). An item's date is when the event happened or was published; the board separately records when it learned of it.
Mistakes are corrected on the item itself and logged in public on the corrections page. Dated snapshots in the archive are never edited.