policy · February 18, 2026 · 8 min read

Policy-as-code — the missing layer for government AI

Compliance frameworks shouldn't live in Word documents. They should be enforced at the platform layer, with the same discipline as IaC.

Most government AI compliance frameworks are PDFs that summarize what should happen. The gap between the PDF and the deployed model is where every governance failure lives.

Policy-as-code closes that gap. Retention rules, redress paths, model-version pinning, audit-export schedules — encoded in the same repository as the model deployment. Reviewed in the same pull request. Tested in the same CI pipeline.

Authors

Leyla Haddad
Chief Policy & Compliance Officer