From the airlock team.

Walkthroughs, deep-dives, and product updates. More articles on the way.

Shadow AI is not your employees' fault. You have not written the rules. (free AI policy generator inside)

Shadow AI is not shadow IT. Tools rotate every quarter, share nothing with each other, and act on your systems. Why the employer is accountable, and a free generator for the seven-clause AI Acceptable Use Policy you can ship this week.

Read article →

Where it lives

01Versioned

02Reviewed

03Owned

04Scoped

05Audited

06Portable

07Reversible

Local foldersSolo dev, prototype phase

Inside the AI clientClaude · ChatGPT · Cursor · Copilot

Shared drivesGoogle Drive · SharePoint

Notion / ConfluenceKnowledge & product teams

AirtableOps, RevOps, marketing ops

GitHubEngineering-led teams

Vibecoded portalsLovable · v0 · Bolt

Dedicated governance platformMulti-team, multi-vendor, audited

Skills and agents are infrastructure: the two-audience problem

Builders need versioned infrastructure. Users need it to just work in their AI tool. Most teams in 2026 solve neither side. A map of the gap and a three-month plan to close both.

Read article →

▶8 min

A quick tour of airlock

An 8-minute walkthrough of the Control Room: connect an integration, set read-only and approval policy, then watch the same rules hold across Claude, ChatGPT, Cursor and VS Code.

Watch the tour →

MCP governance: what it is and how to do it right

MCP governance decides which servers AI agents can use, what they can do, and what gets logged. The risks, the frameworks worth aligning to, and a practical checklist.

Read article →