With AI Act deadlines active, regulators issued codes of practice and opened cases. The U.S. mixed sectoral guidance and state actions.
Firms documented training-data summaries, evals, and incident reports. Compliance became a fixed cost line.
Governance stopped being only whitepapers: it moved to audits and potential sanctions.