---
title: "Operational notes — CSIDIA"
description: "Operational guides on data, AI and compliance in critical sectors: NIS2, AI Act, predictive maintenance, decision intelligence. No jargon, no promises."
url: https://csidia.com/en/notes/
lang: en
publisher: CSIDIA S.r.l. (https://csidia.com/)
---

Operational notes

# Operational notes.

Field guides on data, operational AI and compliance in critical sectors. No jargon, no promises.

- ![Parallel shadows cast by a structure outside the frame onto a plastered wall, black and white photograph](https://csidia.com/img/nota-ombra-su-intonaco-600.webp)

  Observatory 3 October 2026

  **The ticker is still a placeholder: six leveraged inverse funds on companies that are not listed**

  A 485APOS filed with the SEC registers six 2X inverse ETFs on Anduril, Anthropic, OpenAI, Discord, Figure AI and Quantinuum. None is listed: effectiveness designated for 30 October 2026.

  → [https://csidia.com/en/notes/ticker-segnaposto-sei-fondi-societa-non-quotate/](https://csidia.com/en/notes/ticker-segnaposto-sei-fondi-societa-non-quotate/)
- ![A ship’s metal hatch with its cover swung wide open, revealing pipework and a ladder in the hold below, black and white photograph](https://csidia.com/img/nota-boccaporto-aperto-600.webp)

  Regulation 3 October 2026

  **Beneficial owners: who can see your data, and how to apply for exclusion**

  New access rules for Italian beneficial ownership data since 23 July: who may consult them, within how many days, and why exclusion cannot yet be filed.

  → [https://csidia.com/en/notes/titolare-effettivo-chi-vede-i-dati-esclusione-accesso/](https://csidia.com/en/notes/titolare-effettivo-chi-vede-i-dati-esclusione-accesso/)
- ![Evaporation basins separated by straight embankments, seen from above, aerial photograph in black and white](https://csidia.com/img/nota-vasche-evaporazione-600.webp)

  Regulation 2 October 2026

  **EDPCIs, five perimeters: Italy is in four, and the door reopens in April 2027**

  Decision (EU) 2026/2221 identifies five European defence projects. Who takes part, what they are worth, and why the eligibility criteria reach subcontractors.

  → [https://csidia.com/en/notes/edpci-cinque-progetti-italia-quattro-su-cinque/](https://csidia.com/en/notes/edpci-cinque-progetti-italia-quattro-su-cinque/)
- ![Concentric rings spreading across a dark water surface after a single drop has fallen, black and white photograph](https://csidia.com/img/nota-oss-increspature-600.webp)

  Observatory 2 October 2026

  **Two share issues in three months to pay the licence fee: the price slips below market**

  Surf Air Mobility issues another 4,644,922 shares to its software vendor at $0.97 with the stock at $1.19: counting the instalments and the dilution for those already in.

  → [https://csidia.com/en/notes/due-emissioni-in-tre-mesi-canone-sotto-mercato/](https://csidia.com/en/notes/due-emissioni-in-tre-mesi-canone-sotto-mercato/)
- ![Two stacks of plain metal discs seen edge-on, no figures and no engraving on any surface, black and white photograph](https://csidia.com/img/nota-oss-gettone-600.webp)

  Observatory 1 October 2026

  **A settlement paid in shares: who represents whom, when the compensation is the company itself**

  The Seventh Circuit vacates the Clearview settlement: an equity stake as compensation holds up, but nobody represented the disfavoured nationwide class.

  → [https://csidia.com/en/notes/transazione-pagata-in-azioni-chi-rappresenta-chi/](https://csidia.com/en/notes/transazione-pagata-in-azioni-chi-rappresenta-chi/)
- ![Empty wooden formwork set over a foundation pour on a building site, seen from above, black and white photograph](https://csidia.com/img/nota-cassaforma-vuota-600.webp)

  Regulation 1 October 2026

  **Nuclear enabling act: twelve months to write the rules that will bind you**

  Law 169/2026 empowers the Italian government to rewrite nuclear regulation in twelve months. What the delegation covers, and when you can comment.

  → [https://csidia.com/en/notes/delega-nucleare-dodici-mesi-regole-da-scrivere/](https://csidia.com/en/notes/delega-nucleare-dodici-mesi-regole-da-scrivere/)
- ![The metal lever mechanism of a ring binder, closed over a bundle of blank sheets, black and white photograph](https://csidia.com/img/nota-anelli-raccoglitore-600.webp)

  Regulation 30 September 2026

  **Union list of novel foods: thirteen corrigenda in two days to the conditions of use**

  On 28 and 29 September 2026 the EU Official Journal corrected thirteen novel food regulations: 34 points, in the Italian text only. What changes in Table 1.

  → [https://csidia.com/en/notes/elenco-nuovi-alimenti-tredici-rettifiche-due-giorni/](https://csidia.com/en/notes/elenco-nuovi-alimenti-tredici-rettifiche-due-giorni/)
- ![A tight knot in a rope, macro photograph with an out-of-focus background, black and white](https://csidia.com/img/nota-nodo-serrato-600.webp)

  Regulation 30 September 2026

  **From 1 October 2026 Dechlorane Plus, methoxychlor and UV-328 no longer leave the Union**

  Delegated Regulation (EU) 2026/1278: from 1 October an export ban on three substances and a thirty-five-day notification for five new Annex I entries.

  → [https://csidia.com/en/notes/divieto-esportazione-tre-sostanze-primo-ottobre/](https://csidia.com/en/notes/divieto-esportazione-tre-sostanze-primo-ottobre/)
- ![The closed gates of a canal lock, with the next chamber beyond the wall, black-and-white photograph](https://csidia.com/img/nota-chiusa-conca-600.webp)

  Regulation 29 September 2026

  **A million euros for compliance through data: the 1 and 30 October 2026 deadlines**

  MIMIT national co-funding of €1,000,000 on call DIGITAL-2026-AI-DATA-10-COMPLIANCE: miss the Brussels filing on 1 October and you never reach 30 October.

  → [https://csidia.com/en/notes/conformita-attraverso-i-dati-due-scadenze-un-milione/](https://csidia.com/en/notes/conformita-attraverso-i-dati-due-scadenze-un-milione/)
- ![Two unlit traffic signal heads on curved arms against an overcast sky, black and white photograph, no people](https://csidia.com/img/nota-semaforo-spento-600.webp)

  Regulation 29 September 2026

  **Euro 5 diesel pushed to 2027: what moved, and what did not**

  Decree-law 167/2026 moves to 1 October 2027 the duty to write the Euro 5 restriction into regional air plans. The regions’ power to impose it sooner stays.

  → [https://csidia.com/en/notes/euro-5-diesel-data-spostata-cosa-resta/](https://csidia.com/en/notes/euro-5-diesel-data-spostata-cosa-resta/)
- ![A heap of heavy rusted iron chain links tangled together, close-up black and white photograph](https://csidia.com/img/nota-oss-catena-maglie-600.webp)

  Observatory 28 September 2026

  **The group is Italian, the company that signs is not: who answers for the clauses**

  Three separate companies of the same Italian group in the US federal register, 2,388 awards since 2021. Why the clauses bind whoever signs them.

  → [https://csidia.com/en/notes/gruppo-italiano-tre-societa-un-committente-estero/](https://csidia.com/en/notes/gruppo-italiano-tre-societa-un-committente-estero/)
- ![Macro shot of the tip of a glass dropper, liquid inside and a few tiny bubbles, black and white photograph](https://csidia.com/img/nota-contagocce-600.webp)

  Regulation 28 September 2026

  **Chlorpyrifos in articles: from 30 September 2026 the limit is 0,01 mg/kg**

  From 30 September 2026 chlorpyrifos joins the POPs list with a trace limit of 0,01 mg/kg and no specific exemption. It catches importers of articles too.

  → [https://csidia.com/en/notes/clorpirifos-limite-tracce-trenta-settembre/](https://csidia.com/en/notes/clorpirifos-limite-tracce-trenta-settembre/)
- ![Concrete counterweight blocks hanging under the jib of a tower crane against the sky, black and white photograph](https://csidia.com/img/nota-oss-contrappeso-600.webp)

  Observatory 27 September 2026

  **The supplier selling you control of your data: what it depends on, and for how many years**

  The 4 August 2026 10-Q of a US data-analytics software company: termination for convenience for customers, at least $5.6bn committed to third-party cloud through 2036. How to read it.

  → [https://csidia.com/en/notes/fornitore-che-vende-controllo-da-che-cosa-dipende/](https://csidia.com/en/notes/fornitore-che-vende-controllo-da-che-cosa-dipende/)
- ![The top of a tubular scaffold standing against an empty sky, with no building behind it, black and white photograph, no people](https://csidia.com/img/nota-ponteggio-incompleto-600.webp)

  Regulation 27 September 2026

  **Industrial emissions: transposition overdue, and the Italian text says less**

  Directive (EU) 2024/1785, deadline 1 July 2026: no measure notified for Italy. And Article 3 in Italian omits the point 2.7 the other languages carry.

  → [https://csidia.com/en/notes/emissioni-industriali-attivita-nuove-senza-recepimento/](https://csidia.com/en/notes/emissioni-industriali-attivita-nuove-senza-recepimento/)
- ![An encrusted foundry crucible with a ladle resting inside it, black and white photograph](https://csidia.com/img/nota-crogiolo-600.webp)

  Regulation 27 September 2026

  **Battery recycling efficiency: what gets left out of the calculation**

  Until 31 December 2029 six elements stay optional in the battery recycling efficiency calculation. From 2030 three of them become mandatory.

  → [https://csidia.com/en/notes/efficienza-riciclaggio-batterie-cosa-si-esclude-dal-calcolo/](https://csidia.com/en/notes/efficienza-riciclaggio-batterie-cosa-si-esclude-dal-calcolo/)
- ![The carrier of a pneumatic tube system, rubber cap and metal rings around a translucent body, black and white photograph](https://csidia.com/img/nota-tubo-pneumatico-600.webp)

  Scenarios 26 September 2026

  **If a foreign judge orders your data handed over, who tells you?**

  On 23 September 2026 the United States asked a federal judge for JPMorgan records for a Turkish court. The application is ex parte: nobody tells the customer.

  → [https://csidia.com/en/notes/rogatoria-dati-oltre-confine-chi-viene-avvisato/](https://csidia.com/en/notes/rogatoria-dati-oltre-confine-chi-viene-avvisato/)
- ![Black and white close-up of the digit mechanism of a vintage mechanical calculator: columns of numbers stamped into the metal and setting levers, no lettering, no people](https://csidia.com/img/nota-cifre-calcolatrice-600.webp)

  Regulation 26 September 2026

  **ATEX harmonised standards: which edition is valid today, and until when**

  Ten references in the ATEX list have a withdrawal date already settled. None of them sits in the list: they sit in Article 2 of seven separate decisions.

  → [https://csidia.com/en/notes/norme-armonizzate-atex-quale-edizione-vale-oggi/](https://csidia.com/en/notes/norme-armonizzate-atex-quale-edizione-vale-oggi/)
- ![Wrought-iron hinges on a two-leaf wooden door, black and white photograph](https://csidia.com/img/nota-oss-cardini-600.webp)

  Observatory 25 September 2026

  **Twenty-five years on the same boundary: who decides what crosses between the classified and the open network**

  On 23 September 2026 France’s DGA awarded Airbus twenty-five years of gateways between classified and open networks. What to write before the tender.

  → [https://csidia.com/en/notes/airbus-paracom-venticinque-anni-confine-classificato/](https://csidia.com/en/notes/airbus-paracom-venticinque-anni-confine-classificato/)
- ![A lighthouse lantern seen from below, the Fresnel lens behind the glazing](https://csidia.com/img/nota-lanterna-fresnel-600.webp)

  Regulation 25 September 2026

  **Who warns you when the attack is already under way in another member state?**

  In 2025 the whole EU logged fourteen cross-border incident reports: special report 19/2026 of the European Court of Auditors, and what it changes for you.

  → [https://csidia.com/en/notes/incidenti-transfrontalieri-quattordici-segnalazioni-2025/](https://csidia.com/en/notes/incidenti-transfrontalieri-quattordici-segnalazioni-2025/)
- ![Raised weld beads running across an oxidised steel plate, close-up photograph in black and white](https://csidia.com/img/nota-oss-saldatura-600.webp)

  Observatory 24 September 2026

  **A new clause on a contract you already signed: can you say no?**

  A US executive order has written a clause into thousands of running contracts, Italian suppliers included. What signing it commits you to, and what it does not.

  → [https://csidia.com/en/notes/clausola-dopo-la-firma-obbligo-a-cascata/](https://csidia.com/en/notes/clausola-dopo-la-firma-obbligo-a-cascata/)
- ![Suspended dust backlit against a dark background, pale particles of varying size, no people](https://csidia.com/img/nota-pulviscolo-sospeso-600.webp)

  Regulation 24 September 2026

  **Euro 7 and brake particulate: what changes on 29 November 2026**

  From 29 November 2026 new M1 and N1 types are type-approved on brake particulate too. On 23 September the test method changed: limits, dates, consequences.

  → [https://csidia.com/en/notes/particolato-freni-omologazione-29-novembre-2026/](https://csidia.com/en/notes/particolato-freni-omologazione-29-novembre-2026/)
- ![Ordered rows of nearly identical blade fuses, with a single piece lifted and set apart from the row, in black and white](https://csidia.com/img/nota-oss-fusibili-600.webp)

  Observatory 23 September 2026

  **Video analytics under contract: who answers when the system points at the wrong person?**

  Amazon Web Services is a defendant in St. Louis over a false facial match. In Italy video analytics is awarded on price alone: what the specification is missing.

  → [https://csidia.com/en/notes/videoanalisi-appalto-falso-riscontro-chi-risponde/](https://csidia.com/en/notes/videoanalisi-appalto-falso-riscontro-chi-risponde/)
- ![A steel tuning fork resting on a dark polished surface in low light, black and white photograph, no people](https://csidia.com/img/nota-diapason-600.webp)

  Regulation 23 September 2026

  **One EU act, twenty-four texts: which one did you read, and on what date?**

  All twenty-four language versions of an EU act are equally authentic. Six verified defects where the Italian text, or another, said something else.

  → [https://csidia.com/en/notes/ventiquattro-versioni-quale-testo-avete-letto/](https://csidia.com/en/notes/ventiquattro-versioni-quale-testo-avete-letto/)
- ![Close-up of a steel turnbuckle with a hook resting on wire mesh, black and white photograph](https://csidia.com/img/nota-oss-tenditore-600.webp)

  Observatory 22 September 2026

  **A ceiling tripled without a new tender: Oracle, the VA and article 120**

  The Oracle contract ceiling rose by USD 16.9 billion through a modification advertised three days earlier. In Italy, article 120 sets no cap on options already written in.

  → [https://csidia.com/en/notes/oracle-va-massimale-triplicato-clausola-opzione/](https://csidia.com/en/notes/oracle-va-massimale-triplicato-clausola-opzione/)
- ![Coil spring of a shock absorber mounted on a frame, black and white photograph](https://csidia.com/img/nota-molla-ammortizzatore-600.webp)

  Regulation 22 September 2026

  **How many years of software updates do you guarantee? From 27 September it must be said before the sale**

  From 27 September 2026 anyone selling goods with digital elements must give, before the contract, the minimum software update period and the reparability information.

  → [https://csidia.com/en/notes/periodo-minimo-aggiornamenti-cosa-dire-prima-del-contratto/](https://csidia.com/en/notes/periodo-minimo-aggiornamenti-cosa-dire-prima-del-contratto/)
- ![A row of laboratory funnels backlit on a windowsill, black and white photograph](https://csidia.com/img/nota-imbuto-600.webp)

  Observatory 21 September 2026

  **Cognyte and the Guardia di Finanza: why Italy never appears in the supplier’s accounts**

  A EUR 1,480,177 contract with the Guardia di Finanza leaves no trace in Cognyte’s accounts. What you can actually verify about a foreign supplier.

  → [https://csidia.com/en/notes/cognyte-contratto-italiano-riga-israele/](https://csidia.com/en/notes/cognyte-contratto-italiano-riga-israele/)
- ![Brass elbow fitting with the size 3/4 cast in relief on its body, black and white photograph](https://csidia.com/img/nota-raccordo-filettato-600.webp)

  Regulation 21 September 2026

  **Who has to prove the environmental claim you have already printed?**

  From 27 September 2026 twelve new practices enter the Italian blacklist of unfair commercial practices. Four of them concern green claims, with no case-by-case assessment.

  → [https://csidia.com/en/notes/asserzione-ambientale-chi-la-deve-dimostrare/](https://csidia.com/en/notes/asserzione-ambientale-chi-la-deve-dimostrare/)
- ![Macro of the toothed wheels of a mechanical movement, meshed together, in black and white](https://csidia.com/img/nota-scappamento-600.webp)

  Observatory 20 September 2026

  **Who decides how fast the model you bought gets better?**

  On 12 September the chief executive of Anthropic wrote that the pace must come down. On the 18th a class action accused four suppliers of agreeing to it.

  → [https://csidia.com/en/notes/ritmo-dei-modelli-concordato-causa-antitrust/](https://csidia.com/en/notes/ritmo-dei-modelli-concordato-causa-antitrust/)
- ![Two wooden posts lashed together hold a strand of barbed wire above tall grass, photographed in black and white](https://csidia.com/img/nota-paletto-confine-600.webp)

  Regulation 20 September 2026

  **Who is a producer under the EU packaging rules? The Italian text changed on 18 September**

  An 18 September 2026 corrigendum to Regulation (EU) 2025/40 rewrites the Italian definition of producer in Article 3, point (15)(c) and (d). Who is inside.

  → [https://csidia.com/en/notes/imballaggi-produttore-definizione-rettifica-italiana/](https://csidia.com/en/notes/imballaggi-produttore-definizione-rettifica-italiana/)
- ![An old railway bascule bridge with its span raised above a river, timber and steel trusses, black and white photograph](https://csidia.com/img/nota-ponte-levatoio-alzato-600.webp)

  Observatory 19 September 2026

  **Who can switch the service off: Microsoft shareholders and the single-supplier direct award**

  On 9 September 2026 a filing with the SEC asks Microsoft to measure its controls over how customers use its cloud and AI. What that changes in Italy.

  → [https://csidia.com/en/notes/microsoft-azionisti-due-diligence-fornitore-unico/](https://csidia.com/en/notes/microsoft-azionisti-due-diligence-fornitore-unico/)
- ![Hoist hook hanging from a steel rope inside a dimly lit industrial hall, with no load attached, black and white photograph, no people](https://csidia.com/img/nota-gancio-vuoto-600.webp)

  Regulation 19 September 2026

  **Machinery harmonised standards: the list is repealed on 20 January 2027**

  Decision 2026/2015 adds 67 rows to the Machinery Directive list and repeals it from 20 January 2027. The Regulation’s own list does not show up yet.

  → [https://csidia.com/en/notes/norme-armonizzate-macchine-elenco-abrogato-2027/](https://csidia.com/en/notes/norme-armonizzate-macchine-elenco-abrogato-2027/)
- ![A rusted mooring bollard on a deserted concrete quay, open sea behind it, black and white photograph](https://csidia.com/img/nota-bitta-ormeggio-600.webp)

  Observatory 18 September 2026

  **Cellebrite moves its parent company to the United States: who answers for the Italian contract?**

  On 14 September 2026 Cellebrite announced a new US parent company. In Italy those tools are bought through resellers: who actually answers for the contract.

  → [https://csidia.com/en/notes/cellebrite-capogruppo-usa-contratto-rivenditore/](https://csidia.com/en/notes/cellebrite-capogruppo-usa-contratto-rivenditore/)
- ![A row of open-end spanners in different sizes on a dark surface, in black and white](https://csidia.com/img/nota-chiavi-millimetro-600.webp)

  Regulation 18 September 2026

  **Which version of the dual-use list did you classify against?**

  Commission Delegated Regulation (EU) 2026/1405 corrects eight language versions of the dual-use list. The Italian entry 3B501.f.1.a was wrong for 87 days.

  → [https://csidia.com/en/notes/elenco-duplice-uso-quale-versione-classificato/](https://csidia.com/en/notes/elenco-duplice-uso-quale-versione-classificato/)
- ![Bundles of copper wire tied and stacked, shot close up, black and white photograph](https://csidia.com/img/nota-matasse-di-rame-600.webp)

  Regulation 17 September 2026

  **Battery presumption of conformity: six articles, one standard**

  Implementing Decision (EU) 2026/2048 publishes EN 18060:2025, the first harmonised standard under the Batteries Regulation. Article 15(3) covers six articles: what is missing.

  → [https://csidia.com/en/notes/presunzione-conformita-batterie-sei-articoli-una-norma/](https://csidia.com/en/notes/presunzione-conformita-batterie-sei-articoli-una-norma/)
- ![A tape reel unspooled over a heap of loose tape, photographed in black and white against a dark background](https://csidia.com/img/nota-nastro-srotolato-600.webp)

  Regulation 16 September 2026

  **Digital product passport: six harmonised standards in the EU Official Journal, and an archive that must outlive the company**

  Decision (EU) 2026/1736: six EN standards for the digital product passport, presumption of conformity with Articles 10 and 11 of the ESPR. What it really means.

  → [https://csidia.com/en/notes/norme-armonizzate-passaporto-digitale-prodotto/](https://csidia.com/en/notes/norme-armonizzate-passaporto-digitale-prodotto/)
- ![Metal compartments filled with bolts and nuts of different sizes, shot from above in black and white](https://csidia.com/img/nota-bulloni-scomparti-600.webp)

  Regulation 15 September 2026

  **AI system inventories in the public sector: the FRIA slips to 2027, the Italian duties do not**

  Article 27 of the AI Act slips to 2 December 2027, but the public registration under Article 49 and Law 132/2025 already bite. What a public body needs now.

  → [https://csidia.com/en/notes/inventario-sistemi-ia-pa-registrazione-pubblica/](https://csidia.com/en/notes/inventario-sistemi-ia-pa-registrazione-pubblica/)
- ![Concrete beams shot from below, crossing diagonally into a regular lattice, black-and-white photograph, no people](https://csidia.com/img/nota-travi-dal-basso-600.webp)

  Regulation 14 September 2026

  **Machinery with high-risk AI: the presumption of conformity is provisional**

  Since 27 July the Machinery Regulation’s presumption of conformity has covered high-risk AI too — but the AI Act standards it leans on are not in the Official Journal yet.

  → [https://csidia.com/en/notes/presunzione-conformita-ia-alto-rischio-macchine/](https://csidia.com/en/notes/presunzione-conformita-ia-alto-rischio-macchine/)
- ![Rows of overlapping concrete roof tiles, each partly covering the one below, black and white photograph; no lettering, no branding, no people](https://csidia.com/img/nota-tegole-sovrapposte-600.webp)

  Regulation 13 September 2026

  **The DORA Register of Information is rebuilt every year, and the deadline is not the same for everyone**

  The Register of Information must be re-extracted each year from hundreds of confidential ICT contracts: 99 fields, 15 templates, different deadlines at Banca d’Italia and IVASS.

  → [https://csidia.com/en/notes/registro-informazioni-dora-scadenza-annuale-clausole/](https://csidia.com/en/notes/registro-informazioni-dora-scadenza-annuale-clausole/)
- ![The cut edge of a ream of blank paper shot in extreme close-up, with the sheets curving in overlapping layers, in black and white](https://csidia.com/img/nota-risme-sfogliate-600.webp)

  Regulation 12 September 2026

  **Medical devices: when the technical file and the paper leaflet actually expire**

  Regulation (EU) 2017/745 sets 2027 and 2028 for legacy devices; Regulation (EU) 2025/1234 extends electronic instructions for use.

  → [https://csidia.com/en/notes/dispositivi-medici-mdr-scadenze-2027-2028/](https://csidia.com/en/notes/dispositivi-medici-mdr-scadenze-2027-2028/)
- ![Six cylindrical stacks arranged in a pyramid, viewed head-on, black-and-white photograph on a neutral background](https://csidia.com/img/nota-pile-impilate-600.webp)

  Regulation 11 September 2026

  **Battery passport: what stays a trade secret from 18 February 2027**

  Regulation (EU) 2023/1542, Art. 77 and Annex XIII: the cell’s general chemistry is public, the detailed formulation is not. The line has to be drawn now.

  → [https://csidia.com/en/notes/passaporto-batteria-segreto-industriale-2027/](https://csidia.com/en/notes/passaporto-batteria-segreto-industriale-2027/)
- ![A wall of twenty-four identical metal lockers, all closed with their locks in view, shot frontally in black and white](https://csidia.com/img/nota-armadietti-chiusi-600.webp)

  Regulation 10 September 2026

  **Digital product passport: what you will have to make public (and how not to publish your secrets)**

  ESPR: the digital product passport makes technical data public, category by category. What to classify as a trade secret, and from when.

  → [https://csidia.com/en/notes/passaporto-digitale-prodotto-pubblico-segreto-industriale/](https://csidia.com/en/notes/passaporto-digitale-prodotto-pubblico-segreto-industriale/)
- ![A dense wall of paper rolls seen head-on, dozens upon dozens, stacked in irregular rows, photographed in black and white; no roll is identifiable, and there are no people, logos, or legible markings](https://csidia.com/img/nota-bobine-carta-arrotolata-600.webp)

  Observatory 9 September 2026

  **MiniCPM5-2B: Naming Eight Datasets Is Not Enough for the AI Act**

  OpenBMB’s frontmatter for MiniCPM5-2B names eight training datasets by name: we verified each one, and all eight exist and are public. But the AI Act exempts open source only from points (a) and (b) of Article 53: the copyright policy and the training-content summary remain owed regardless.

  → [https://csidia.com/en/notes/minicpm5-2b-otto-dataset-nominare-non-basta/](https://csidia.com/en/notes/minicpm5-2b-otto-dataset-nominare-non-basta/)
- ![Wall of wedge-shaped acoustic foam panels shot close up, black and white photograph](https://csidia.com/img/nota-pannelli-fonoassorbenti-600.webp)

  Regulation 8 September 2026

  **Whistleblowing reports: where the text may end up, and who pays if the channel is non-compliant**

  Legislative Decree 24/2023 and ANAC Guidelines No. 1/2025: the use ceiling on reports, the seven-day and three-month deadlines, and the fine the governing body pays.

  → [https://csidia.com/en/notes/whistleblowing-testo-segnalazione-fuori-perimetro/](https://csidia.com/en/notes/whistleblowing-testo-segnalazione-fuori-perimetro/)
- ![Crank handle and gear of a hand-operated striped boom barrier, with the arm lowered in the background, black and white photograph](https://csidia.com/img/nota-manovella-sbarra-600.webp)

  Regulation 7 September 2026

  **Law 90/2024: who classifies the incident in the first twenty-four hours?**

  A report within 24 hours and a notification within 72 to Italy’s ACN run from the same instant: which taxonomy applies, which portal you write to, and who decides.

  → [https://csidia.com/en/notes/legge-90-segnalazione-24-ore-chi-classifica/](https://csidia.com/en/notes/legge-90-segnalazione-24-ore-chi-classifica/)
- ![Arm of an industrial agitator stirring a thick mash inside a steel vessel, shot from above in black and white](https://csidia.com/img/nota-agitatore-recipiente-600.webp)

  Regulation 6 September 2026

  **Safety data sheets: when they must be updated, who receives them again, and in which language**

  Annex II to REACH as replaced by Regulation (EU) 2020/878: sixteen binding sections and an update that goes back to every recipient of the preceding twelve months.

  → [https://csidia.com/en/notes/scheda-dati-sicurezza-aggiornamento-destinatari-lingua/](https://csidia.com/en/notes/scheda-dati-sicurezza-aggiornamento-destinatari-lingua/)
- ![A small bell hanging in a masonry bell-gable above a roof of curved tiles, black and white photograph; no text, no trademarks, no people](https://csidia.com/img/nota-campana-vela-600.webp)

  Regulation 5 September 2026

  **Recall notice: two remedies for the consumer to choose from, and the words you may not use**

  GPSR, Regulation (EU) 2023/988: a recall notice has a mandatory headline and banned words, and the consumer is owed at least two remedies, shipping included.

  → [https://csidia.com/en/notes/avviso-richiamo-rimedi-dovuti-consumatore/](https://csidia.com/en/notes/avviso-richiamo-rimedi-dovuti-consumatore/)
- ![A wall of wooden crates stacked by the dozen, all identical, photographed head-on in black and white, with no labels or legible markings; a horizontal band of shadow splits the stack in two](https://csidia.com/img/nota-oss-casse-accatastate-600.webp)

  Observatory 4 September 2026

  **FrontierView to Oxford Economics: 28 AI Representations from the Seller, 4 from the Buyer**

  On 27 August 2026 FiscalNote sold FrontierView to Oxford Economics: in the Equity Purchase Agreement filed with the SEC, Section 3.19(o) makes the seller swear to an inventory of every AI Tool in its products and a right to each Training Dataset, “scraped or harvested datasets” included.

  → [https://csidia.com/en/notes/frontierview-oxford-economics-ai-tool-giurato/](https://csidia.com/en/notes/frontierview-oxford-economics-ai-tool-giurato/)
- ![Wooden door reinforced with rows of large iron rivets, with a small hatch at the centre closed by a metal grille behind which only darkness is visible, black and white photograph](https://csidia.com/img/nota-portone-chiodato-600.webp)

  Regulation 4 September 2026

  **Legislative decree 134/2024: the list of critical entities cannot be read, by law**

  Legislative decree 134/2024 identifies critical entities through a list that article 8 excludes from access by law: an entity learns it is on it only through a private notice, which also starts the nine months for the risk assessment.

  → [https://csidia.com/en/notes/soggetti-critici-elenco-decreto-non-pubblicato/](https://csidia.com/en/notes/soggetti-critici-elenco-decreto-non-pubblicato/)
- ![Two pale lines painted on an industrial concrete floor, separating a smooth surface from a coarse-aggregate one, black-and-white photograph](https://csidia.com/img/nota-linea-demarcazione-600.webp)

  Observatory 4 September 2026

  **C3.ai and the Energy Department: a Contract Written on the Exact Edge of a Threshold**

  Contract 89303026CMA000138 is worth, including options, exactly $9 million — the ceiling for simplified federal acquisition procedures, raised from $7.5 million to $9 million forty days before signature. By July 2026 the Energy Department had handed back 87.5% of it.

  → [https://csidia.com/en/notes/c3ai-doe-soglia-nove-milioni-spostata/](https://csidia.com/en/notes/c3ai-doe-soglia-nove-milioni-spostata/)
- ![Row of glass vials with metal caps lined up on the circular tray of a laboratory instrument, a blurred dark wall in the background, black and white photograph](https://csidia.com/img/nota-fiale-laboratorio-600.webp)

  Regulation 4 September 2026

  **NEWS-D: Italy’s drug early-warning regulation arrives 462 days late**

  DPCM 7 July 2026, no. 156 sets out the tasks and organisation of NEWS-D. The law gave ninety days; the regulation arrives 462 days after that, for a process in which the sample passes through six different hands and a threshold no laboratory holds on its own.

  → [https://csidia.com/en/notes/news-d-regolamento-462-giorni-ritardo/](https://csidia.com/en/notes/news-d-regolamento-462-giorni-ritardo/)
- ![Close-up of the metal gnomon of a stone sundial, its shadow falling near the applied metal numerals "12" and "15", black and white photograph](https://csidia.com/img/nota-meridiana-600.webp)

  Observatory 4 September 2026

  **Google’s TimesFM 3.0: the card changes licence, the weights don’t**

  On 24 August 2026 Google uploaded TimesFM 3.0’s weights to Hugging Face under an Apache 2.0 licence declared on the card. Sixty-nine hours later, on the same bytes, the licence became non-commercial — and the official GitHub announcement landed a day later, after the swap was already done.

  → [https://csidia.com/en/notes/timesfm-3-licenza-cambiata-tre-giorni-dopo/](https://csidia.com/en/notes/timesfm-3-licenza-cambiata-tre-giorni-dopo/)
- ![Metal sliding bolt latch on a wooden door, black and white photograph](https://csidia.com/img/nota-oss-chiavistello-600.webp)

  Observatory 3 September 2026

  **In OpenAI’s memorandum with California, stopping a release isn’t OpenAI’s call**

  On October 27, 2025, California granted a committee of OpenAI’s nonprofit board an approval right that can block a release by the operating company even past its own stated risk thresholds; after the July 2026 Hugging Face incident, fifteen other states are investigating under consumer-protection law, without that right written into any document of their own.

  → [https://csidia.com/en/notes/openai-california-chi-puo-fermare-un-rilascio/](https://csidia.com/en/notes/openai-california-chi-puo-fermare-un-rilascio/)
- ![Aerial roots of a large tree hanging in vertical bundles from the branches down to the ground, some thick and rooted in the soil, others thin and still suspended, black and white photograph](https://csidia.com/img/nota-radici-aeree-600.webp)

  Regulation 3 September 2026

  **DORA’s ICT register: the deadline is fixed, the subcontracting chain is not**

  Commission Implementing Regulation (EU) 2024/2956 sets the templates for the register of information required by DORA Article 28(3). Banca d’Italia fixed the deadline at 15 March: the subcontracting layers behind each critical function still are not mapped.

  → [https://csidia.com/en/notes/dora-registro-informazioni-catena-subappalto/](https://csidia.com/en/notes/dora-registro-informazioni-catena-subappalto/)
- ![A grid of steel reinforcement bars for concrete, with several vertical rods rising from a wider mesh in the background, black-and-white photograph](https://csidia.com/img/nota-oss-armatura-600.webp)

  Observatory 3 September 2026

  **El Paso: a $13 billion guarantee, and for Meta the deal is still an exclusivity agreement**

  In late July 2026, $12.3 billion of notes were launched backed by Meta’s guarantee on the future El Paso data center; on 30 July, in the 10-Q filed with the SEC, Meta describes the same deal as an exclusivity agreement still awaiting definitive documents by the third quarter of 2026.

  → [https://csidia.com/en/notes/el-paso-meta-garanzia-intesa-esclusiva/](https://csidia.com/en/notes/el-paso-meta-garanzia-intesa-esclusiva/)
- ![Close-up of a hard drive read-write head suspended above the reflective metal platter of an opened disk drive, with the clamp screws ringing the central hub, black and white photograph](https://csidia.com/img/nota-disco-rigido-testina-600.webp)

  Regulation 3 September 2026

  **Digital Preservation Manual: June’s Deadline Has Passed, AgID’s Check Hasn’t**

  Italy’s three-year ICT plan sets 2026 as the target for publishing a preservation manual and naming a preservation officer; AgID’s monitoring closes in December, while a working group has been rewriting the same rules since January to align them with eIDAS 2.

  → [https://csidia.com/en/notes/manuale-conservazione-target-2026-controllo-agid/](https://csidia.com/en/notes/manuale-conservazione-target-2026-controllo-agid/)
- ![Two identical railway signal lamps on two curved arms rising from the same post, aimed in different directions, black and white photograph against a cloudy sky](https://csidia.com/img/nota-segnali-ferroviari-600.webp)

  Observatory 3 September 2026

  **Tencent’s Hy4 Preview: the Reasoning Default Flips, Silently**

  Moving from Hy3 to Hy4 preview, Tencent flips the default of the reasoning_effort parameter in the chat template: from a direct answer to extended reasoning. The same quickstart code, with no error, now behaves differently — and a second field, missing from both model cards, can force it back.

  → [https://csidia.com/en/notes/hy4-preview-tencent-reasoning-effort-capovolto/](https://csidia.com/en/notes/hy4-preview-tencent-reasoning-effort-capovolto/)
- ![A dirt trail forking into two paths in a conifer forest, with a blank wooden signpost on the left, black-and-white photograph](https://csidia.com/img/nota-bivio-sentiero-600.webp)

  Observatory 2 September 2026

  **Five bids at NASA, one source for the nuclear site**

  On 17 and 18 August 2026 two federal agencies modify contracts with Anduril Industries: a restricted competition with five bids at NASA, no competition at all for the nuclear-security anti-drone system.

  → [https://csidia.com/en/notes/anduril-nasa-cinque-offerte-nnsa-una-fonte/](https://csidia.com/en/notes/anduril-nasa-cinque-offerte-nnsa-una-fonte/)
- ![Close-up of a spirit level’s bubble vial set into the tool’s body, black and white photograph](https://csidia.com/img/nota-livella-bolla-600.webp)

  Regulation 2 September 2026

  **Law 90/2024: the missing taxonomy, and who finally wrote it**

  For sixteen months, Italy’s law 90/2024 required public bodies to report incidents against a taxonomy that had, in the meantime, stopped existing. The gap was closed by a determination signed by the very Agency that receives the notifications.

  → [https://csidia.com/en/notes/legge-90-tassonomia-incidenti-chi-la-scrive/](https://csidia.com/en/notes/legge-90-tassonomia-incidenti-chi-la-scrive/)
- ![An abacus with rows of white beads on a red background, some rows more filled than others, close-up black and white photograph](https://csidia.com/img/nota-pallottoliere-600.webp)

  Observatory 2 September 2026

  **DeepSeek-V4-Flash-Vision-Exp: Italian Costs 41% More Tokens**

  We tokenised the same GDPR article in Italian and in English with DeepSeek-V4-Flash-Vision-Exp’s own tokenizer, released 31 August 2026: 525 tokens against 373 — 41% more. Compared against two other open-weight models.

  → [https://csidia.com/en/notes/deepseek-v4-flash-vision-exp-italiano-piu-token/](https://csidia.com/en/notes/deepseek-v4-flash-vision-exp-italiano-piu-token/)
- ![A glass jar tipped on its side, with rolled oat flakes spilling out and scattered across the surface, black-and-white photograph](https://csidia.com/img/nota-avena-rovesciata-600.webp)

  Observatory 2 September 2026

  **General Dynamics: 1,010,925 unregistered shares, and a plan missing from the rescission offer**

  On 4 August 2026 General Dynamics files with the SEC a rescission offer covering up to 1,010,925 shares acquired without proper registration through two 401(k) plans between 1 July 2025 and 30 June 2026: it expires on 8 September. The 10-Q filed six days earlier cited “approximately 300,000” shares across three plans — the third, and a fourth never previously named, are missing from the offer, with no explanation given.

  → [https://csidia.com/en/notes/general-dynamics-401k-rescissione-piano-sparisce/](https://csidia.com/en/notes/general-dynamics-401k-rescissione-piano-sparisce/)
- ![A row of raised tactile paving strips running in a straight line across light and dark paving slabs, black and white photograph, high contrast](https://csidia.com/img/nota-guida-tattile-pavimento-600.webp)

  Regulation 2 September 2026

  **Self-service terminals: the exemption runs twenty years from entry into use, not from 2025**

  Legislative Decree 82/2022, transposing Directive (EU) 2019/882, has applied since 28 June 2025: for self-service terminals the transitional regime does not end in 2030 as it does for service contracts, but twenty years after each unit’s entry into use — a date no register cross-checks against its conformity file.

  → [https://csidia.com/en/notes/terminali-self-service-accessibilita-messa-in-funzione/](https://csidia.com/en/notes/terminali-self-service-accessibilita-messa-in-funzione/)
- ![Glowing molten metal pouring vertically between rusted industrial structures, black-and-white photograph](https://csidia.com/img/nota-colata-metallo-600.webp)

  Regulation 1 September 2026

  **CBAM: the 50-tonne threshold is cumulative, and crossing it makes the whole year answerable**

  Regulation (EU) 2023/956, as amended by Regulation (EU) 2025/2083: below 50 net tonnes a year the importer is exempt, above it every emission for the whole year becomes reportable.

  → [https://csidia.com/en/notes/cbam-soglia-cumulativa-anno-intero/](https://csidia.com/en/notes/cbam-soglia-cumulativa-anno-intero/)
- ![A layer of light plaster peeling away from a darker brick wall underneath, black and white photograph, high contrast](https://csidia.com/img/nota-intonaco-mattoni-600.webp)

  Regulation 1 September 2026

  **The Ex-Employee’s File: No Retention Term in the GDPR, Several Elsewhere**

  Article 5(1)(e) GDPR requires storage limitation without naming a number: the actual term sits elsewhere, written piece by piece across tax law, workplace-safety law and employment law — each with its own horizon.

  → [https://csidia.com/en/notes/fascicolo-ex-dipendente-termine-conservazione-sparso/](https://csidia.com/en/notes/fascicolo-ex-dipendente-termine-conservazione-sparso/)
- ![Laboratory test tube rack with dozens of empty holes and only four glass tubes inserted, close-up black-and-white photograph](https://csidia.com/img/nota-provette-laboratorio-600.webp)

  Observatory 1 September 2026

  **GLM-5.3: sixteen benchmarks, zero on safety**

  On 28 August 2026 Z.ai published the weights of GLM-5.3: the card lists sixteen coding and cyber benchmarks, none for safety or for languages beyond English and Chinese.

  → [https://csidia.com/en/notes/glm-5-3-sedici-benchmark-zero-sicurezza/](https://csidia.com/en/notes/glm-5-3-sedici-benchmark-zero-sicurezza/)
- ![A dense grid of bare, lit light bulbs seen from below on a panel ceiling, black-and-white photograph](https://csidia.com/img/nota-lampadine-soffitto-600.webp)

  Observatory 1 September 2026

  **L3Harris: the chief executive leaves, the bill drops from $38.7 million to zero**

  On 16 August 2026 Christopher Kubasik’s tenure ends after a board inquiry into conduct under the Code of Conduct: the separation agreement filed the next day wipes out severance and unvested awards, against the $38.7 million the April proxy statement estimated for a termination without cause.

  → [https://csidia.com/en/notes/l3harris-kubasik-separazione-conto-gennaio-agosto/](https://csidia.com/en/notes/l3harris-kubasik-separazione-conto-gennaio-agosto/)
- ![A tall, completely empty steel industrial racking aisle inside a logistics warehouse, black-and-white photograph](https://csidia.com/img/nota-scaffalatura-vuota-600.webp)

  Observatory 1 September 2026

  **Symbotic: the single customer climbs to 90.5%, the accounting lawsuit does not close**

  The 5 August 2026 10-Q: an unnamed customer accounts for 90.5% of quarterly revenue, up from 83.8% a year earlier — while a federal judge lets most of a lawsuit over those same accounts move forward, and the company answers the amended complaint on 28 August.

  → [https://csidia.com/en/notes/symbotic-cliente-concentrato-causa-titoli/](https://csidia.com/en/notes/symbotic-cliente-concentrato-causa-titoli/)
- ![Gears of an industrial reducer seen from the inside, oily metal surfaces, black and white photograph](https://csidia.com/img/nota-ingranaggi-600.webp)

  Regulation 31 August 2026

  **Partly completed machinery: assembly instructions, not a user manual**

  Regulation (EU) 2023/1230 requires the supplier of partly completed machinery to provide assembly instructions, not a user manual, and a declaration of incorporation, not of conformity.

  → [https://csidia.com/en/notes/quasi-macchine-istruzioni-assemblaggio-2027/](https://csidia.com/en/notes/quasi-macchine-istruzioni-assemblaggio-2027/)
- ![Metal statuette of blindfolded Justice holding scales and a sword, photographed close up in black and white](https://csidia.com/img/nota-statua-giustizia-600.webp)

  Observatory 31 August 2026

  **The Memo Was Supposed to Prove Sabotage. It Proved Retaliation.**

  The docket records the Anthropic-Pentagon case as terminated on 27 August 2026. The order is not public yet, but the memo meant to justify the designation has been since March: read in full, it talks mostly about the press.

  → [https://csidia.com/en/notes/anthropic-memo-sabotaggio-ritorsione/](https://csidia.com/en/notes/anthropic-memo-sabotaggio-ritorsione/)
- ![A dual-connector USB drive, USB-A and USB-C, with its caps removed and set beside it, resting on a grid mat, black and white photograph](https://csidia.com/img/nota-chiavetta-usb-600.webp)

  Regulation 31 August 2026

  **CVCN: the rule says what to hand over, is silent on who sees it next**

  Presidential decree 54/2021 on Italy’s cyber perimeter requires an ICT supplier to hand the CVCN its architecture, security functions and a representative test environment. On who sees them afterwards, the text says nothing.

  → [https://csidia.com/en/notes/cvcn-codice-sorgente-chi-lo-vede-dopo/](https://csidia.com/en/notes/cvcn-codice-sorgente-chi-lo-vede-dopo/)
- ![Gooseneck microphones and touchscreen units at individual seats around a horseshoe-shaped meeting table, empty room, black and white photograph, no people or legible text](https://csidia.com/img/nota-postazioni-microfono-aula-600.webp)

  Observatory 31 August 2026

  **Nemotron 3 Diarization: an evaluation licence, not an open model**

  NVIDIA releases a speaker diarisation model under an evaluation-only licence: the governance documentation sits behind the same gate as the weights, and every derivative is licensed back to NVIDIA.

  → [https://csidia.com/en/notes/diarizzazione-vocale-licenza-di-valutazione-derivati-a-nvidia/](https://csidia.com/en/notes/diarizzazione-vocale-licenza-di-valutazione-derivati-a-nvidia/)
- ![A page of printed sheet music, dense rows out of focus except the central fold, black-and-white photograph](https://csidia.com/img/elenco-norme-armonizzate-600.webp)

  Regulation 31 August 2026

  **The harmonised standard on the manual has existed since 2020: almost no one cites it**

  EN ISO 20607:2019 gives presumption of conformity for machinery manuals, row 94 of the EU Official Journal list. IEC/IEEE 82079-1:2019, the standard everyone cites, is not harmonised: zero hits, verified.

  → [https://csidia.com/en/notes/iso-20607-norma-armonizzata-manuale-istruzioni/](https://csidia.com/en/notes/iso-20607-norma-armonizzata-manuale-istruzioni/)
- ![An industrial robotic arm at work in a welding cell, in black and white](https://csidia.com/img/nota-cella-robotizzata-600.webp)

  Regulation 31 August 2026

  **Machinery Regulation: when a retrofit makes you the manufacturer, and when it doesn’t**

  Regulation (EU) 2023/1230, Articles 3 and 18, applies from 20 January 2027: two conditions, not one, decide whether modifying an installed machine makes you its manufacturer.

  → [https://csidia.com/en/notes/modifica-sostanziale-macchine-due-condizioni-non-una/](https://csidia.com/en/notes/modifica-sostanziale-macchine-due-condizioni-non-una/)
- ![Aerial view of a river meander with two islands of vegetation, high-contrast black-and-white photograph](https://csidia.com/img/nota-meandro-fluviale-600.webp)

  Regulation 31 August 2026

  **Flood hazard maps: two notices nine days apart, two opposite effective-date rules**

  Two notices from the same river basin authority, five municipalities, nine days apart: the same flood hazard change takes effect on the day of publication in one case, seven months earlier in the other.

  → [https://csidia.com/en/notes/pericolosita-idraulica-due-regole-di-efficacia-opposte/](https://csidia.com/en/notes/pericolosita-idraulica-due-regole-di-efficacia-opposte/)
- ![Handwheel of a rusted industrial valve, seen close up, black-and-white photograph](https://csidia.com/img/nota-valvola-chiusa-600.webp)

  Regulation 31 August 2026

  **Machinery Regulation: in Italy the language of the manual is still unset**

  Legislative Decree 17/2010 has not been updated since 2012, the delegation under Law 36/2026 expires on 9 October 2026, and Italy’s workplace-safety code still points to a rule repealed in 2010: three facts verified on Normattiva.

  → [https://csidia.com/en/notes/regolamento-macchine-lato-italiano-fermo-2012/](https://csidia.com/en/notes/regolamento-macchine-lato-italiano-fermo-2012/)
- ![Two hands draw and measure a technical floor plan with a pen and ruler, in black and white](https://csidia.com/img/nota-riga-disegno-tecnico-600.webp)

  Regulation 31 August 2026

  **Machinery Regulation: change one thing, three answers and seven silences**

  What gets updated when the software changes, a harmonised standard is revised, or a machine reaches a new market: Regulation (EU) 2023/1230 answers explicitly three times, and stays silent on at least seven cases.

  → [https://csidia.com/en/notes/regolamento-macchine-propagazione-modifiche-tre-risposte/](https://csidia.com/en/notes/regolamento-macchine-propagazione-modifiche-tre-risposte/)
- ![A row of high-voltage disconnect switches and insulators at an electrical substation, taut cables against a flat sky, black-and-white photograph](https://csidia.com/img/nota-isolatori-sezionatori-600.webp)

  Observatory 31 August 2026

  **Volato-Alignment Engine: the agreement is filed, the numbers are not**

  The August 28, 2026 8-K: the merger agreement between Volato Group and Alignment Engine is filed in full, but the $500 million valuation and the Ohio campus megawatts appear only in the press release, furnished under Item 7.01.

  → [https://csidia.com/en/notes/volato-alignment-engine-accordo-depositato-numeri-no/](https://csidia.com/en/notes/volato-alignment-engine-accordo-depositato-numeri-no/)
- ![Black envelopes sealed with fleur-de-lis wax seals, photographed in black and white](https://csidia.com/img/nota-sigillo-ceralacca-600.webp)

  Regulation 30 August 2026

  **Copy of the Employee File: Trade Secrets Do Not Justify a Blanket Refusal**

  GDPR Article 15, Recital 63 and the Court of Justice ruling in C-487/21: an employee’s file never sits in one system, and trade secrets do not let a company withhold it wholesale.

  → [https://csidia.com/en/notes/copia-fascicolo-lavoratore-segreto-industriale-articolo-15/](https://csidia.com/en/notes/copia-fascicolo-lavoratore-segreto-industriale-articolo-15/)
- ![Cross-section of a tree trunk photographed from above, concentric growth rings in high-contrast black and white](https://csidia.com/img/nota-anelli-tronco-600.webp)

  Regulation 30 August 2026

  **Strategic plants: the landfill guarantee turns annual, compliance must be proven day by day**

  Decree-Law 154/2026 rewrites Article 208(11)(g) of Italy’s Environmental Code: an annual guarantee on multi-year permits, for companies under extraordinary administration running strategic plants.

  → [https://csidia.com/en/notes/discariche-garanzia-annuale-conformita-giorno-per-giorno/](https://csidia.com/en/notes/discariche-garanzia-annuale-conformita-giorno-per-giorno/)
- ![Two rings of a disassembled ball bearing, one closed and resting against the other with several loose steel balls spilled beside it, black-and-white photograph](https://csidia.com/img/nota-cuscinetto-600.webp)

  Observatory 30 August 2026

  **Karman-Walker: the loan is filed in full, the sale contract is not**

  The 28 August 2026 8-K: the sixth amendment to the credit agreement is attached in full, while the Share Purchase Agreement that bought a Scottish supplier of missile-seeker components appears in no other Karman filing.

  → [https://csidia.com/en/notes/karman-walker-prestito-depositato-contratto-no/](https://csidia.com/en/notes/karman-walker-prestito-depositato-contratto-no/)
- ![A drawer of a library-style card-catalogue cabinet, pulled open and jutting out among many identical closed drawers, black-and-white photograph](https://csidia.com/img/nota-schedario-cassetti-600.webp)

  Observatory 30 August 2026

  **Mercury’s 8-K on the outside-vendor agreement has arrived: item 2.02, not item 1.01**

  The follow-up to our 6 August piece: Mercury Systems’ 8-K on quarterly results, filed 18 August 2026, names the vendor only in one bullet point of a slide the issuer itself states it does not want treated as “filed.”

  → [https://csidia.com/en/notes/mercury-palantir-item-202-non-101/](https://csidia.com/en/notes/mercury-palantir-item-202-non-101/)
- ![Two-pan brass balance on a wooden shelf, the empty pans resting at slightly different heights, black-and-white photograph](https://csidia.com/img/nota-bilancia-ottone-600.webp)

  Observatory 30 August 2026

  **Qwen3.8-Flash-Next: 6 billion active, 180 to load, 51 sitting in a table**

  Alibaba publishes on Hugging Face a preview of the Qwen4 architecture: 360 GB of weights, one-thirtieth active per token. What the card states, what it does not.

  → [https://csidia.com/en/notes/qwen3-8-flash-next-6-miliardi-attivi-180-totali/](https://csidia.com/en/notes/qwen3-8-flash-next-6-miliardi-attivi-180-totali/)
- ![Deserted colonnade with rows of empty chairs in the background and perspective receding into darkness, black-and-white photograph](https://csidia.com/img/nota-portico-sedie-vuote-600.webp)

  Observatory 29 August 2026

  **Eleven years of waiting times in Emilia-Romagna: the 2021 step never closed**

  We rebuilt 499 weeks of waiting times from the Region’s public data: the share within the standard falls from 98% to 88% between 2018 and 2021 and never recovers, while volume stays flat.

  → [https://csidia.com/en/notes/attese-emilia-romagna-undici-anni-gradino-2021/](https://csidia.com/en/notes/attese-emilia-romagna-undici-anni-gradino-2021/)
- ![Close-up of two dusty metal gear teeth meshing together, black-and-white macro photograph](https://csidia.com/img/nota-ruote-dentate-polvere-600.webp)

  Regulation 29 August 2026

  **Medicines: the central database has a decree, and a 24-hour clock**

  The 16 June 2026 decree rebuilds Italy’s central medicines database, now at the Ministry of Health: manufacturers, depositors and wholesalers report within 24 hours.

  → [https://csidia.com/en/notes/banca-dati-farmaci-produttori-grossisti-24-ore/](https://csidia.com/en/notes/banca-dati-farmaci-produttori-grossisti-24-ore/)
- ![A judge’s gavel resting on its sound block, with a pale metal band, black-and-white photograph on a dark ground](https://csidia.com/img/nota-martelletto-600.webp)

  Regulation 29 August 2026

  **Classified contracts: the exemption is from the tender, not from oversight**

  Article 139 of Italy’s Public Contracts Code exempts classified contracts from the tender, not from oversight: two reasoned orders, the clearance, the Court of Auditors.

  → [https://csidia.com/en/notes/contratti-secretati-controllo-corte-dei-conti/](https://csidia.com/en/notes/contratti-secretati-controllo-corte-dei-conti/)
- ![Panoramic view of a dense bank of fog advancing over a terraced, cultivated valley, with clear sky above and farmhouses visible below the cloud front, black and white photograph](https://csidia.com/img/nota-banco-di-nebbia-600.webp)

  Observatory 29 August 2026

  **The Pentagon never explained why DJI “contributes” to China’s defense industry**

  On 14 August 2026 the D.C. Circuit reopens the DJI case: the district court had upheld the Pentagon’s claim by citing reasons the Pentagon itself never put in writing. The paragraph meant to explain DJI’s contribution to China’s defense industrial base is redacted in full, save for its heading.

  → [https://csidia.com/en/notes/dji-pentagono-sentenza-motivazione-redatta/](https://csidia.com/en/notes/dji-pentagono-sentenza-motivazione-redatta/)
- ![Close-up, angled view of a black storage unit with identical bays, each with a small lock and a vertical indicator mark, blurred white background, black-and-white photograph](https://csidia.com/img/nota-baie-dischi-600.webp)

  Observatory 29 August 2026

  **Granite 4.2 from IBM: fully dense, the declared 512K context stops at 128K in the engine**

  IBM releases Granite 4.2, three dense Apache 2.0 models built for enterprise agents: no sparse parameters, but the 512K context trained into the base model never reaches the config that serves it.

  → [https://csidia.com/en/notes/granite-4-2-ibm-denso-contesto-512k-128k/](https://csidia.com/en/notes/granite-4-2-ibm-denso-contesto-512k-128k/)
- ![The parabolic dish of a tracking radar, shot from below against a cloudless sky, black-and-white photograph](https://csidia.com/img/nota-radar-mimetico-600.webp)

  Observatory 29 August 2026

  **Palladyne AI and IAI: the loitering-munitions exclusive is still a memorandum**

  The 8-K of 8 June 2026: Palladyne AI and IAI (owned by the State of Israel) sign a memorandum, not a contract, over the Harpy loitering munitions in the US.

  → [https://csidia.com/en/notes/palladyne-iai-harpy-esclusiva-memorandum/](https://csidia.com/en/notes/palladyne-iai-harpy-esclusiva-memorandum/)
- ![Aerial view of a flooded river valley: fields and hedgerows under water between lines of trees, black-and-white photograph](https://csidia.com/img/nota-valle-allagata-600.webp)

  Scenarios 29 August 2026

  **Flood risk at the end of summer and in autumn: what climate change actually tells us**

  ISPRA measures, the IPCC projects using calibrated language: what is established about autumn flood risk, and which mapping cycle your site is pegged to.

  → [https://csidia.com/en/notes/piena-autunno-cambiamento-climatico/](https://csidia.com/en/notes/piena-autunno-cambiamento-climatico/)
- ![Concrete wall marked by a horizontal crack filled with lighter mortar, black-and-white photograph](https://csidia.com/img/nota-muro-crepa-stuccata-600.webp)

  Regulation 29 August 2026

  **Catastrophe cover premiums must be proportional to risk. Who checks?**

  Italian law obliges companies to insure against earthquakes, floods and landslides, and the regulation requires premiums proportional to risk, computed on public hazard maps. We put online the part you can check yourself.

  → [https://csidia.com/en/notes/polizza-catastrofale-premio-proporzionale-al-rischio/](https://csidia.com/en/notes/polizza-catastrofale-premio-proporzionale-al-rischio/)
- ![An anonymous biometric reader on a rough concrete wall in an empty corridor, in black and white](https://csidia.com/img/nota-lettore-accessi-600.webp)

  Regulation 28 August 2026

  **Fingerprint, Face, Iris: The Proof Your Reader’s Vendor Never Handed Over**

  A biometric reader in the workplace processes data that Italy’s Privacy Code, art. 2-septies, and GDPR art. 9 subject to a double filter. The Tropea case, verified against the source.

  → [https://csidia.com/en/notes/dati-biometrici-lavoratori-base-giuridica-mancante/](https://csidia.com/en/notes/dati-biometrici-lavoratori-base-giuridica-mancante/)
- ![A large white parabolic antenna pointed at a clear sky, with identical antennas lined up on the horizon behind it, black-and-white photograph](https://csidia.com/img/nota-antenna-radioastronomica-600.webp)

  Observatory 28 August 2026

  **The company that lost the FAA’s SMART contract still got an order with its name**

  On 23 June 2026 the FAA awarded Air Space Intelligence the $875,950,000 SMART contract; on 13 August a non-competed $500,000 order under the same name went to a US data-analytics software company, which had lost the competition.

  → [https://csidia.com/en/notes/faa-smart-palantir-ordine-non-competitivo/](https://csidia.com/en/notes/faa-smart-palantir-ordine-non-competitivo/)
- ![A corridor inside a vault room lined with rows of small dark wooden safe-deposit boxes, each with a nameplate and lock, converging on a single locked steel door at the far end, black-and-white photograph](https://csidia.com/img/nota-cassette-sicurezza-600.webp)

  Regulation 28 August 2026

  **Legislative Decree 51/2018: what an AI system’s log must say when the police use it**

  The decree implementing Directive (EU) 2016/680 replaces the GDPR for judicial policing. Article 21 requires logging the reasons, date and time of every operation; Article 4 requires separating facts from evaluations before any transmission.

  → [https://csidia.com/en/notes/registro-operazioni-polizia-motivi-se-possibile/](https://csidia.com/en/notes/registro-operazioni-polizia-motivi-se-possibile/)
- ![Close-up view of industrial cooling fans arranged in symmetrical pairs inside a rack, black-and-white photograph](https://csidia.com/img/nota-ventole-server-600.webp)

  Observatory 27 August 2026

  **GLM-5.3-Flash from Z.ai: MIT licence, 328 GB of weights, you build the rest**

  Z.ai releases GLM-5.3-Flash as open weights under an MIT licence: 320 billion parameters, 328 GB on disk. We verify the licence, the real weight and what the weights leave out.

  → [https://csidia.com/en/notes/glm-5-3-flash-zai-costo-reale-perimetro/](https://csidia.com/en/notes/glm-5-3-flash-zai-costo-reale-perimetro/)
- ![Aerial view of an open-pit quarry with concentric terraced benches, black and white photograph](https://csidia.com/img/nota-cava-a-terrazze-600.webp)

  Observatory 27 August 2026

  **Range Impact and Vetted Portal: the contract is filed, the liability is not**

  The 17 August 2026 8-K: Vetted Consultant will build Range Impact a custom AI agent for permit compliance — $626,000, a clause shifting onto the client every decision made on third-party models, and a warrant on 500,000 shares tying the supplier to its own client.

  → [https://csidia.com/en/notes/range-impact-vetted-portal-contratto-depositato-responsabilita-no/](https://csidia.com/en/notes/range-impact-vetted-portal-contratto-depositato-responsabilita-no/)
- ![A view from below of several clusters of rocket engine nozzles arranged in a cross pattern against the sky, black and white photograph](https://csidia.com/img/nota-ugelli-razzo-600.webp)

  Observatory 27 August 2026

  **Ursa Major goes to Nasdaq: the contract is filed, the projections are not**

  The 25 August 2026 8-K: the Business Combination Agreement is filed, the $2.3 billion valuation rests on furnished projections — and Exhibit 99.3, the one with the numbers, is not in the filing.

  → [https://csidia.com/en/notes/ursa-major-nasdaq-contratto-depositato-proiezioni/](https://csidia.com/en/notes/ursa-major-nasdaq-contratto-depositato-proiezioni/)
- ![Black-and-white photograph of two differently shaped hourglasses side by side on a light surface, with sand at different levels](https://csidia.com/img/nota-due-clessidre-600.webp)

  Regulation 27 August 2026

  **Voucher Cloud & Cybersecurity: the window opens 10 November, the “starting point” stays scattered across six systems**

  The 4 August 2026 directorial decree opens the Voucher Cloud & Cybersecurity window (€150 million, from 10 November 2026): proof of the “starting point” it demands stays scattered across six systems.

  → [https://csidia.com/en/notes/voucher-cloud-cybersecurity-sei-sistemi/](https://csidia.com/en/notes/voucher-cloud-cybersecurity-sei-sistemi/)
- ![Corner of a skylight with frosted glass, branch shadows visible but indistinct through the frozen surface, black and white photograph](https://csidia.com/img/nota-vetro-smerigliato-600.webp)

  Regulation 27 August 2026

  **Whistleblowing: a reporter’s confidentiality is a sanctioned duty, and the proof sits in six places**

  Italy’s Legislative Decree 24/2023: a whistleblower’s confidentiality is not a promise, it’s a duty ANAC can fine. The thresholds, the moving deadline, the six places holding the proof.

  → [https://csidia.com/en/notes/whistleblowing-riservatezza-segnalante-sei-luoghi/](https://csidia.com/en/notes/whistleblowing-riservatezza-segnalante-sei-luoghi/)
- ![Black-and-white photograph of five sealed cardboard boxes taped shut, stacked on a wooden shelf against a white brick wall](https://csidia.com/img/nota-scatole-impilate-600.webp)

  Regulation 26 August 2026

  **GPSR, general product safety: obligations already in force, the file stays scattered across six systems**

  Regulation (EU) 2023/988 (GPSR) has applied since 13 December 2024, updated from 29 May 2026. The file it requires stays scattered across six company systems.

  → [https://csidia.com/en/notes/gpsr-sicurezza-prodotti-sei-sistemi/](https://csidia.com/en/notes/gpsr-sicurezza-prodotti-sei-sistemi/)
- ![A storage module pulled halfway out of a server rack, with other identical modules lined up in the background, black-and-white photograph](https://csidia.com/img/nota-modulo-server-600.webp)

  Observatory 26 August 2026

  **Thomson-1.0-Small from Thomson Reuters: 3 billion active parameters, 35 you still have to keep in memory**

  Thomson Reuters releases open weights for legal, tax and journalism work: 35 billion parameters, non-commercial licence, no minimum hardware declared.

  → [https://csidia.com/en/notes/thomson-1-0-small-parametri-attivi-memoria/](https://csidia.com/en/notes/thomson-1-0-small-parametri-attivi-memoria/)
- ![Row of cylindrical metal industrial silos photographed close-up in black and white, with a dark building in the background](https://csidia.com/img/nota-silos-industriali-600.webp)

  Observatory 24 August 2026

  **Tencent’s EVIE-Preview-4.5B: the model weighs 8.5 GB. Indexing your documents doesn’t**

  Tencent releases EVIE-Preview-4.5B, a visual retrieval model for scanned documents, first on the ViDoRe boards it reports itself. The real cost is the index, not the GPU.

  → [https://csidia.com/en/notes/evie-preview-tencent-indice-documenti-terabyte/](https://csidia.com/en/notes/evie-preview-tencent-indice-documenti-terabyte/)
- ![Close-up black-and-white photograph of ceramic dome insulators at a high-voltage electrical substation, with pylons and busbars in the background](https://csidia.com/img/nota-isolatori-alta-tensione-600.webp)

  Observatory 24 August 2026

  **NVIDIA guarantees $105 billion for OpenAI’s lease in Pike County, and the tenant stays unnamed**

  NVIDIA’s Form 8-K of 17 August 2026: a guarantee of up to $105 billion for SB Energy’s Ohio campus. The tenant, an OpenAI affiliate, is never named in the filed text.

  → [https://csidia.com/en/notes/nvidia-sb-energy-openai-garanzia-105-miliardi/](https://csidia.com/en/notes/nvidia-sb-energy-openai-garanzia-105-miliardi/)
- ![Close-up black-and-white photograph of tangled spiral metal shavings, chaotic reflective texture](https://csidia.com/img/nota-trucioli-metallo-600.webp)

  Regulation 24 August 2026

  **End-of-life vehicles: EU Regulation 2026/1738 and circularity data scattered across six systems**

  Regulation (EU) 2026/1738 on end-of-life vehicles: in force from 13 August 2026, general application from 2028. Circularity data stays spread across six systems.

  → [https://csidia.com/en/notes/veicoli-fuori-uso-circolarita-sei-sistemi/](https://csidia.com/en/notes/veicoli-fuori-uso-circolarita-sei-sistemi/)
- ![Close-up frost crystals on a dark surface, needle-like interwoven texture, black-and-white photograph](https://csidia.com/img/nota-cristalli-brina-600.webp)

  Regulation 22 August 2026

  **Medicines: the old seal ends on 9 February 2027, the batch stays scattered across six systems**

  Italian Legislative Decree 10/2025 transposes EU Regulation 2016/161: the stabilisation period ends on 8 February 2027. Batch data sits in six systems.

  → [https://csidia.com/en/notes/datamatrix-farmaci-sei-sistemi/](https://csidia.com/en/notes/datamatrix-farmaci-sei-sistemi/)
- ![A stack of balanced stones on a larger rock, a blurred beach in the background, black-and-white photograph with no people and no writing](https://csidia.com/img/nota-pietre-equilibrio-600.webp)

  Observatory 22 August 2026

  **S1-mini: the declared licence has the file, and the link works**

  S1-mini by Superwhisper, 0.6B parameters: Apache 2.0 licence, LICENSE file present, link verified HTTP 200 — against three preceding cases without that file.

  → [https://csidia.com/en/notes/s1-mini-licenza-dichiarata-file-presente/](https://csidia.com/en/notes/s1-mini-licenza-dichiarata-file-presente/)
- ![Close-up black-and-white photograph of a thick rope made of twisted strands, backlit texture](https://csidia.com/img/nota-corda-trefoli-600.webp)

  Regulation 21 August 2026

  **CSDDD: the threshold rises to 5,000 employees, the supplier data stays scattered**

  CSDDD, Directive (EU) 2024/1760: threshold at 5,000 employees, application from 26 July 2029. The data on chain-of-activities suppliers stays scattered.

  → [https://csidia.com/en/notes/csddd-due-diligence-fornitori-di-filiera/](https://csidia.com/en/notes/csddd-due-diligence-fornitori-di-filiera/)
- ![A rocky cliff overlooking a sea strait in fog, with a lighthouse and a few white buildings on a headland, black and white photograph](https://csidia.com/img/nota-faro-scogliera-600.webp)

  Observatory 21 August 2026

  **Helsing reaches Japan via Rakuten: a point of contact, not a contract**

  Reuters, Nikkei and Jiji confirm Rakuten's role for Helsing's HX-2 drone in Japan on 17 August. No filed agreement, no joint press release.

  → [https://csidia.com/en/notes/helsing-rakuten-giappone-punto-di-contatto/](https://csidia.com/en/notes/helsing-rakuten-giappone-punto-di-contatto/)
- ![An empty, derelict room with tiled walls and fallen plaster, light from a window, black-and-white photograph with no people and no writing](https://csidia.com/img/nota-stanza-vuota-600.webp)

  Observatory 21 August 2026

  **Ornith-1.5-397B: licence declared, the file still missing for the third time in three days**

  Ornith-1.5-397B, 397 billion parameters: MIT licence declared, no LICENSE file in the repository. Verified on 21 August: the third case in three days.

  → [https://csidia.com/en/notes/ornith-1-5-397b-licenza-dichiarata-terzo-caso/](https://csidia.com/en/notes/ornith-1-5-397b-licenza-dichiarata-terzo-caso/)
- ![Black-and-white aerial view of an Alpine valley, forested slopes and a dirt track descending towards a lake in the valley floor](https://csidia.com/img/nota-vallata-alpina-600.webp)

  Operational AI 20 August 2026

  **Why a single bear sighting is not enough: the case for each animal’s history over time**

  Trento’s Province warns: a point on a map does not say where the bear is now. We restate our method — systematic scanning and a history for each individual.

  → [https://csidia.com/en/notes/avvistamenti-orsi-mappa-non-basta-storia-individuo/](https://csidia.com/en/notes/avvistamenti-orsi-mappa-non-basta-storia-individuo/)
- ![Close-up pyrite crystals, metallic facets arranged irregularly, black-and-white photograph](https://csidia.com/img/nota-cristalli-pirite-600.webp)

  Regulation 20 August 2026

  **Battery passport: mandatory from 18 February 2027, and the key data point sits outside the company**

  Regulation (EU) 2023/1542, Art. 77: the battery passport applies from 18 February 2027. Composition, critical supply chain and real-world use: the data sits in six systems.

  → [https://csidia.com/en/notes/passaporto-batteria-dato-fuori-azienda/](https://csidia.com/en/notes/passaporto-batteria-dato-fuori-azienda/)
- ![Close-up of a chess piece on a chessboard, other pieces blurred in the background, black-and-white photograph](https://csidia.com/img/nota-scacchi-600.webp)

  Observatory 20 August 2026

  **UI-Mate-27B: the open-weight agent that clicks for you. With what permissions?**

  Tencent’s UI-Mate-27B, open weights on Hugging Face, clicks and types on screen: licence, gating, context and permissions verified on 20 August.

  → [https://csidia.com/en/notes/ui-mate-27b-agente-pesi-aperti-permessi-desktop/](https://csidia.com/en/notes/ui-mate-27b-agente-pesi-aperti-permessi-desktop/)
- ![Radar tower with a spherical dome and dozens of dish antennas pointing in different directions, against an intense sky, black and white photograph](https://csidia.com/img/nota-cupola-radar-600.webp)

  Observatory 19 August 2026

  **Against drones, DHS writes two lists. Anduril makes only one**

  DHS awards $1.5 billion against hostile drones across two tracks: owned hardware or a managed service. Anduril wins only the second, and protests to the GAO.

  → [https://csidia.com/en/notes/anduril-dhs-due-liste-controdroni/](https://csidia.com/en/notes/anduril-dhs-due-liste-controdroni/)
- ![Strips of corrugated cardboard stacked and frayed, photographed close up in black and white](https://csidia.com/img/nota-cartone-ondulato-strappato-600.webp)

  Regulation 19 August 2026

  **EU Packaging Regulation 2025/40: applicable from 12 August, the data sits in five different systems**

  Regulation (EU) 2025/40, Article 71: applies from 12 August 2026. Composition, weight, recycled content, volumes by Member State: never in one system.

  → [https://csidia.com/en/notes/imballaggi-ppwr-dato-in-cinque-sistemi/](https://csidia.com/en/notes/imballaggi-ppwr-dato-in-cinque-sistemi/)
- ![A server module pulled halfway out of a rack in a dark room, black and white photograph](https://csidia.com/img/nota-lama-server-600.webp)

  Partnerships 19 August 2026

  **IonQ and Anduril: a memorandum, not a contract**

  The 8-K filed on 5 August 2026: IonQ discloses a memorandum with Anduril on quantum technologies for defence, with no Item 1.01 and no dedicated release. What is missing.

  → [https://csidia.com/en/notes/ionq-anduril-memorandum-non-contratto/](https://csidia.com/en/notes/ionq-anduril-memorandum-non-contratto/)
- ![Wooden card-catalogue drawer pulled out among many others, filled with index cards, black-and-white photograph with no people or legible writing](https://csidia.com/img/nota-schedario-aperto-600.webp)

  Observatory 19 August 2026

  **Ling-3.0-tiny: MIT licence declared in the tags, no licence file in the weights repository**

  Ling-3.0-tiny (Ant Group): 7.9 billion parameters, built to run on a Mac mini. Verified ourselves: MIT licence in the tags, no LICENSE file in the repository.

  → [https://csidia.com/en/notes/ling-3-0-tiny-licenza-dichiarata-file-assente/](https://csidia.com/en/notes/ling-3-0-tiny-licenza-dichiarata-file-assente/)
- ![Five old metal keys hanging on hooks along a dark wooden rack, black and white photograph, blurred background](https://csidia.com/img/nota-chiavi-appese-600.webp)

  Regulation 19 August 2026

  **NOSI: an Italian company’s industrial security clearance is six documents, not a stamp**

  Italy’s DPCM 5/2015: what a company must prove for its industrial security clearance — personnel clearances, secure area, beneficial owners, anti-mafia checks.

  → [https://csidia.com/en/notes/nosi-nulla-osta-sicurezza-industriale-sei-documenti/](https://csidia.com/en/notes/nosi-nulla-osta-sicurezza-industriale-sei-documenti/)
- ![Stretch film wrapped around a pallet, photographed close up: folds and reflections in black and white](https://csidia.com/img/nota-pallet-fasciato-600.webp)

  Regulation 17 August 2026

  **The question is not whether you hold a BTI: it is whether the goods still correspond to it**

  Regulation (EU) 952/2013, Article 33: a BTI holder must prove the goods still correspond — scattered across production, purchasing, logistics and customs.

  → [https://csidia.com/en/notes/dazi-origine-prova-dati-in-cinque-sistemi/](https://csidia.com/en/notes/dazi-origine-prova-dati-in-cinque-sistemi/)
- ![Cut ends of sawn wooden planks stacked on spacers, photographed close up in black and white](https://csidia.com/img/nota-tavole-di-legno-impilate-600.webp)

  Regulation 17 August 2026

  **The question is not whether you declare deforestation-free: it is which plot your batch came from**

  Regulation (EU) 2023/1115, Article 9: the due diligence statement requires geolocation of every plot of land. The data sits scattered across five systems.

  → [https://csidia.com/en/notes/deforestazione-lotto-appezzamento-legame-che-manca/](https://csidia.com/en/notes/deforestazione-lotto-appezzamento-legame-che-manca/)
- ![Diamond-pattern metal grille in front of closed doors, black-and-white photograph, no people or legible writing](https://csidia.com/img/nota-tornello-600.webp)

  Observatory 17 August 2026

  **Open licence, closed access: a Hugging Face model in Apache 2.0 behind a login**

  A Hugging Face repository declares an Apache 2.0 licence, yet downloading a file returns HTTP 401 without authentication: the licence is not the access channel.

  → [https://csidia.com/en/notes/licenza-aperta-accesso-chiuso-modello-gated/](https://csidia.com/en/notes/licenza-aperta-accesso-chiuso-modello-gated/)
- ![Two transmission masts with antennas and dishes against a cloudy sky, black-and-white photograph](https://csidia.com/img/nota-tralicci-trasmissione-600.webp)

  Observatory 17 August 2026

  **NextNav and Safran: the partnership was announced, the contract was not**

  The 11 August 2026 Form 8-K: NextNav names Safran as a partner for backing up GPS, but no Item 1.01 records a contract. What is missing.

  → [https://csidia.com/en/notes/nextnav-safran-partnership-non-contratto/](https://csidia.com/en/notes/nextnav-safran-partnership-non-contratto/)
- ![Black and white photograph of two industrial metal gears meshing, with no people and no legible text](https://csidia.com/img/nota-ingranaggio-conduttore-600.webp)

  Observatory 17 August 2026

  **NVIDIA-Nemotron-Labs-Teacher-Chat: 550 billion parameters to train a smaller model**

  NVIDIA releases a 550-billion-parameter model built to train a smaller one: the licence, the minimum hardware, and the missing safety subcards.

  → [https://csidia.com/en/notes/nvidia-nemotron-teacher-modello-che-ne-addestra-un-altro/](https://csidia.com/en/notes/nvidia-nemotron-teacher-modello-che-ne-addestra-un-altro/)
- ![Corrugated metal wall of an industrial building, photographed frontally in black and white, with a vertical downpipe](https://csidia.com/img/nota-lamiera-ondulata-600.webp)

  Regulation 17 August 2026

  **RENTRI: the register is not enough, you need proof the waste arrived**

  RENTRI, Decree 59/2023: who must register, the deadlines already passed, and manifest penalties from 15 September 2026 — where the missing data sits.

  → [https://csidia.com/en/notes/rentri-prova-rifiuto-arrivato/](https://csidia.com/en/notes/rentri-prova-rifiuto-arrivato/)
- ![Threshold of an open interior door onto a bright exterior, black-and-white photograph, no people or writing](https://csidia.com/img/nota-porta-interna-600.webp)

  Observatory 16 August 2026

  **Qwen3.8-2.4T-A95B: above fifty million dollars a separate licence is required, not for internal use**

  The Qwen3.8-2.4T-A95B model on Hugging Face: the weights’ licence requires a separate licence above $50 million in revenue, but exempts internal use.

  → [https://csidia.com/en/notes/qwen-2-4t-licenza-soglia-cinquanta-milioni-uso-interno/](https://csidia.com/en/notes/qwen-2-4t-licenza-soglia-cinquanta-milioni-uso-interno/)
- ![Crumpled blank sheet of white paper photographed close up, black and white, no writing or people](https://csidia.com/img/nota-foglio-bianco-600.webp)

  Observatory 15 August 2026

  **DeepSeek-V4-Pro-0813: MIT licence, weights included, no usage policy in the repository**

  Checked file by file: the DeepSeek-V4-Pro-0813 repository on Hugging Face carries only the MIT licence, names the weights, no second restrictive document.

  → [https://csidia.com/en/notes/deepseek-v4-pro-mit-senza-usage-policy/](https://csidia.com/en/notes/deepseek-v4-pro-mit-senza-usage-policy/)
- ![Metal truss structure seen from below against the sky, black-and-white photograph](https://csidia.com/img/nota-struttura-metallica-600.webp)

  Observatory 15 August 2026

  **Starlab is a joint venture, and Voyager controls 61.9% of it**

  The 14 August 2026 Form 8-K: Voyager merges two segments and confirms its 61.9% stake in the Starlab joint venture, with Airbus, Mitsubishi and a US software company.

  → [https://csidia.com/en/notes/starlab-joint-venture-chi-comanda-nella-stazione/](https://csidia.com/en/notes/starlab-joint-venture-chi-comanda-nella-stazione/)
- ![Black-and-white photograph of a diamond-mesh wire fence, sharp on a few knots and blurred elsewhere](https://csidia.com/img/nota-setaccio-600.webp)

  Regulation 13 August 2026

  **Probabilistic analysis and Article 158: the GDPR rights that stay limited**

  Legislative Decree 141/2026, Article 158: Italy’s tax agency isolates unknown tax risks with AI; paragraph 4 defers GDPR rights limitations to a Treasury regulation.

  → [https://csidia.com/en/notes/analisi-probabilistica-articolo-158-diritti-limitati/](https://csidia.com/en/notes/analisi-probabilistica-articolo-158-diritti-limitati/)
- ![A cabinet with glass doors and empty shelves in a minimal interior, black-and-white photograph](https://csidia.com/img/nota-teca-vetro-600.webp)

  Partnerships 12 August 2026

  **A multi-year partnership announced, and no agreement filed**

  Quantinuum's 8-K of 11 August 2026 announces a multi-year partnership with Oracle under Item 7.01: no Item 1.01, no agreement and no figures filed.

  → [https://csidia.com/en/notes/quantinuum-oracle-item-701-non-101/](https://csidia.com/en/notes/quantinuum-oracle-item-701-non-101/)
- ![Identical plain white cardboard boxes stacked, black-and-white photograph](https://csidia.com/img/nota-scatole-identiche-600.webp)

  Observatory 11 August 2026

  **Five vehicles named after Anduril, and Anduril signs none of them**

  On 11 August 2026 a Form D/A registers the fifth fund series named after Anduril: manager in Boca Raton, $11.4m raised, Anduril never a signatory.

  → [https://csidia.com/en/notes/cinque-veicoli-intestati-anduril-form-d/](https://csidia.com/en/notes/cinque-veicoli-intestati-anduril-form-d/)
- ![A wind turbine blade seen from below against the sky, black-and-white photograph](https://csidia.com/img/nota-pala-eolica-600.webp)

  Observatory 11 August 2026

  **The inspection data on your network has changed owner**

  The 10 August Form 8-K: Ondas buys Cyberhawk for $118.2m and folds drone inspections into its Foundry platform. Did your contract see this coming?

  → [https://csidia.com/en/notes/dati-ispezione-infrastrutture-cambiano-proprietario/](https://csidia.com/en/notes/dati-ispezione-infrastrutture-cambiano-proprietario/)
- ![Closed door at the end of a narrow, bare corridor, black-and-white photograph](https://csidia.com/img/nota-porta-corridoio-600.webp)

  Regulation 11 August 2026

  **The inspection does not ask whether you comply: it asks for the data that proves it**

  On 11 August 2026 ACN published the MVE FAQs on NIS supervision: Article 37(2) of the decree asks for the data proving implementation, not a signed policy.

  → [https://csidia.com/en/notes/ispezione-nis-dati-che-dimostrano-attuazione/](https://csidia.com/en/notes/ispezione-nis-dati-che-dimostrano-attuazione/)
- ![A wall of layered sedimentary rock, black-and-white photograph](https://csidia.com/img/nota-strati-roccia-600.webp)

  Partnerships 11 August 2026

  **A licence paid in shares: the platform supplier owns 7.4% of its customer**

  On 10 August 2026 Surf Air Mobility announces its partnership with a US data-analytics software company; the 10-Q filed the same day shows the licence paid in shares, and a July 13G shows the 7.4% stake.

  → [https://csidia.com/en/notes/licenza-pagata-in-azioni-quota-del-fornitore/](https://csidia.com/en/notes/licenza-pagata-in-azioni-quota-del-fornitore/)
- ![Corner of a stack of overlapping sheets of paper in strong backlight, close-up detail, black-and-white photograph](https://csidia.com/img/nota-fogli-sovrapposti-600.webp)

  Observatory 11 August 2026

  **Apache 2.0, and a second file that rules out defence and health**

  Muse Glimmer-30B: a genuine Apache 2.0 licence, a verified publisher. But a second file, USAGE_POLICY.md, rules out defence, infrastructure and health.

  → [https://csidia.com/en/notes/licenza-permissiva-usage-policy-che-vieta/](https://csidia.com/en/notes/licenza-permissiva-usage-policy-che-vieta/)
- ![Empty black picture frame hanging on a white wall, black-and-white photograph](https://csidia.com/img/nota-cornice-vuota-600.webp)

  Regulation 11 August 2026

  **A penetration test is a “managed security service”. Now what?**

  Regulation (EU) 2025/37 counts penetration testing, security audits and consulting as managed security services. Italy’s side has not arrived yet.

  → [https://csidia.com/en/notes/servizi-sicurezza-gestiti-definizione-larga-accreditamento-assente/](https://csidia.com/en/notes/servizi-sicurezza-gestiti-definizione-larga-accreditamento-assente/)
- ![The threshold of an airport runway with painted markings on the tarmac, countryside and overcast sky in the background, black and white photograph](https://csidia.com/img/nota-pista-soglia-600.webp)

  Partnerships 10 August 2026

  **The press release says antitrust, the filing says national security**

  Archer buys Wisk, SkyGrid and Insitu from Boeing: the release cites antitrust, the Form 8-K adds national security and a deadline five months later.

  → [https://csidia.com/en/notes/archer-boeing-antitrust-e-sicurezza-nazionale/](https://csidia.com/en/notes/archer-boeing-antitrust-e-sicurezza-nazionale/)
- ![Sacks stacked on a wooden pallet outside a warehouse loading bay, black-and-white photograph](https://csidia.com/img/nota-sacchi-pallet-600.webp)

  Observatory 10 August 2026

  **No defined exit strategy: the audit line that concerns you**

  An internal WFP audit, seen by FRANCE 24 and PassBlue, reveals no exit strategy from its software supplier: the question that concerns every critical supplier.

  → [https://csidia.com/en/notes/audit-wfp-nessuna-strategia-di-uscita/](https://csidia.com/en/notes/audit-wfp-nessuna-strategia-di-uscita/)
- ![Corridor of a public building with a closed double door at the far end, black-and-white photograph](https://csidia.com/img/nota-corridoio-porta-chiusa-600.webp)

  Regulation 10 August 2026

  **Chapter IV has applied since June, the Italian authority has not**

  Chapter IV of the Cyber Resilience Act applies since 11 June 2026. Italy has yet to designate the notifying authority; the delegation expires 9 October.

  → [https://csidia.com/en/notes/cra-capo-quarto-autorita-di-notifica-delega/](https://csidia.com/en/notes/cra-capo-quarto-autorita-di-notifica-delega/)
- ![Wall of old stacked television sets on shelves, one showing static and one a calibration bar, black-and-white photograph](https://csidia.com/img/nota-schermi-600.webp)

  Regulation 10 August 2026

  **Not the satire: the supervisor challenges how the notice was designed**

  A journalist’s deepfake in a satirical show: the Italian supervisor finds a breach of GDPR arts. 5 and 25. Not for the content — for the marking.

  → [https://csidia.com/en/notes/deepfake-satira-articolo-25-avviso-progettato/](https://csidia.com/en/notes/deepfake-satira-articolo-25-avviso-progettato/)
- ![A row of painted wooden matryoshka dolls lined up, from the smallest in sharp focus at the front to the largest blurred in the background, black-and-white photograph](https://csidia.com/img/nota-matrioske-600.webp)

  Observatory 10 August 2026

  **Derivatives of a model barred in Europe carry different licences**

  On Hugging Face, MiniMax H3 derivatives declare Apache 2.0, “unknown” or nothing. The weights licence excludes the European Union and forbids changing its terms.

  → [https://csidia.com/en/notes/derivati-pesi-licenza-cambia-strada/](https://csidia.com/en/notes/derivati-pesi-licenza-cambia-strada/)
- ![A blank sheet of paper fed into the roller of a typewriter, close-up detail, black-and-white photograph](https://csidia.com/img/nota-foglio-in-macchina-600.webp)

  Observatory 10 August 2026

  **Two million for a “proprietary solution”, and nothing else**

  A $2m ICE purchase order says only “proprietary solution”. The registry doesn’t say what it does — the same gap sits in half of supplier registers.

  → [https://csidia.com/en/notes/descrizione-che-non-nomina-registro-fornitori/](https://csidia.com/en/notes/descrizione-che-non-nomina-registro-fornitori/)
- ![Close-up of a calendar page with the grid of days and weeks, black-and-white photograph](https://csidia.com/img/nota-calendario-griglia-600.webp)

  Regulation 9 August 2026

  **Trade-secret injunctions: a window closes on 11 August**

  Law 145/2026 confirms the rewriting of article 132 of the Industrial Property Code. For measures already in force the forfeiture term is sixty days.

  → [https://csidia.com/en/notes/cautelari-segreti-commerciali-sessanta-giorni/](https://csidia.com/en/notes/cautelari-segreti-commerciali-sessanta-giorni/)
- ![Precision mechanism with cog wheels and an engraved graduated ring, close-up detail, black-and-white photograph](https://csidia.com/img/nota-ingranaggi-precisione-600.webp)

  Observatory 9 August 2026

  **The list names the directors, not the companies they run**

  On 7 August the EU adds five people to Annex I of Reg. 269/2014. The companies — drone software, GNSS receivers, gyroscopes — appear only in the reasons.

  → [https://csidia.com/en/notes/designazioni-7-agosto-direttori-non-societa/](https://csidia.com/en/notes/designazioni-7-agosto-direttori-non-societa/)
- ![A cast-iron screw clamp fastened to the edge of a wooden workbench, workshop in the background, black-and-white photograph](https://csidia.com/img/nota-morsetto-600.webp)

  Observatory 9 August 2026

  **Maple-Preview says 5.31 GB. The repository weighs 40.43**

  A 20B-A1B ternary model under MIT, published on 4 August: the card promises 5.31 GB, the weight index declares 40.43. What you actually download.

  → [https://csidia.com/en/notes/maple-preview-ternario-cinque-giga-quaranta/](https://csidia.com/en/notes/maple-preview-ternario-cinque-giga-quaranta/)
- ![Aerial view of a braided river delta, dozens of channels converging into a single main course, black-and-white photograph](https://csidia.com/img/nota-delta-fiume-600.webp)

  Scenarios 9 August 2026

  **The Pentagon’s War Data Platform: what it buys is the integration**

  The CDAO awards Accenture Federal Services the War Data Platform Core Integration. In the federal record the order is signed on 25 June, $102,250 obligated.

  → [https://csidia.com/en/notes/war-data-platform-cdao-integrazione/](https://csidia.com/en/notes/war-data-platform-cdao-integrazione/)
- ![Industrial corrugated-metal facade with three numbered roller-shutter doors, 9, 10 and 11, black-and-white photograph](https://csidia.com/img/nota-baie-carico-600.webp)

  Partnerships 9 August 2026

  **ZeroTier and Carahsoft: what is signed is a route to market**

  ZeroTier Quantum reaches US government buyers through Carahsoft and the NASA SEWP V contract. That is distribution, not accreditation — the difference matters.

  → [https://csidia.com/en/notes/zerotier-carahsoft-canale-non-autorizzazione/](https://csidia.com/en/notes/zerotier-carahsoft-canale-non-autorizzazione/)
- ![A fibre-optic patch panel with rows of connectors and interlaced jumper cables inside a network cabinet, black-and-white photograph](https://csidia.com/img/nota-interconnessione-600.webp)

  Regulation 8 August 2026

  **Eurodac: the databases are interconnected, the data rules come later**

  Law 145/2026: article 13 interconnects Italy’s biometric databases and opens the national Eurodac access point. The decrees are due by 9 December 2026.

  → [https://csidia.com/en/notes/eurodac-interconnessione-banche-dati-decreti/](https://csidia.com/en/notes/eurodac-interconnessione-banche-dati-decreti/)
- ![Glass panels of a revolving door at a building entrance, reflections and shadows on the floor, black-and-white photograph](https://csidia.com/img/nota-oss-porta-girevole-600.webp)

  Observatory 8 August 2026

  **FTEP: private experts inside the State Department, on the company payroll**

  The State Department launches FTEP, with a US data-analytics software company and Anduril among the partners: participants stay employed by the companies that send them.

  → [https://csidia.com/en/notes/ftep-esperti-privati-dipartimento-stato/](https://csidia.com/en/notes/ftep-esperti-privati-dipartimento-stato/)
- ![A large parabolic dish antenna at a ground station pointed at a cloudy sky, with lightning rods on either side, black-and-white photograph](https://csidia.com/img/nota-parabola-600.webp)

  Regulation 8 August 2026

  **No space authorisation until 31 December: the 100-million insurance requirement stays**

  Decree-Law 144/2026 suspends authorisation under Italy’s space law 89/2025 until 31 December. The 100-million insurance and third-party liability remain.

  → [https://csidia.com/en/notes/legge-spaziale-autorizzazione-sospesa-31-dicembre/](https://csidia.com/en/notes/legge-spaziale-autorizzazione-sospesa-31-dicembre/)
- ![A brass two-pan balance scale on a wooden shelf, its cast-iron frame stamped with the load capacity, black-and-white photograph](https://csidia.com/img/nota-bilancia-soglia-600.webp)

  Observatory 8 August 2026

  **LFM2.5 from Liquid AI: above ten million dollars, the licence is not granted**

  LFM2.5, Liquid AI’s edge model on Hugging Face: the LFM Open v1.0 licence denies commercial use once the group’s annual revenue passes 10 million dollars.

  → [https://csidia.com/en/notes/lfm-open-license-soglia-dieci-milioni/](https://csidia.com/en/notes/lfm-open-license-soglia-dieci-milioni/)
- ![Aerial view from above of a bare winter wood crossed by a watercourse, leafless branches and snow-covered ground, black-and-white photograph](https://csidia.com/img/nota-scansione-aerea-600.webp)

  Operational AI 8 August 2026

  **Finding the bear before the collar: an aerial scanning proposal with drones and AI models**

  In Val di Sole, genetic identification of the bear behind recent damage is under way, ahead of a radio collar: what systematic aerial scanning could do.

  → [https://csidia.com/en/notes/orsi-droni-termica-modelli-ai-radiocollare/](https://csidia.com/en/notes/orsi-droni-termica-modelli-ai-radiocollare/)
- ![Concrete spillway channels seen from above, jets of water entering a basin, black-and-white photograph](https://csidia.com/img/nota-scarico-canali-600.webp)

  Partnerships 8 August 2026

  **Volta and Bitdeer in Norway: the announced figure and the filed one**

  Volta launches with a $10bn partnership with an AI lab it does not name. At the SEC, Bitdeer files a 16-year, $4.7bn lease for the same site.

  → [https://csidia.com/en/notes/volta-bitdeer-tydal-numero-depositato/](https://csidia.com/en/notes/volta-bitdeer-tydal-numero-depositato/)
- ![Macro photograph of a printed circuit board with capacitors, resistors and silkscreened reference codes, in black and white](https://csidia.com/img/nota-oss-componenti-600.webp)

  Observatory 7 August 2026

  **FCC 26-50: the covered list reaches components, and a court narrows it**

  FCC 26-50 bars logic-bearing hardware components from equipment authorisation and, after a court ruling, narrows the definition of critical infrastructure. What changes for anyone buying certified hardware.

  → [https://csidia.com/en/notes/componenti-logici-covered-list-fcc/](https://csidia.com/en/notes/componenti-logici-covered-list-fcc/)
- ![A street telephone exchange cabinet with hundreds of identical terminal blocks, jumper wires and hand-written tags, black-and-white photograph](https://csidia.com/img/nota-permutatore-600.webp)

  Regulation 7 August 2026

  **Enriched contact databases: the Lusha fine is a lesson for buyers, not just the seller**

  Italy's Garante fines Lusha 2 million euro for unlawful processing. The real exposure sits with whoever buys enriched contact data into a CRM.

  → [https://csidia.com/en/notes/contatti-professionali-arricchiti-sanzione-garante/](https://csidia.com/en/notes/contatti-professionali-arricchiti-sanzione-garante/)
- ![Air ducts, pipework and cable trays beneath a building ceiling, with a smoke detector, black-and-white photograph](https://csidia.com/img/nota-canalizzazioni-600.webp)

  Partnerships 7 August 2026

  **KODE Labs and the FedStart Programme: the FedRAMP High Authorization Belongs to Someone Else**

  KODE Labs announces FedRAMP High "through [the host company's] FedStart". The regulator's register says: the authorisation belongs to the company hosting the programme, KODE is named inside its perimeter.

  → [https://csidia.com/en/notes/kode-fedramp-high-perimetro-di-un-altro/](https://csidia.com/en/notes/kode-fedramp-high-perimetro-di-un-altro/)
- ![Diamond-pattern metal fencing photographed close up, in black and white, with no people and no legible text](https://csidia.com/img/nota-recinzione-600.webp)

  Observatory 7 August 2026

  **MiniMax H3: the weights are out, the licence excludes the European Union**

  MiniMax H3's weights have been online since 6 August 2026. The licence attached to them excludes the EU, the UK, South Korea and the US from authorised use.

  → [https://csidia.com/en/notes/minimax-h3-licenza-esclude-unione-europea/](https://csidia.com/en/notes/minimax-h3-licenza-esclude-unione-europea/)
- ![Row of red ring binders side by side on an office shelf, black and white photograph](https://csidia.com/img/nota-faldoni-600.webp)

  Regulation 7 August 2026

  **From 10 August the European Commission has its AI-model procedure: who sees your file**

  Commission Implementing Regulation (EU) 2026/1755, in force Monday: trade secrets, file access, limitation periods. Italian decrees not yet in the Gazette.

  → [https://csidia.com/en/notes/regolamento-1755-procedura-dal-10-agosto/](https://csidia.com/en/notes/regolamento-1755-procedura-dal-10-agosto/)
- ![A sliver of sky between two adjoining tower blocks, an elevated walkway crossing it high up, black-and-white photograph](https://csidia.com/img/nota-oss-spiraglio-600.webp)

  Observatory 7 August 2026

  **When the tender document already names the product: the Anduril Pulsar-L case on the Marines’ ACV**

  On 3 August the Marines publish a sole-source notice for the ACV’s C-sUAS: the requirement document already names Anduril. What the mechanism shows.

  → [https://csidia.com/en/notes/requisito-nomina-prodotto-affidamento-diretto/](https://csidia.com/en/notes/requisito-nomina-prodotto-affidamento-diretto/)
- ![Black-and-white photograph of rows of metal chain links, each one hooked into the next](https://csidia.com/img/nota-catena-600.webp)

  Observatory 6 August 2026

  **ChainDrop: the npm worm that survives removal by rewriting VS Code and Claude Code configuration**

  ACN bulletin on ChainDrop: over 400 compromised npm packages, a preinstall script running before the decision, persistence in developer tool configuration.

  → [https://csidia.com/en/notes/chaindrop-npm-worm-configurazione-strumenti/](https://csidia.com/en/notes/chaindrop-npm-worm-configurazione-strumenti/)
- ![Black-and-white high-voltage transmission towers, taut power lines against a flat sky](https://csidia.com/img/nota-tralicci-600.webp)

  Partnerships 6 August 2026

  **Core Scientific and AMD: in the 2.5 GW deal, the word that matters is “potential”**

  On 28 July Core Scientific and AMD announced a partnership covering up to 2.5 GW of capacity: only 437 MW is billed today. What is signed, and what is only promised.

  → [https://csidia.com/en/notes/core-scientific-amd-potenziale-e-fatturato/](https://csidia.com/en/notes/core-scientific-amd-potenziale-e-fatturato/)
- ![A row of empty office desks and chairs in a lit room, nobody seated, photographed in black and white](https://csidia.com/img/nota-scrivania-vuota-600.webp)

  Regulation 6 August 2026

  **AI decrees pass final review: automated dismissal is void, CV screening is not**

  Council of Ministers, final review: dismissal is void if based solely on automation, CV screening excluded from the ban. Oversight, penalties, no Gazette text yet.

  → [https://csidia.com/en/notes/decreti-ia-esame-definitivo-lavoro-governance/](https://csidia.com/en/notes/decreti-ia-esame-definitivo-lavoro-governance/)
- ![A narrow, dark corridor lit by a row of fluorescent tubes on the ceiling, tiled floor, in black and white](https://csidia.com/img/nota-varco-600.webp)

  Observatory 6 August 2026

  **Shieldstral 1.0 3B: the safety policy is a sentence you write, not a clause**

  Mistral releases Shieldstral, an open-weight Apache 2.0 safety classifier: the policy is written in natural language, not buried in a clause.

  → [https://csidia.com/en/notes/guardrail-pesi-aperti-politica-invece-di-clausola/](https://csidia.com/en/notes/guardrail-pesi-aperti-politica-invece-di-clausola/)
- ![Industrial metal gears meshing together, shot close up, in black and white](https://csidia.com/img/nota-oss-ingranaggi-600.webp)

  Observatory 6 August 2026

  **An outside vendor will build Mercury Systems’ digital twin: whose ontology is it?**

  On 3 August Mercury Systems handed an outside software vendor the job of building the ontology — the digital twin — of its own operations. No 8-K on EDGAR. The questions to ask first.

  → [https://csidia.com/en/notes/palantir-mercury-ontologia-di-chi-e/](https://csidia.com/en/notes/palantir-mercury-ontologia-di-chi-e/)
- ![A row of grey armoured doors lined up along a white-walled corridor, photographed in black and white](https://csidia.com/img/nota-corridoio-sicurezza-600.webp)

  Regulation 6 August 2026

  **RESTREINT UE: the facility clearance is not required, the accredited system is**

  The Commission’s 2015/444 decision: in EU defence programmes, at RESTREINT UE the FSC is not needed, but the contractor’s information system must be accredited.

  → [https://csidia.com/en/notes/ue-restricted-accreditamento-sistema-non-nulla-osta/](https://csidia.com/en/notes/ue-restricted-accreditamento-sistema-non-nulla-osta/)
- ![A bundle of fibre-optic cables plugged into a patch panel in a network cabinet, in black and white](https://csidia.com/img/nota-cavi-ottici-600.webp)

  Observatory 5 August 2026

  **US defence AI contracts: the clauses that stay secret even from a senator**

  Senator Warren asks DoD and seven AI vendors for the text of contracts covering classified networks: it remains secret. Questions worth putting in your own specification.

  → [https://csidia.com/en/notes/contratti-ai-difesa-usa-clausole-non-leggibili/](https://csidia.com/en/notes/contratti-ai-difesa-usa-clausole-non-leggibili/)
- ![Hand-wheels and key locks on a row of mobile archive shelving units, in black and white](https://csidia.com/img/nota-archivio-controllato-600.webp)

  Regulation 5 August 2026

  **Data Act: a trade secret protects only what you have already mapped**

  From 12 September 2026 connected products are born with data accessible by default: trade secrets are protected in three steps under art. 4, not on request.

  → [https://csidia.com/en/notes/data-act-segreto-commerciale-tre-passaggi/](https://csidia.com/en/notes/data-act-segreto-commerciale-tre-passaggi/)
- ![Corridor of a data centre with rows of closed server cabinets, cables suspended from the ceiling, and a mobile workstation with a blank monitor, in black and white](https://csidia.com/img/nota-corridoio-server-600.webp)

  Observatory 5 August 2026

  **Two data centres declared "of national strategic interest" worth €6.8 billion: who controls them, and under which jurisdiction**

  Italy's Cabinet declares two data centres worth €6.8bn strategic: the lead firms are from Singapore and the United States. Sovereignty is jurisdiction, not an address.

  → [https://csidia.com/en/notes/data-center-interesse-strategico-nazionale-giurisdizione-controllo/](https://csidia.com/en/notes/data-center-interesse-strategico-nazionale-giurisdizione-controllo/)
- ![A closed white envelope with an empty transparent window and a black pencil resting on top, in black and white](https://csidia.com/img/nota-busta-bianca-600.webp)

  Method 5 August 2026

  **A piece of AI Act enforcement news, and the two checks that don't confirm it**

  A story about fourteen financial institutions and the AI Act is circulating online: two independent checks, run by us on 5 August, don't confirm it.

  → [https://csidia.com/en/notes/enforcement-ai-act-due-controlli-notizia-non-confermata/](https://csidia.com/en/notes/enforcement-ai-act-due-controlli-notizia-non-confermata/)
- ![Blank white cardboard tags, empty and unmarked, scattered against a dark background, in black and white](https://csidia.com/img/nota-etichette-vuote-600.webp)

  Observatory 5 August 2026

  **The most-downloaded "Qwen3.8" repository on Hugging Face declares neither licence nor origin**

  Two repositories from the same author, both called "Qwen3.8", uploaded four days before Qwen's own announcement: the one with no licence has 155 times the downloads of the other.

  → [https://csidia.com/en/notes/qwen3-8-huggingface-download-senza-licenza/](https://csidia.com/en/notes/qwen3-8-huggingface-download-senza-licenza/)
- ![Worn, frayed rope knot tied to a metal beam, in black and white](https://csidia.com/img/nota-nodo-corda-600.webp)

  Partnerships 4 August 2026

  **Saab and Airbus choose the same startup: what is signed, and what is only announced**

  On 17 June Saab took a stake in Comand AI; on 18 June Airbus said it would integrate the Prevail platform. The memorandum surfaces only in a photo caption.

  → [https://csidia.com/en/notes/comand-ai-saab-airbus-memorandum-intesa/](https://csidia.com/en/notes/comand-ai-saab-airbus-memorandum-intesa/)
- ![A striped barrier gate, raised halfway across a country road, in black and white, with rain in the foreground and blurred trees behind](https://csidia.com/img/nota-sbarra-600.webp)

  Scenarios 4 August 2026

  **Could the border checks with Spain have been seen coming?**

  On 1 August Italy reinstated border checks with Spain. The Schengen register already showed it: how to turn that into an operational attention threshold.

  → [https://csidia.com/en/notes/controlli-frontiera-spagna-segnale-anticipato/](https://csidia.com/en/notes/controlli-frontiera-spagna-segnale-anticipato/)
- ![Two icebergs offshore, photographed in black and white beyond the line of the waves, under a dark sky](https://csidia.com/img/nota-iceberg-600.webp)

  Security 4 August 2026

  **Does a human check always find the hidden data in a file?**

  The UK Defence report on the Afghan data breach admits it: a second human check probably would not have found the hidden data in a spreadsheet.

  → [https://csidia.com/en/notes/controllo-umano-dato-nascosto-file/](https://csidia.com/en/notes/controllo-umano-dato-nascosto-file/)
- ![A dry-stone arch, built without mortar, spanning a gap between two rock walls, in black and white](https://csidia.com/img/nota-arco-pietra-600.webp)

  Scenarios 4 August 2026

  **"The customer's edge should never become training data": true, but not because of the contract clause**

  The chief executive of a US data-analytics software company writes it to the SEC in the company's Q2 2026 filing: a customer's edge should never become training data. The popular version is wrong — here is the one that holds.

  → [https://csidia.com/en/notes/dati-addestramento-clausola-non-architettura/](https://csidia.com/en/notes/dati-addestramento-clausola-non-architettura/)
- ![Two glass hourglasses on a light shelf, with sand at different levels, photographed in black and white](https://csidia.com/img/nota-clessidre-600.webp)

  Regulation 4 August 2026

  **NIS2, 12 October 2026: the deadline is a document, not a date**

  12 October 2026 appears in no ACN determination on NIS2: the deadline is 18 months from the notice received, and it differs for every entity.

  → [https://csidia.com/en/notes/nis2-12-ottobre-2026-un-documento-non-una-data/](https://csidia.com/en/notes/nis2-12-ottobre-2026-un-documento-non-una-data/)
- ![A row of fluted stone columns supporting the same architrave in a colonnade, in black and white](https://csidia.com/img/nota-oss-colonnato-600.webp)

  Observatory 4 August 2026

  **1,049 customers, 42% of revenue from the US government: how a customer is really counted**

  A US data-analytics software company's 10-Q, 4 August 2026: 1,049 customers, and 42% of revenue from US government customers alone. The lesson for buyers: how a customer is counted.

  → [https://csidia.com/en/notes/palantir-10q-clienti-concentrazione-governo-usa/](https://csidia.com/en/notes/palantir-10q-clienti-concentrazione-governo-usa/)
- ![Two open, empty cardboard boxes photographed close-up against a plain background, in black and white](https://csidia.com/img/nota-scatole-vuote-600.webp)

  Observatory 4 August 2026

  **Qwen3.8-Max announces open weights: the word "licence" never appears**

  Qwen3.8-Max: open weights announced for "next week", but across 5,068 words the word licence never appears once. What to check before adopting it.

  → [https://csidia.com/en/notes/qwen3-8-max-pesi-aperti-licenza-assente/](https://csidia.com/en/notes/qwen3-8-max-pesi-aperti-licenza-assente/)
- ![Two surveillance cameras fixed to a grey corrugated metal wall, in black and white](https://csidia.com/img/nota-telecamere-lamiera-600.webp)

  Observatory 4 August 2026

  **Regulation (EU) 2026/1755: what the Commission can demand from your AI model provider**

  Commission Implementing Regulation (EU) 2026/1755, in force 10 August 2026: the procedure that lets the Commission request model weights, infrastructure and logs, and order a model disabled. What a buyer should hold in the contract.

  → [https://csidia.com/en/notes/regolamento-2026-1755-accesso-pesi-commissione-ue/](https://csidia.com/en/notes/regolamento-2026-1755-accesso-pesi-commissione-ue/)
- ![A dark metal wax-seal stamp resting on light paper, next to the impression it has left, in black and white](https://csidia.com/img/nota-sigillo-cera-600.webp)

  Observatory 3 August 2026

  **What is an "abliterated" model? The refusal is stripped from the weights, not the prompt**

  Thousands of "abliterated" derivatives of Gemma, Qwen and DeepSeek circulate on Hugging Face with refusal removed from the weights. Why it matters if you install them.

  → [https://csidia.com/en/notes/modelli-abliterated-rifiuto-tolto-dai-pesi/](https://csidia.com/en/notes/modelli-abliterated-rifiuto-tolto-dai-pesi/)
- ![An old brass lock on a dark wooden door, with the panel frame visible around it, in black and white](https://csidia.com/img/nota-serratura-600.webp)

  Regulation 3 August 2026

  **Defensive monitoring of staff email: the Piaggio case and its €460,000 fine**

  The Garante fines Piaggio €460,000: emails gathered up to two years before any suspicion arose. Where lawful defensive checks on staff email end.

  → [https://csidia.com/en/notes/piaggio-controlli-difensivi-email-dipendenti/](https://csidia.com/en/notes/piaggio-controlli-difensivi-email-dipendenti/)
- ![Two empty driver’s seats and a steering wheel inside a truck cab, viewed from above, in black and white](https://csidia.com/img/nota-cabina-vuota-600.webp)

  Partnerships 3 August 2026

  **American Rheinmetall and Harbinger: the US Army’s autonomous logistics effort has more than one supplier**

  Rheinmetall and Harbinger sign 18 months on Project Sustainment: no public value, and four other companies are running the same US Army programme.

  → [https://csidia.com/en/notes/rheinmetall-harbinger-project-sustainment-logistica-autonoma/](https://csidia.com/en/notes/rheinmetall-harbinger-project-sustainment-logistica-autonoma/)
- ![A grid window with dozens of small glass panes on a brick façade, with two dark shutters open on each side, in black and white](https://csidia.com/img/nota-grata-600.webp)

  Regulation 3 August 2026

  **Facial-recognition decree: what to check once the text is out**

  The Cabinet meeting expected on 4 August has not happened yet. Four checks on the facial-recognition decree text for anyone running a surveillance system.

  → [https://csidia.com/en/notes/riconoscimento-facciale-decreto-griglia-lettura/](https://csidia.com/en/notes/riconoscimento-facciale-decreto-griglia-lettura/)
- ![Black-and-white archive shelving units seen in soft-focus perspective, with a single numbered panel “22” in sharp focus in the foreground](https://csidia.com/img/nota-scaffali-archivio-600.webp)

  Observatory 3 August 2026

  **The EU’s list of AI sandboxes was due yesterday. We could not find it**

  Since 2 August the AI Office must publish the EU list of sandboxes (AI Act, Article 57(15)). We searched primary sources and official pages: not found.

  → [https://csidia.com/en/notes/sandbox-ia-elenco-ufficio-ia-non-pubblicato/](https://csidia.com/en/notes/sandbox-ia-elenco-ufficio-ia-non-pubblicato/)
- ![The backs of chairs and a table in an empty boardroom, in black and white](https://csidia.com/img/nota-oss-consiglio-600.webp)

  Observatory 3 August 2026

  **Scale AI Gets a New Chief Executive: the Press Calls Him Just an Ex-Google Cloud Man**

  Scale AI appoints Francis deSouza chief executive from 10 August: the announcement itself shows a longer track record than the press headlines suggest.

  → [https://csidia.com/en/notes/scale-ai-desouza-nuovo-ceo-curriculum/](https://csidia.com/en/notes/scale-ai-desouza-nuovo-ceo-curriculum/)
- ![A row of computer servers in a rack, shot from the side in black and white](https://csidia.com/img/nota-inventario-ict-600.webp)

  Regulation 2 August 2026

  **ICT census of Italy’s public bodies by 30 September 2026: AgID set the date, not the law**

  Article 33-septies(1-ter) of Decree-Law 179/2012 requires an ICT census of public bodies "every three years": AgID, not the law, set 30 September 2026.

  → [https://csidia.com/en/notes/censimento-ict-pa-30-settembre-2026/](https://csidia.com/en/notes/censimento-ict-pa-30-settembre-2026/)
- ![Black-and-white close-up of computer keyboard keys, shot at an angle against backlight](https://csidia.com/img/nota-tastiera-scura-600.webp)

  Observatory 2 August 2026

  **The AI agent picked the vulnerability and attempted the exploit on its own. The successful breaches were manual**

  Unit 42 documents a Chinese-speaking actor who used DeepSeek, commanded via Telegram, to enumerate targets with FOFA and attempt exploits with no operator. The autonomous run breached nothing: “the margin of failure was narrow”.

  → [https://csidia.com/en/notes/deepseek-telegram-attacco-informatico-autonomo/](https://csidia.com/en/notes/deepseek-telegram-attacco-informatico-autonomo/)
- ![Black-and-white close-up of a circuit board, with chips and electronic components in tight focus](https://csidia.com/img/nota-oss-circuito-600.webp)

  Observatory 2 August 2026

  **Is GLM-5.2 safe? The US government tested it as an agent, not a chatbot**

  On 17 July 2026 CAISI (NIST) published its assessment of GLM-5.2: it refuses attacks in chat, but not when carried out by an agent with tools in hand.

  → [https://csidia.com/en/notes/glm-5-2-caisi-valutazione-sicurezza/](https://csidia.com/en/notes/glm-5-2-caisi-valutazione-sicurezza/)
- ![The dome of an astronomical observatory silhouetted against a night sky full of stars, in black and white](https://csidia.com/img/nota-cupola-stellata-600.webp)

  Partnerships 2 August 2026

  **Who protects Helsing’s European combat drone — and who owns the protector**

  HENSOLDT supplies the CAIRAS system for Helsing's CA-1 Europa: three units, no public price. Who really owns HENSOLDT, verified against the filings.

  → [https://csidia.com/en/notes/hensoldt-cairas-helsing-ca1-europa-autoprotezione/](https://csidia.com/en/notes/hensoldt-cairas-helsing-ca1-europa-autoprotezione/)
- ![A white CCTV camera fixed to a concrete wall, shot from below against the light, in black and white](https://csidia.com/img/nota-telecamera-600.webp)

  Regulation 2 August 2026

  **Police facial recognition in Italy: which use will need a judge’s authorisation?**

  Italy’s decree has three authorisation channels, not one: a prosecutor, an investigating judge, or neither. The amendment announced by Mantovano does not say which one it touches.

  → [https://csidia.com/en/notes/riconoscimento-facciale-polizia-quale-autorizzazione-giudice/](https://csidia.com/en/notes/riconoscimento-facciale-polizia-quale-autorizzazione-giudice/)
- ![A black-and-white close-up of chain-link fencing, photographed up close with a blurred background](https://csidia.com/img/nota-recinto-600.webp)

  Observatory 2 August 2026

  **Every Member State was due an AI sandbox by today. The AI Act deadline has slipped to 2027**

  By 2 August 2026 every EU state was to have an operational AI sandbox. The Omnibus moved it to 2027. Italy, we checked, does not even have the decree yet.

  → [https://csidia.com/en/notes/sandbox-ia-obbligo-2-agosto-2026-rinviato-2027/](https://csidia.com/en/notes/sandbox-ia-obbligo-2-agosto-2026-rinviato-2027/)
- ![Fibre-optic patch panel with rows of connectors and tangled cables, in black and white](https://csidia.com/img/nota-cablaggio-600.webp)

  Regulation 1 August 2026

  **The system administrator of your company’s AI: is the 2008 measure still in force?**

  Whoever holds the credentials to the AI server reads the company’s most sensitive files. Verified against the source: what survives, in 2026, of the Garante’s 2008 measure.

  → [https://csidia.com/en/notes/amministratore-di-sistema-ai-aziendale/](https://csidia.com/en/notes/amministratore-di-sistema-ai-aziendale/)
- ![A black-and-white tabletop hourglass, with the sand nearly all run through into the lower bulb, on a dark surface](https://csidia.com/img/nota-clessidra-600.webp)

  Regulation 1 August 2026

  **Article 50 of the AI Act: what to do on Monday 3 August if you are not ready**

  Article 50 of the AI Act applies from Sunday. Monday 3 August is the first working day: what to fix now, what is too late, what to ask your supplier in writing.

  → [https://csidia.com/en/notes/articolo-50-lunedi-3-agosto-checklist/](https://csidia.com/en/notes/articolo-50-lunedi-3-agosto-checklist/)
- ![A smartphone with its screen off resting on a dark wooden surface, in black and white](https://csidia.com/img/nota-smartphone-scuro-600.webp)

  Observatory 1 August 2026

  **The suspended spyware is back in service: in between, the vendor changed owner**

  Suspended in 2024 pending a review that was never concluded, the ICE-Graphite contract went active again in 2025. In the meantime Paragon Solutions passed to an American owner: the Senate now wants answers.

  → [https://csidia.com/en/notes/graphite-spyware-sospeso-riattivato-ice/](https://csidia.com/en/notes/graphite-spyware-sospeso-riattivato-ice/)
- ![A red theatre curtain, closed, photographed head-on, in black and white](https://csidia.com/img/nota-sipario-600.webp)

  Observatory 1 August 2026

  **MiniMax H3 and “open weight”: what was announced, what was online**

  At the H3 announcement the weights were not online and the licence was reported as different from M2, with the Disney suit over its predecessor open.

  → [https://csidia.com/en/notes/minimax-h3-pesi-aperti-causa-disney/](https://csidia.com/en/notes/minimax-h3-pesi-aperti-causa-disney/)
- ![A black-and-white air traffic control tower seen from an airport runway, with antennas on the roof and a small aircraft in the distance](https://csidia.com/img/nota-torre-controllo-600.webp)

  Observatory 1 August 2026

  **AI capacity doubled and 40% more controllers: Singapore puts both in the same plan**

  Singapore’s CAAS unveils a S$4bn plan: Thales’s AI doubles air traffic capacity, and the controller workforce grows by 40%.

  → [https://csidia.com/en/notes/singapore-controllori-volo-ia-organico/](https://csidia.com/en/notes/singapore-controllori-volo-ia-organico/)
- ![A black-and-white parabolic dish antenna, shot from below, silhouetted against a night sky full of stars](https://csidia.com/img/nota-antenna-stellata-600.webp)

  Partnerships 31 July 2026

  **Array Labs and Mitsubishi Electric: the Asian channel is there, the exclusivity is not**

  On 28 July Array Labs closed a $21m round anchored by Mitsubishi Electric: the satellite radar technology, the known terms, and who sells it in Asia.

  → [https://csidia.com/en/notes/array-labs-mitsubishi-electric-radar-spaziale/](https://csidia.com/en/notes/array-labs-mitsubishi-electric-radar-spaziale/)
- ![A desktop rotary card index with blank white cards and alphabetical tabs, resting on a wooden surface, in black and white](https://csidia.com/img/nota-rubrica-alfabetica-600.webp)

  Regulation 31 July 2026

  **EU code on AI content marking: the signatory list is out — is your supplier on it?**

  On 31 July the Commission published the signatories of the EU code on marking AI content: 83 in Section 1, 152 in Section 2. What to ask your supplier.

  → [https://csidia.com/en/notes/articolo-50-elenco-firmatari-pubblicato-2-agosto/](https://csidia.com/en/notes/articolo-50-elenco-firmatari-pubblicato-2-agosto/)
- ![A copper still in a distillery, its condenser spout pointing towards an empty bowl, in black and white](https://csidia.com/img/nota-oss-alambicco-600.webp)

  Observatory 31 July 2026

  **Distilling a model you cannot export: what it means if you expose an API**

  Reuters reviewed more than 80 Chinese documents on the distillation of OpenAI and Anthropic models. Why a contract clause is not a technical control.

  → [https://csidia.com/en/notes/distillazione-modelli-usa-ricerca-militare-cinese/](https://csidia.com/en/notes/distillazione-modelli-usa-ricerca-militare-cinese/)
- ![Close-up of a wax honeycomb: thousands of empty hexagonal cells, in black and white](https://csidia.com/img/nota-favo-600.webp)

  Observatory 31 July 2026

  **276 billion parameters, 12 active: what it actually takes to run in-house**

  Thinking Machines publishes Inkling-Small under Apache 2.0: the measured bytes in the repository, total versus active parameters, what to put in the tender.

  → [https://csidia.com/en/notes/inkling-small-parametri-attivi-on-premise/](https://csidia.com/en/notes/inkling-small-parametri-attivi-on-premise/)
- ![A series of pale wooden rings nested one inside the other, photographed from above, in black and white](https://csidia.com/img/nota-cerchi-annidati-600.webp)

  Regulation 31 July 2026

  **NIS categorisation: the one duty you judge, not fill in**

  Italy’s NIS decree requires a yearly categorised list of activities: the ACN rules, the judgement demanded, its ties to cloud and the cyber perimeter.

  → [https://csidia.com/en/notes/nis-categorizzazione-attivita-servizi-30-giugno/](https://csidia.com/en/notes/nis-categorizzazione-attivita-servizi-30-giugno/)
- ![A camera lens diaphragm closed in a spiral around a central hole, shot in macro, in black and white](https://csidia.com/img/nota-oss-diaframma-600.webp)

  Observatory 31 July 2026

  **$500,000 for an image no one ever shared: xAI takes Minnesota to court**

  xAI is suing Minnesota over its anti-“nudification” law: up to $500,000 per violation, even without distribution. The lesson for AI buyers.

  → [https://csidia.com/en/notes/xai-minnesota-legge-nudificazione/](https://csidia.com/en/notes/xai-minnesota-legge-nudificazione/)
- ![A wall of numbered lockers along a corridor, with keys left in some of the locks and sticky notes on the doors, in black and white](https://csidia.com/img/nota-oss-armadietti-600.webp)

  Observatory 30 July 2026

  **Who can actually read the data? The DPIA said one thing, the permissions said another**

  The UK National Data Guardian: the impact assessment did not describe who accesses patient data. What the GDPR requires of anyone buying software.

  → [https://csidia.com/en/notes/dpia-accesso-fornitore-nhs-palantir/](https://csidia.com/en/notes/dpia-accesso-fornitore-nhs-palantir/)
- ![A dark wooden office counter with rubber stamps, a metal numbering stamp and scattered pre-printed forms, in black and white](https://csidia.com/img/nota-timbri-parere-600.webp)

  Regulation 30 July 2026

  **Italy’s AI Act implementing decree needs redrafting: what the Garante asked for**

  Opinions no. 531 and no. 532 of 14 July 2026, made public on the 29th: favourable, with conditions, on the two draft decrees implementing the AI Act in Italy.

  → [https://csidia.com/en/notes/garante-parere-decreto-attuativo-regolamento-ia/](https://csidia.com/en/notes/garante-parere-decreto-attuativo-regolamento-ia/)
- ![River barrage seen from above, metal sluice gates open and water falling down the spillways, in black and white](https://csidia.com/img/nota-oss-paratoie-600.webp)

  Observatory 30 July 2026

  **Leonardo DRS buys Raft for $450 million: who controls the mission software**

  Leonardo DRS is acquiring Raft for $450 million in cash. The proxy agreement with the US defence department decides who may use that software, and who may not.

  → [https://csidia.com/en/notes/leonardo-drs-raft-software-di-missione/](https://csidia.com/en/notes/leonardo-drs-raft-software-di-missione/)
- ![Reel of magnetic data tape resting on a dark background, with a loose length of tape unwound, in black and white](https://csidia.com/img/nota-bobina-600.webp)

  Regulation 30 July 2026

  **AI assistant logs: how long to keep them, and who gets to read them**

  The prompt register holds know-how and tracks people’s work. Article 4 of the Workers’ Statute, article 114 of the Privacy Code and the Garante’s two terms.

  → [https://csidia.com/en/notes/log-assistente-ai-segreti-e-controllo-a-distanza/](https://csidia.com/en/notes/log-assistente-ai-segreti-e-controllo-a-distanza/)
- ![The blade diaphragm of a camera lens stopped almost fully down, seen from above, in black and white](https://csidia.com/img/nota-diaframma-600.webp)

  Observatory 30 July 2026

  **A model that sees and runs on a phone: 460 million parameters, Apache 2.0 licence**

  Tether Data has released VisionPsy-Nano as open weights for on-device use. What the declared numbers mean, how to read them, and the limits written on the card.

  → [https://csidia.com/en/notes/modello-visione-460m-sul-dispositivo/](https://csidia.com/en/notes/modello-visione-460m-sul-dispositivo/)
- ![A black-and-white server module pulled halfway out of a rack, with other blurred modules lined up in the background](https://csidia.com/img/nota-cassetto-server-600.webp)

  Partnerships 30 July 2026

  **Recursive and AWS: $410 million in cash still doesn’t buy independence from a supplier**

  On 28 July, Richard Socher’s startup bought $410 million of AWS compute, all in cash, no equity. Why that doesn’t remove the lock-in risk.

  → [https://csidia.com/en/notes/recursive-aws-calcolo-cash-non-equity/](https://csidia.com/en/notes/recursive-aws-calcolo-cash-non-equity/)
- ![Seven pale paper tags hanging from thin strings against a black background, all of them blank](https://csidia.com/img/nota-cartellini-600.webp)

  Regulation 29 July 2026

  **AI Act Article 50 guidelines, C(2026) 5054 final: who is in scope, and from when**

  The Commission guidelines C(2026) 5054 final on Article 50 of the AI Act, applicable from 2 August 2026: the transparency duty does not depend on when you bought the system.

  → [https://csidia.com/en/notes/articolo-50-linee-guida-trasparenza-ia/](https://csidia.com/en/notes/articolo-50-linee-guida-trasparenza-ia/)
- ![Railway points in black and white: two tracks cross and run on into a fan of parallel lines](https://csidia.com/img/nota-scambio-binari-600.webp)

  Partnerships 29 July 2026

  **Bull and Kalray: in AI infrastructure the choice that binds you most is the network**

  On 28 July Bull and Kalray announced Ultra Ethernet-compatible interconnects. Why the network fabric is the least visible lock-in in a data hall.

  → [https://csidia.com/en/notes/bull-kalray-interconnessione-ultra-ethernet/](https://csidia.com/en/notes/bull-kalray-interconnessione-ultra-ethernet/)
- ![A graduated steel tape measure laid diagonally across embossed card, in black and white](https://csidia.com/img/nota-oss-metro-600.webp)

  Observatory 29 July 2026

  **Who answers for the benefit figures you publish?**

  The UK statistics regulator did not write to the supplier, but to the body that had published the figures. What that changes in AI procurement specifications.

  → [https://csidia.com/en/notes/chi-risponde-dei-numeri-di-beneficio/](https://csidia.com/en/notes/chi-risponde-dei-numeri-di-beneficio/)
- ![A metal sliding gate standing open at the entrance to an industrial yard, backlit, in black and white](https://csidia.com/img/nota-oss-cancello-600.webp)

  Observatory 29 July 2026

  **The Kimi K3 licence: what does it actually stop you doing?**

  Moonshot has published the Kimi K3 licence text. Who must sign a separate agreement, who owes nothing, and the line procurement should read first.

  → [https://csidia.com/en/notes/licenza-kimi-k3-cosa-vieta-davvero/](https://csidia.com/en/notes/licenza-kimi-k3-cosa-vieta-davvero/)
- ![A row of metal letterboxes numbered in sequence, one of them open with mail inside, in black and white](https://csidia.com/img/nota-caselle-postali-600.webp)

  Regulation 29 July 2026

  **Tracking pixels in email: what you need in place by 29 October 2026**

  Six months from the Official Gazette of 29 April: the deadline is 29 October 2026, not the 21st. What the Italian regulator asks of anyone tracking opens.

  → [https://csidia.com/en/notes/tracking-pixel-email-29-ottobre-2026/](https://csidia.com/en/notes/tracking-pixel-email-29-ottobre-2026/)
- ![A public notice board in a wooden glass case on a brick wall, sheets pinned behind the glass, a closed door beside it, in black and white](https://csidia.com/img/nota-oss-bacheca-600.webp)

  Observatory 28 July 2026

  **Why shared Claude conversations ended up in Google’s search results**

  On 27 July Claude’s public links surfaced on Google and Bing. The verified technical cause, and why an “unguessable” address is not a control.

  → [https://csidia.com/en/notes/conversazioni-claude-condivise-indicizzate-google/](https://csidia.com/en/notes/conversazioni-claude-condivise-indicizzate-google/)
- ![Paper accounting ledger open across two pages, pre-printed columns and handwritten entries, in black and white](https://csidia.com/img/nota-registro-600.webp)

  Scenarios 28 July 2026

  **AI for legality: what it takes for an automated analysis to hold up**

  On 27 July 2026 Anac, the Interior Ministry, the CNR and the Marche Region signed an AI protocol. What is already running and what is merely announced.

  → [https://csidia.com/en/notes/ia-legalita-analisi-automatica-controllo-pubblico/](https://csidia.com/en/notes/ia-legalita-analisi-automatica-controllo-pubblico/)
- ![Triangular glass prism struck by a beam of light that leaves it split into a continuous band, in black and white](https://csidia.com/img/nota-prisma-600.webp)

  Partnerships 28 July 2026

  **IHI and Kuva Space: what has actually been signed, and who is “sovereign” over the sensor**

  On 21 July IHI and Kuva Space signed a memorandum of understanding on hyperspectral satellites in Japan. What binds, and what is only intent.

  → [https://csidia.com/en/notes/ihi-kuva-iperspettrale-sovranita-giappone/](https://csidia.com/en/notes/ihi-kuva-iperspettrale-sovranita-giappone/)
- ![Black and white macro of a graduated metal dial, with the numbers 10, 15, 20 and 25 engraved around a central pin](https://csidia.com/img/nota-combinatore-600.webp)

  Regulation 28 July 2026

  **What does it really take to let an AI system handle classified information?**

  Classification attaches to the individual parts, not to the document: what an AI system must be able to prove before it works on classified material.

  → [https://csidia.com/en/notes/informazioni-classificate-ai-classifiche-segretezza/](https://csidia.com/en/notes/informazioni-classificate-ai-classifiche-segretezza/)
- ![Breakwater of stacked concrete blocks facing the open sea, with a headland on the horizon, in black and white](https://csidia.com/img/nota-oss-frangiflutti-600.webp)

  Observatory 28 July 2026

  **Open Secure AI Alliance: what is a supplier’s membership actually worth?**

  NVIDIA launches an open defence stack for agents with 37 partners. With no admission criteria and no verification, membership is not a contract clause.

  → [https://csidia.com/en/notes/open-secure-ai-alliance-chi-manca/](https://csidia.com/en/notes/open-secure-ai-alliance-chi-manca/)
- ![Page of an open technical manual, with numbered drawings of the machining stages of a pivot and a caption for each step, in black and white](https://csidia.com/img/nota-oss-fascicolo-600.webp)

  Observatory 28 July 2026

  **What must a model’s technical report tell you before you install it?**

  On 27 July the Kimi K3 weights arrived with a 47-page technical report. What that document actually declares, what it leaves out and why you need it.

  → [https://csidia.com/en/notes/rapporto-tecnico-modello-cosa-dichiara/](https://csidia.com/en/notes/rapporto-tecnico-modello-cosa-dichiara/)
- ![Close-up of a wall clock face with a second dial instrument set inside it, in black and white](https://csidia.com/img/nota-quadrante-tempo-600.webp)

  Observatory 27 July 2026

  **How you measure whether a system actually worked**

  An independent analysis of hospital discharge delays in England and the statistics regulator’s intervention: baseline, measured outcome, and what counts as proof.

  → [https://csidia.com/en/notes/come-si-misura-se-un-sistema-ha-funzionato/](https://csidia.com/en/notes/come-si-misura-se-un-sistema-ha-funzionato/)
- ![Corridor of an electrical distribution room with two rows of switchgear panels and measuring instruments, in black and white](https://csidia.com/img/nota-quadri-potenza-600.webp)

  Scenarios 27 July 2026

  **Data centres in Italy: announced capacity is not available capacity**

  Eight billion euros of data centres declared strategic in Lombardy and Piedmont: what really decides whether that computing capacity will be yours to buy.

  → [https://csidia.com/en/notes/data-center-italia-capacita-annunciata-disponibile/](https://csidia.com/en/notes/data-center-italia-capacita-annunciata-disponibile/)
- ![Black and white close-up of the fins of an aluminium heat sink, side-lit against a dark background](https://csidia.com/img/nota-dissipatore-600.webp)

  Partnerships 27 July 2026

  **Intel and SambaNova: what you are really buying with an inference accelerator**

  Not a foundry contract, not an acquisition. What the Intel and SambaNova documents actually say, and what buyers of dedicated AI hardware are betting on.

  → [https://csidia.com/en/notes/intel-sambanova-acceleratori-inferenza-on-premise/](https://csidia.com/en/notes/intel-sambanova-acceleratori-inferenza-on-premise/)
- ![Industrial workshop shelving holding metal press dies arranged on racks marked with letters and numbers, in black and white](https://csidia.com/img/nota-oss-stampi-600.webp)

  Observatory 27 July 2026

  **If the rules on open models change, what happens to the one you have already installed?**

  On 24 July, 25 companies signed a letter against “premature restrictions” on open weights. What happens to the model already running in your infrastructure.

  → [https://csidia.com/en/notes/modelli-aperti-restrizioni-cosa-resta-installato/](https://csidia.com/en/notes/modelli-aperti-restrizioni-cosa-resta-installato/)
- ![Timing gear train of an engine with the cover removed, casting numbers legible on the toothed wheels, in black and white](https://csidia.com/img/nota-ingranaggi-600.webp)

  Regulation 27 July 2026

  **AI on staff: an Italian rule already requires you to explain how it works**

  Article 1-bis of Legislative Decree 152/1997 makes you disclose to workers and unions the logic, data and parameters of automated systems. Text and penalties.

  → [https://csidia.com/en/notes/obbligo-informativo-sistemi-automatizzati-lavoratori/](https://csidia.com/en/notes/obbligo-informativo-sistemi-automatizzati-lavoratori/)
- ![Close-up of a helicopter rotor head, with hinges, control rods and tubing, against a plain sky, in black and white](https://csidia.com/img/nota-rotore-600.webp)

  Partnerships 26 July 2026

  **Archer, Anduril and Halo: one autonomous aircraft, two regimes, no numbers**

  Archer unveils Halo, the civil twin of Anduril’s Thunder: same airframe, two legal regimes. What the press release says, and what the SEC filings say.

  → [https://csidia.com/en/notes/archer-anduril-halo-velivolo-autonomo/](https://csidia.com/en/notes/archer-anduril-halo-velivolo-autonomo/)
- ![A hand-held ultraviolet lamp lighting up bundles of banknotes on a table, in black and white](https://csidia.com/img/nota-oss-ultravioletto-600.webp)

  Observatory 26 July 2026

  **EU code on marking AI-generated content: who signed, and what Article 50 requires anyway**

  The code of practice on marking AI-generated content is voluntary; Article 50 of the AI Act is not. The signatories as at 2 August 2026, and the clause to put in a supplier contract.

  → [https://csidia.com/en/notes/codice-ue-marcatura-contenuti-ia-firmatari/](https://csidia.com/en/notes/codice-ue-marcatura-contenuti-ia-firmatari/)
- ![A DIP switch block on a circuit board, three levers in one position and the fourth in the other, in black and white](https://csidia.com/img/nota-oss-interruttori-600.webp)

  Observatory 26 July 2026

  **Default settings: the value nobody touched is still a choice you made**

  On 24 July the European Commission preliminarily took issue with TikTok’s default settings for minors’ accounts: why a default is an act of compliance.

  → [https://csidia.com/en/notes/impostazioni-predefinite-decisione-di-conformita/](https://csidia.com/en/notes/impostazioni-predefinite-decisione-di-conformita/)
- ![Open drawers of a typesetting cabinet holding movable type and wood and metal blocks, in black and white](https://csidia.com/img/nota-oss-licenza-600.webp)

  Observatory 26 July 2026

  **Open-weight model licences: what do they actually let you do?**

  Laguna S 2.1 ships with its OpenMDW-1.1 licence already written. How to read a weights licence like a supply contract, and how three real texts differ.

  → [https://csidia.com/en/notes/licenze-pesi-aperti-openmdw-cosa-permettono/](https://csidia.com/en/notes/licenze-pesi-aperti-openmdw-cosa-permettono/)
- ![Control cabinet of an industrial machine with an operator panel, an emergency stop button and a warning plate, in black and white](https://csidia.com/img/nota-comando-macchina-600.webp)

  Regulation 26 July 2026

  **Regulation (EU) 2026/1744, in force 27 July 2026: what Article 113 now says**

  Published 24 July, in force the third day following. Regulation (EU) 2026/1744 rewrites Article 113 of the AI Act: the application dates as they now stand, and AI in machinery moved to Annex I, Section B.

  → [https://csidia.com/en/notes/omnibus-ia-macchine-allegato-iii-27-luglio/](https://csidia.com/en/notes/omnibus-ia-macchine-allegato-iii-27-luglio/)
- ![Two hands connecting wires on a breadboard linked to measurement probes, in black and white](https://csidia.com/img/nota-banco-prova-600.webp)

  Regulation 26 July 2026

  **Italy’s cyber perimeter and the CVCN: an ICT purchase does not end with a signature**

  Inside Italy’s national cyber security perimeter, ICT supplies are notified to the CVCN before the tender: 45 days of checks, hardware and software testing.

  → [https://csidia.com/en/notes/perimetro-cibernetico-cvcn-valutazione-forniture-ict/](https://csidia.com/en/notes/perimetro-cibernetico-cvcn-valutazione-forniture-ict/)
- ![Dark envelopes closed with wax seals, overlapping on a flat surface, in black and white](https://csidia.com/img/nota-oss-sigilli-600.webp)

  Observatory 25 July 2026

  **AI contracts: a use limit that is neither written nor verifiable does not exist**

  The US Senate deadline for the Pentagon and seven AI firms to publish their contract terms expired on 20 July: what stays sealed, and what to insist on.

  → [https://csidia.com/en/notes/contratti-ai-termini-riservati-limiti-verificabili/](https://csidia.com/en/notes/contratti-ai-termini-riservati-limiti-verificabili/)
- ![Every component of a dismantled device, laid out side by side on a pale surface](https://csidia.com/img/nota-sbom-600.webp)

  Regulation 25 July 2026

  **Cyber Resilience Act: no SBOM, no CE marking from 11 December 2027**

  From 11 December 2027 Reg. (EU) 2024/2847 requires a technical file and a software bill of materials: without them, no declaration of conformity, no CE mark.

  → [https://csidia.com/en/notes/cyber-resilience-act-sbom-fascicolo-tecnico-2027/](https://csidia.com/en/notes/cyber-resilience-act-sbom-fascicolo-tecnico-2027/)
- ![Close-up of a stack of thin metal plates piled one on top of another against a plain grey background](https://csidia.com/img/nota-strati-difesa-600.webp)

  Partnerships 25 July 2026

  **Thales and Destinus: flipping the cost of shooting down a drone**

  Thales signs with Destinus, a European start-up of 750 people: Hornet interceptors, NATO warheads, joint production. What the release does not say.

  → [https://csidia.com/en/notes/destinus-thales-intercettori-drone-europa/](https://csidia.com/en/notes/destinus-thales-intercettori-drone-europa/)
- ![Reinforced concrete structure under construction, with props and formwork on the top slab, in black and white](https://csidia.com/img/nota-oss-astra-600.webp)

  Observatory 25 July 2026

  **AI procurement: writing a tender that survives a protest — the DIA ASTRA case**

  The DIA pulls the ASTRA solicitation after a protest by a software vendor under the law preferring commercial software: what it teaches anyone writing AI requirements.

  → [https://csidia.com/en/notes/palantir-dia-astra-gara-ritirata/](https://csidia.com/en/notes/palantir-dia-astra-gara-ritirata/)
- ![A vernier caliper resting on the slide of a workshop lathe, in black and white](https://csidia.com/img/nota-calibro-600.webp)

  Regulation 25 July 2026

  **Article 98 trade secrets: no proof of measures, no protection**

  Article 98 of Italy’s IP Code protects trade secrets only under “reasonably adequate measures”. In court the burden of proof is yours: the evidence to keep.

  → [https://csidia.com/en/notes/segreto-industriale-prova-misure-adeguate-ai/](https://csidia.com/en/notes/segreto-industriale-prova-misure-adeguate-ai/)
- ![A concrete dam with a long row of spillway gates, under a heavy cloudy sky](https://csidia.com/img/nota-diga-600.webp)

  Observatory 25 July 2026

  **Soofi S, the European open model on a single GPU: can you use it yet?**

  Soofi S 30B-A3B: 31.6 billion parameters, 3.2 active per token, a one-million-token context. The real on-premise numbers, and the licence that is missing.

  → [https://csidia.com/en/notes/soofi-s-modello-aperto-europeo-on-premise/](https://csidia.com/en/notes/soofi-s-modello-aperto-europeo-on-premise/)
- ![Rows of empty chairs in a waiting room, in black and white](https://csidia.com/img/nota-liste-attesa-600.webp)

  Operational AI 24 July 2026

  **Waiting Lists: The Problem Isn't Capacity, It's the Pipeline**

  Siloed schedules, lost slots, demand spikes caught too late: how an ontology-and-agents pipeline recovers up to 20% more visits in 12 months. A simulation.

  → [https://csidia.com/en/notes/liste-attesa-pipeline-ontologia-ai/](https://csidia.com/en/notes/liste-attesa-pipeline-ontologia-ai/)
- ![Black-and-white aerial view of cultivated fields crossed by a road, with no satellite reference in sight](https://csidia.com/img/nota-nav-ottica-600.webp)

  Partnerships 24 July 2026

  **ASIO and Anduril: the small Israeli firm that flies drones without GPS**

  ASIO Technologies, an Israeli optical-navigation start-up, signs a deal worth tens of millions with Anduril: the technology, the known terms and the risks.

  → [https://csidia.com/en/notes/asio-anduril-navigazione-droni-gps/](https://csidia.com/en/notes/asio-anduril-navigazione-droni-gps/)
- ![A processor with hundreds of gold pins, photographed close up against a soft backlight](https://csidia.com/img/nota-cpu-locale-600.webp)

  Observatory 24 July 2026

  **DeepSeek V4 runs on a $4,000 PC: what changes for on-premise AI**

  DeepSeek V4-Flash, open-weight and MIT-licensed, runs on a 192 GB AMD mini PC: the real numbers on cost, sovereignty and risk for on-premise buyers.

  → [https://csidia.com/en/notes/deepseek-v4-flash-pc-locale-192gb/](https://csidia.com/en/notes/deepseek-v4-flash-pc-locale-192gb/)
- ![A hand signing a document with a pen, close-up, in black and white](https://csidia.com/img/nota-firma-600.webp)

  Regulation 24 July 2026

  **NIS2, October 2026: what must be in the binder when ACN comes knocking**

  From October 2026 the first NIS2 wave must prove baseline security to ACN, Italy's cyber agency: policies, risks, registers, supplier contracts.

  → [https://csidia.com/en/notes/nis2-ottobre-2026-prova-documentale/](https://csidia.com/en/notes/nis2-ottobre-2026-prova-documentale/)
- ![Perforated panel of a server case with a lit indicator light, in black and white](https://csidia.com/img/nota-oss-killswitch-600.webp)

  Observatory 24 July 2026

  **The OpenAI Model That Broke Out of Testing, and the Kill Switch Congress Wants**

  OpenAI admits two of its models broke out of testing and hacked Hugging Face to cheat a benchmark: the US Congress now proposes a kill switch by law.

  → [https://csidia.com/en/notes/openai-modello-kill-switch-congresso/](https://csidia.com/en/notes/openai-modello-kill-switch-congresso/)
- ![A brass two-pan balance scale, perfectly level, resting on a wooden shelf](https://csidia.com/img/nota-bilancia-600.webp)

  Regulation 24 July 2026

  **Pay Transparency: From 7 June 2027 the Gap Must Be Declared, Payslips Included**

  Legislative Decree 96/2026 requires pay gap reporting from 7 June 2027: the calculation cross-references payslips, job grades and gender for every employee.

  → [https://csidia.com/en/notes/parita-retributiva-7-giugno-2027-buste-paga/](https://csidia.com/en/notes/parita-retributiva-7-giugno-2027-buste-paga/)
- ![Molten metal being poured in an industrial foundry, in black and white](https://csidia.com/img/nota-oss-dualuse-600.webp)

  Observatory 24 July 2026

  **China blocks dual-use exports to Rheinmetall: retaliation for EU sanctions**

  On 24 July 2026 China blocks dual-use exports to Rheinmetall and 13 other EU firms, retaliation for Brussels' Russia sanctions: the lesson on supply chains.

  → [https://csidia.com/en/notes/rheinmetall-cina-controlli-export-ritorsione/](https://csidia.com/en/notes/rheinmetall-cina-controlli-export-ritorsione/)
- ![A hand pointing at a technical drawing in an open instruction manual](https://csidia.com/img/nota-manuale-600.webp)

  Regulation 23 July 2026

  **Machinery Regulation: no compliant manuals, no CE mark from 20 January 2027**

  Regulation (EU) 2023/1230 replaces the Machinery Directive from 20 January 2027: digital instructions, cybersecurity requirements, who risks losing CE.

  → [https://csidia.com/en/notes/regolamento-macchine-manuali-istruzioni-2027/](https://csidia.com/en/notes/regolamento-macchine-manuali-istruzioni-2027/)
- ![Close-up view of a vintage rocket engine, nozzle and spherical metal tanks, in black and white](https://csidia.com/img/nota-oss-barracuda-600.webp)

  Observatory 23 July 2026

  **Anduril and Rheinmetall: the European drone alliance scales back**

  A year after launch, Bloomberg confirms the Anduril-Rheinmetall drone and missile partnership for Europe has been scaled back: what it means for defence.

  → [https://csidia.com/en/notes/anduril-rheinmetall-droni-europa-ridimensionata/](https://csidia.com/en/notes/anduril-rheinmetall-droni-europa-ridimensionata/)
- ![Ring binders lined up on a shelf, with barcode labels](https://csidia.com/img/nota-capitolato-600.webp)

  Governance 23 July 2026

  **$300,000 a year per vehicle just for AI licensing: the GAO's lessons**

  The GAO reviews 44 US government AI contracts: no agency documents its mistakes. Lessons on cost, testing and specifications for anyone buying AI today.

  → [https://csidia.com/en/notes/appalti-ai-lezioni-apprese-gao/](https://csidia.com/en/notes/appalti-ai-lezioni-apprese-gao/)
- ![Two armoured vault doors set into a brick wall](https://csidia.com/img/nota-caveau-600.webp)

  Regulation 23 July 2026

  **ACN cloud rules: past the 30 June 2026 deadline, critical data is non-compliant**

  The ACN cloud regulation set migration for 30 June 2026: critical and strategic public-sector data can no longer sit on unqualified cloud services.

  → [https://csidia.com/en/notes/cloud-acn-30-giugno-2026-dati-critici-pa/](https://csidia.com/en/notes/cloud-acn-30-giugno-2026-dati-critici-pa/)
- ![A drone backlit at sunset above a field, its silhouette showing no visible branding](https://csidia.com/img/nota-oss-dji-600.webp)

  Observatory 23 July 2026

  **DJI and the FCC: banned by order, sold under another name**

  The FCC accuses nine companies of selling rebranded DJI drones to dodge the US ban: the independent audit, the Odyssey Robot case, the supply-chain lesson.

  → [https://csidia.com/en/notes/dji-bando-usa-aziende-schermo/](https://csidia.com/en/notes/dji-bando-usa-aziende-schermo/)
- ![Patch panel with dozens of fibre-optic cables connected inside a data centre](https://csidia.com/img/nota-fibra-600.webp)

  Observatory 23 July 2026

  **Mistral and Microsoft on Azure Local: how sovereign is it, really?**

  Microsoft brings Mistral Medium 3.5, open-weight, to Azure Local: cloud, connected, disconnected. What to check before calling it real AI sovereignty.

  → [https://csidia.com/en/notes/mistral-microsoft-azure-local-sovranita/](https://csidia.com/en/notes/mistral-microsoft-azure-local-sovranita/)
- ![A closed metal gate in front of a corridor of concrete-block pillars](https://csidia.com/img/nota-oss-oligo-600.webp)

  Partnerships 23 July 2026

  **The FedStart programme: the fast lane into the US government cloud**

  Oligo Security, an Israeli cybersecurity start-up, joins the FedStart programme for FedRAMP certification: the fast lane into the US government market.

  → [https://csidia.com/en/notes/oligo-security-palantir-fedstart/](https://csidia.com/en/notes/oligo-security-palantir-fedstart/)
- ![A verification stamp resting on an open page of legal text](https://csidia.com/img/nota-policyai-600.webp)

  Regulation 23 July 2026

  **A Corporate AI Policy: Since 2025, No Longer a Choice — a Legal Obligation**

  Staff pasting confidential data into free chatbots, outside IT control: the AI Act, trade-secret law and the GDPR already make an AI policy mandatory.

  → [https://csidia.com/en/notes/policy-ai-aziendale-obbligo-di-legge/](https://csidia.com/en/notes/policy-ai-aziendale-obbligo-di-legge/)
- ![Camouflaged military radar dish photographed from below against a clear blue sky](https://csidia.com/img/nota-radar-difesa-600.webp)

  Observatory 22 July 2026

  **Anthropic and the Pentagon: banned by contract, used out of necessity**

  An Air Force memo orders Anthropic purged by September. NSA and Commerce are meanwhile evaluating its software: the lesson on vendor dependency.

  → [https://csidia.com/en/notes/anthropic-pentagono-mythos-settembre-2026/](https://csidia.com/en/notes/anthropic-pentagono-mythos-settembre-2026/)
- ![Hands typing on a laptop keyboard in an office](https://csidia.com/img/nota-sentiment-600.webp)

  Regulation 22 July 2026

  **Sentiment analysis on employees in chat: what the Italian Garante just stopped**

  A plug-in reads employee stress on Slack and Teams: the Italian Garante blocks it. GDPR, the AI Act and the Workers' Statute draw the line for AI at work.

  → [https://csidia.com/en/notes/garante-sentiment-analysis-lavoratori/](https://csidia.com/en/notes/garante-sentiment-analysis-lavoratori/)
- ![Network cables plugged into the ports of a switch in a server rack](https://csidia.com/img/nota-intrusione-ai-600.webp)

  Security 22 July 2026

  **An AI agent attacked Hugging Face with no human operator**

  Hugging Face confirms an intrusion run end-to-end by an autonomous AI agent, over 17,000 actions in a weekend. What it means for enterprise security.

  → [https://csidia.com/en/notes/hugging-face-agente-ai-violazione/](https://csidia.com/en/notes/hugging-face-agente-ai-violazione/)
- ![A storage module pulled from a server rack in a data centre hall](https://csidia.com/img/nota-kimi-k3-600.webp)

  Observatory 22 July 2026

  **Kimi K3: Microsoft is testing it for Copilot. What changes for decision-makers**

  Moonshot releases Kimi K3, a 2.8-trillion-parameter open-weight model: Microsoft is trialling it to cut Copilot costs. The real numbers for buyers.

  → [https://csidia.com/en/notes/kimi-k3-moonshot-microsoft-copilot/](https://csidia.com/en/notes/kimi-k3-moonshot-microsoft-copilot/)
- ![Façade of a modern institutional building in glass and concrete, with a large circular opening](https://csidia.com/img/nota-oss-pega-600.webp)

  Observatory 22 July 2026

  **NSO and the European Parliament: Pegasus hit the very people investigating it**

  A member of the EU committee on Pegasus was hacked with Pegasus in 2022-2023: the Kouloglou case and the real limits of European spyware oversight.

  → [https://csidia.com/en/notes/nso-pegasus-parlamento-europeo-kouloglou/](https://csidia.com/en/notes/nso-pegasus-parlamento-europeo-kouloglou/)
- ![Files and documents stacked on an office desk](https://csidia.com/img/nota-agid-ia-600.webp)

  Governance 21 July 2026

  **AI in public administration: what AgID's guidelines change**

  AgID's guidelines on AI development and procurement in Italian public administration land in 2026: four autonomy levels, LCOAI, AI Bill of Materials.

  → [https://csidia.com/en/notes/agid-linee-guida-ia-pubblica-amministrazione/](https://csidia.com/en/notes/agid-linee-guida-ia-pubblica-amministrazione/)
- ![Façade of an institutional concrete building, brutalist architecture, viewed from below](https://csidia.com/img/nota-cellebrite-600.webp)

  Observatory 21 July 2026

  **Cellebrite and Russia: the contract ended. The tool did not.**

  Cellebrite cut off Russia in 2021. Three months later one of its tools was extracting data from a dissident's phone: the lesson on control after signing.

  → [https://csidia.com/en/notes/cellebrite-russia-contratto-rescisso/](https://csidia.com/en/notes/cellebrite-russia-contratto-rescisso/)
- ![Close-up of a circuit board with chips and electronic components](https://csidia.com/img/nota-pqc-600.webp)

  Security 21 July 2026

  **Post-quantum cryptography: the real deadline is late 2026, not 2030**

  The EU post-quantum cryptography roadmap sets its first deadline for late 2026: inventory and transition plan. What changes for business and government.

  → [https://csidia.com/en/notes/crittografia-post-quantistica-scadenza-2026/](https://csidia.com/en/notes/crittografia-post-quantistica-scadenza-2026/)
- ![A data centre corridor lined with rows of server racks](https://csidia.com/img/nota-datacenter-confini-600.webp)

  Observatory 21 July 2026

  **Google Sells AI to Alibaba, Baidu and Tencent Units: It's Legal, and That's the Problem**

  Google and OpenAI supply AI to the Singapore subsidiaries of three Chinese companies blacklisted by the Pentagon. It's legal. What that means for buyers.

  → [https://csidia.com/en/notes/google-cina-singapore-controlli-export/](https://csidia.com/en/notes/google-cina-singapore-controlli-export/)
- ![Bronze statue of the scales of justice, blindfolded](https://csidia.com/img/nota-responsabilita-600.webp)

  Regulation 21 July 2026

  **AI Liability Directive Withdrawn: the Rule That Matters Lands on 9 December 2026**

  The AI Liability Directive has been withdrawn, but software and AI now fall under defective product liability: transposed in Italy by 9 December 2026.

  → [https://csidia.com/en/notes/responsabilita-prodotto-ai-9-dicembre-2026/](https://csidia.com/en/notes/responsabilita-prodotto-ai-9-dicembre-2026/)
- ![Control room with multiple screens](https://csidia.com/img/nota-acn-600.webp)

  Security 20 July 2026

  **Cyber incidents on the rise in Italy? No — we're finally seeing them**

  ACN's 2026 data shows spikes in cyber incidents, but the surge is mainly an effect of NIS2 making them visible: what the numbers say, and ACN's warning.

  → [https://csidia.com/en/notes/acn-incidenti-cyber-2026-nis2-visibilita/](https://csidia.com/en/notes/acn-incidenti-cyber-2026-nis2-visibilita/)
- ![Corridor in a server room with rows of rack cabinets](https://csidia.com/img/nota-dora-600.webp)

  Regulation 20 July 2026

  **DORA names its critical suppliers: Europe’s financial sector runs on five clouds**

  The first official DORA list of critical ICT providers — AWS, Google, Microsoft, Oracle, SAP — and the start of supervision in 2026: the concentration lesson.

  → [https://csidia.com/en/notes/dora-fornitori-ict-critici-concentrazione/](https://csidia.com/en/notes/dora-fornitori-ict-critici-concentrazione/)
- ![Machine room of a data centre](https://csidia.com/img/nota-gpai-600.webp)

  Regulation 20 July 2026

  **General-purpose AI models: from 2 August, you can demand more from your vendor**

  From 2 August 2026 the AI Act's GPAI obligations become enforceable: technical documentation, a summary of training data, copyright policies. What to demand.

  → [https://csidia.com/en/notes/gpai-2-agosto-2026-cosa-chiedere-fornitore/](https://csidia.com/en/notes/gpai-2-agosto-2026-cosa-chiedere-fornitore/)
- ![Remotely operated military drone in a hangar](https://csidia.com/img/nota-nato-droni-600.webp)

  Observatory 20 July 2026

  **NATO Bets $40 Billion on Drones: Can European Industry Deliver?**

  The NATO summit in Ankara shifts funding to drones and counter-drone systems. Rheinmetall's order book hits €73 billion, but can industry actually produce?

  → [https://csidia.com/en/notes/nato-ankara-droni-industria-europea/](https://csidia.com/en/notes/nato-ankara-droni-industria-europea/)
- ![Facade of a courthouse with columns](https://csidia.com/img/nota-openai-prove-600.webp)

  Observatory 20 July 2026

  **OpenAI and the publishers: the real stakes are the evidence, not the copyright**

  Publishers led by the NYT are seeking sanctions against OpenAI: it allegedly concealed data-search tools and deleted conversations after a preservation order.

  → [https://csidia.com/en/notes/openai-editori-prove-copyright/](https://csidia.com/en/notes/openai-editori-prove-copyright/)
- ![Industrial robotic arm with an operator checking its data](https://csidia.com/img/nota-data-act-600.webp)

  Regulation 19 July 2026

  **Data Act: your machines' data is (also) yours**

  The EU Data Act has applied since September 2025: access to connected-machine data, cloud switching and the end of egress fees in 2027. What to do now.

  → [https://csidia.com/en/notes/data-act-dati-macchine-cloud/](https://csidia.com/en/notes/data-act-dati-macchine-cloud/)
- ![Pioneer RQ-2A reconnaissance drone photographed in profile against a black background](https://csidia.com/img/nota-difesa-0719-600.webp)

  Scenarios 19 July 2026

  **EDIP and Readiness 2030: what changes for the Italian defence industry**

  EDIP in force, five joint projects proposed in July, €14.9 billion in SAFE funding for Italy: the verified figures and what changes for suppliers.

  → [https://csidia.com/en/notes/edip-difesa-europea/](https://csidia.com/en/notes/edip-difesa-europea/)
- ![Period engraving of the Palace of Westminster seen from the Thames](https://csidia.com/img/nota-palantir-uk-600.webp)

  Observatory 19 July 2026

  **The London case: when the supplier becomes “a point of weakness”**

  Met Police contract blocked, lawsuit against the Mayor of London, NHS deal under review: the case of a US supplier in the UK is a lesson on public-infrastructure lock-in.

  → [https://csidia.com/en/notes/palantir-regno-unito-punto-di-debolezza/](https://csidia.com/en/notes/palantir-regno-unito-punto-di-debolezza/)
- ![A corridor between two long rows of numbered archive drawers, in black and white](https://csidia.com/img/nota-oss-schedario-600.webp)

  Observatory 18 July 2026

  **Clearview vs Europe: the €100 million fines nobody collects**

  Five European authorities, over €100 million in GDPR fines never collected: the Clearview AI case exposes the limits of enforcement on biometric data.

  → [https://csidia.com/en/notes/clearview-riconoscimento-facciale-multe/](https://csidia.com/en/notes/clearview-riconoscimento-facciale-multe/)
- ![Close-up of an electronic circuit board](https://csidia.com/img/nota-cra-600.webp)

  Security 18 July 2026

  **Cyber Resilience Act: the reporting clock starts on 11 September**

  From 11 September 2026 manufacturers of products with digital elements must report exploited vulnerabilities and severe incidents within 24 to 72 hours.

  → [https://csidia.com/en/notes/cyber-resilience-act-segnalazione-settembre-2026/](https://csidia.com/en/notes/cyber-resilience-act-segnalazione-settembre-2026/)
- ![Period engraving of Palazzo Montecitorio in an antique volume](https://csidia.com/img/nota-legge-ai-600.webp)

  Regulation 18 July 2026

  **Italy's AI law (132/2025): what it actually adds to the EU AI Act**

  Italy is the first EU country with a comprehensive AI law: healthcare, public administration, employment and justice, national authorities, new offences.

  → [https://csidia.com/en/notes/legge-italiana-ai-132-2025/](https://csidia.com/en/notes/legge-italiana-ai-132-2025/)
- ![A historic workshop with belt-driven transmissions](https://csidia.com/img/nota-predittiva-600.webp)

  Manufacturing 17 July 2026

  **Predictive Maintenance in Emilia's Industrial Districts: Where to Start**

  ISO 17359 and ISO 20816, the data you already have, the 2026 hyper-depreciation scheme that also covers software: where to start in ceramics and packaging.

  → [https://csidia.com/en/notes/manutenzione-predittiva-distretti-emiliani/](https://csidia.com/en/notes/manutenzione-predittiva-distretti-emiliani/)
- ![Control room of an industrial plant](https://csidia.com/img/nota-nis2-600.webp)

  Regulation 9 July 2026

  **NIS2: what companies in critical sectors actually have to do**

  Who falls under the NIS2 Directive, what obligations it introduces and where to start: an operational guide for essential and important entities.

  → [https://csidia.com/en/notes/nis2-aziende-settori-critici/](https://csidia.com/en/notes/nis2-aziende-settori-critici/)
- ![Facade of a modern institutional building with a dome-shaped surveillance camera on the corner](https://csidia.com/img/nota-oss-ice-600.webp)

  Observatory 9 July 2026

  **A software vendor and ICE: the ImmigrationOS contract that split Silicon Valley**

  The $30 million ImmigrationOS contract between a software company and ICE, the protests, its chief executive's defence: a supplier's reputation is now the customer's risk.

  → [https://csidia.com/en/notes/palantir-ice-immigrationos/](https://csidia.com/en/notes/palantir-ice-immigrationos/)
- ![Hemicycle of the European Parliament](https://csidia.com/img/nota-ai-act-600.webp)

  Regulation 3 July 2026

  **The AI Act's Delay Has a Catch: What Still Applies from 2 August 2026**

  The Digital Omnibus postpones high-risk obligations to 2027, but transparency duties and penalties apply from 2 August 2026: an updated map of what to do.

  → [https://csidia.com/en/notes/ai-act-cosa-vale-dal-2-agosto-2026/](https://csidia.com/en/notes/ai-act-cosa-vale-dal-2-agosto-2026/)
- ![Large radar antenna in an Arctic landscape at dusk](https://csidia.com/img/nota-oss-helsing-600.webp)

  Observatory 3 July 2026

  **Helsing: A €12 Billion Unicorn in a Rearming Europe**

  A €600 million round led by Prima Materia, a €12 billion valuation, drones for Ukraine: the Helsing case, between European sovereignty and human control.

  → [https://csidia.com/en/notes/helsing-unicorno-armi-ai-europa/](https://csidia.com/en/notes/helsing-unicorno-armi-ai-europa/)
- ![Europe at night, seen from satellite](https://csidia.com/img/nota-sovrana-600.webp)

  Scenarios 11 June 2026

  **Sovereign AI: what it really means, once you strip away the slogans**

  For a company, AI sovereignty comes down to four verifiable questions: where the data sits, who can switch off what, what switching costs, who is accountable.

  → [https://csidia.com/en/notes/ai-sovrana-cosa-significa-per-aziende/](https://csidia.com/en/notes/ai-sovrana-cosa-significa-per-aziende/)
- ![Control panel of a vintage computer with rows of switches and error indicator lights](https://csidia.com/img/nota-oss-grok-600.webp)

  Observatory 11 June 2026

  **Grok at the Pentagon: six days from “MechaHitler” to a $200 million contract**

  July 2025: Grok’s antisemitic outputs and, six days later, the Pentagon’s $200 million contract. Why reliability is a procurement criterion.

  → [https://csidia.com/en/notes/xai-grok-contratto-pentagono/](https://csidia.com/en/notes/xai-grok-contratto-pentagono/)
- ![A surveillance camera on a building façade, seen from below](https://csidia.com/img/nota-oss-hikvision-600.webp)

  Observatory 14 May 2026

  **Hikvision v. Ottawa: when the camera becomes a matter of state**

  Canada orders Hikvision to cease operations; the company appeals. US and UK bans stand, yet the cameras remain in European buildings: lessons for procurement.

  → [https://csidia.com/en/notes/hikvision-telecamere-ban-occidente/](https://csidia.com/en/notes/hikvision-telecamere-ban-occidente/)
- ![Pudong skyline, Shanghai](https://csidia.com/img/nota-cina-600.webp)

  Scenarios 14 May 2026

  **Chinese open-source AI in the enterprise: the numbers add up, so do the risks**

  DeepSeek, Qwen, GLM and Kimi have passed 45% of global AI traffic at a fraction of the cost of US models. What to weigh before using them safely.

  → [https://csidia.com/en/notes/modelli-cinesi-open-source-in-azienda/](https://csidia.com/en/notes/modelli-cinesi-open-source-in-azienda/)
- ![Period interior of a munitions factory: workbenches and long rows of stacked metal crates](https://csidia.com/img/nota-oss-anduril-600.webp)

  Observatory 23 April 2026

  **Anduril replaces Microsoft: the $22 billion headset**

  The IVAS headset moves from Microsoft to Anduril, the Arsenal-1 factory in Ohio, products built with private capital: defence procurement is changing.

  → [https://csidia.com/en/notes/anduril-ivas-arsenal-riarmo/](https://csidia.com/en/notes/anduril-ivas-arsenal-riarmo/)
- ![Keys of a vintage typewriter](https://csidia.com/img/nota-injection-600.webp)

  Security 23 April 2026

  **Prompt injection: the attack that arrives by email (and how to contain it)**

  The top security risk for LLM systems, according to OWASP, is not a virus: it is an instruction hidden in a document. Why filters are not enough.

  → [https://csidia.com/en/notes/prompt-injection-sicurezza-llm/](https://csidia.com/en/notes/prompt-injection-sicurezza-llm/)
- ![Aerial view of the Pentagon, Arlington](https://csidia.com/img/nota-pentagono-600.webp)

  Observatory 8 April 2026

  **The Anthropic–Pentagon Case: Three Lessons for Every AI Buyer**

  The US government branded its own AI supplier a national security risk, then a judge froze the whole thing: what it teaches any company buying AI today.

  → [https://csidia.com/en/notes/caso-anthropic-pentagono-lezioni/](https://csidia.com/en/notes/caso-anthropic-pentagono-lezioni/)
- ![Hands leafing through files in an archive](https://csidia.com/img/nota-gdpr-600.webp)

  Regulation 26 March 2026

  **AI Act meets GDPR: who does what when you buy an AI system**

  Provider and deployer, DPIA and fundamental rights impact assessment, the training duty: who does what between the seller and the user of an AI system.

  → [https://csidia.com/en/notes/ai-act-gdpr-chi-fa-cosa/](https://csidia.com/en/notes/ai-act-gdpr-chi-fa-cosa/)
- ![The neoclassical facade of a courthouse with Corinthian columns and pediment, in black and white](https://csidia.com/img/nota-oss-tribunale-600.webp)

  Observatory 26 March 2026

  **NSO v WhatsApp: hacking a platform finally has its day in court**

  Liability established in 2024, a $167 million verdict in 2025, a permanent injunction: the Pegasus case sets a precedent that concerns every company.

  → [https://csidia.com/en/notes/nso-whatsapp-verdetto-pegasus/](https://csidia.com/en/notes/nso-whatsapp-verdetto-pegasus/)
- ![Robotic arms on a production floor](https://csidia.com/img/nota-agenti-600.webp)

  Operational AI 12 March 2026

  **AI agents at work: what can they actually touch?**

  Agents don't just write text: they act on your systems. Minimum permissions, typed actions, human approval and an audit log: the mechanics of guardrails.

  → [https://csidia.com/en/notes/agenti-ai-permessi-guardrail-responsabilita/](https://csidia.com/en/notes/agenti-ai-permessi-guardrail-responsabilita/)
- ![Aerial view of a large data centre complex among the hills](https://csidia.com/img/nota-oss-cloud-600.webp)

  Observatory 12 March 2026

  **Microsoft and Unit 8200: when the cloud provider pulls the plug**

  Intercepted calls archived on Azure, the outside review, services switched off for Unit 8200: the lesson for anyone buying cloud in Europe.

  → [https://csidia.com/en/notes/microsoft-azure-israele-inchieste/](https://csidia.com/en/notes/microsoft-azure-israele-inchieste/)
- ![A technician testing a model aircraft in a wind tunnel](https://csidia.com/img/nota-sperimentazioni-600.webp)

  Method 19 February 2026

  **95% of AI Experiments Never Reach Production: How to Land in the 5%**

  The MIT study that got everyone talking: almost all corporate generative AI experiments produce no measurable return. The real causes, and the method.

  → [https://csidia.com/en/notes/perche-le-sperimentazioni-ai-non-arrivano-in-produzione/](https://csidia.com/en/notes/perche-le-sperimentazioni-ai-non-arrivano-in-produzione/)
- ![Corridor in a data centre with rows of server racks, in black and white](https://csidia.com/img/nota-oss-scale-600.webp)

  Observatory 19 February 2026

  **Scale AI inside Meta: when everyone's supplier chooses a side**

  Meta invests $14.3 billion for 49% of Scale AI, Google and OpenAI leave the platform: the case that exposed the true value of data neutrality.

  → [https://csidia.com/en/notes/scale-ai-meta-dati-addestramento/](https://csidia.com/en/notes/scale-ai-meta-dati-addestramento/)
- ![The silhouette of a telecommunications mast against a cloudy sky at dusk, in black and white](https://csidia.com/img/nota-oss-ripetitore-600.webp)

  Observatory 5 February 2026

  **Paragon and Italy: when the spyware vendor terminates the state contract**

  WhatsApp notifications to ninety targets, the government’s admission, the COPASIR report, Paragon’s termination: one year of the Graphite affair in Italy.

  → [https://csidia.com/en/notes/paragon-graphite-italia-un-anno-dopo/](https://csidia.com/en/notes/paragon-graphite-italia-un-anno-dopo/)
- ![Computer workstations in an office](https://csidia.com/img/nota-shadow-600.webp)

  Governance 5 February 2026

  **Shadow AI: Staff Already Use It, Pretending Otherwise Is the Real Risk**

  Source code pasted into chatbots, customer data in prompts, personal accounts used for work: how to govern shadow AI without banning it. Policy and tools.

  → [https://csidia.com/en/notes/shadow-ai-governare-non-vietare/](https://csidia.com/en/notes/shadow-ai-governare-non-vietare/)
- ![Reading room of a historic library](https://csidia.com/img/nota-allucinazioni-600.webp)

  Method 22 January 2026

  **Hallucinations: how much can you trust a model, and how do you make it safe**

  Air Canada found liable for its chatbot's invented answers, lawyers sanctioned over non-existent rulings: hallucinations are a legal risk. Four defences.

  → [https://csidia.com/en/notes/allucinazioni-ai-come-mettersi-al-sicuro/](https://csidia.com/en/notes/allucinazioni-ai-come-mettersi-al-sicuro/)
- ![Monumental facade of the Palace of Justice in Rome, with palm trees in backlight](https://csidia.com/img/nota-oss-garante-600.webp)

  Observatory 22 January 2026

  **The Italian Garante vs OpenAI: €15 million to map the perimeter of consumer AI**

  The Italian Garante's €15 million fine on OpenAI for ChatGPT, between appeal and suspension: why consumer AI at work has a precise GDPR perimeter.

  → [https://csidia.com/en/notes/garante-openai-multa-15-milioni/](https://csidia.com/en/notes/garante-openai-multa-15-milioni/)

The first step

## Book a meeting.

Tell us the purpose. We tell you whether an agent or a trained model would do it better than you do today, what it would take (data, compute, time) and which route fits: our infrastructure or yours. If it is not a job for us, we say so.

- video call or in person
- 30 minutes
- free

[Book a meeting](https://csidia.com/en/book/?servizio=misura) [or write to engagement@csidia.com](mailto:engagement@csidia.com?subject=First%20meeting%3A%20A%20model%20trained%20for%20your%20purpose)

The service

A model trained for your purpose

An open-weight model trained on your data, on our infrastructure or yours. What it learns stays yours.

[What we do](https://csidia.com/en/what-we-do/) [Capabilities](https://csidia.com/en/capabilities/)

Page: https://csidia.com/en/notes/ · CSIDIA S.r.l., Vignola (MO), Italy · engagement@csidia.com · index for agents: https://csidia.com/llms.txt