Skip to main content

Governance / Case File

CASE FILE

Case File governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.

Institutional BreakdownLegal and Policy ConflictElection and Control Risk
CASE FILE signal visual
Governance / Case FileCASE FILE
Active Dossiers1 Live Case

AFRINIC saga currently tracked end-to-end.

Primary DomainGovernance

Institution legitimacy and continuity risk mapping.

MethodSignal + Timeline + Failure Paths

Primary-source based timeline and risk analysis.

Decision ValueHigh

Used for continuity and policy exposure planning.

Latest Coverage

Latest from CASE FILE

1,345 articles

Many public-service endpoints converge through separate hosting, DNS and certificate layers, joined by an audit bridge to a blank decision record and tested exit loop

CASE FILE

A Million Government URLs Can Show Dependency. They Cannot Prove Who Chose It

A new cross-country study compares the companies behind government websites with those serving commercial sites. Its distinction between market-shaped and government-specific concentration is a useful diagnostic. But an infrastructure measurement cannot identify the official who…

Sep 11, 2026
A neutral image tile crosses separate camera, device, app and cloud gates while bounded age signals enter each layer and evidence and correction paths remain distinct

CASE FILE

Britain’s Under-18 Nude-Image Plan Crosses Devices and Apps. Its Duty Map Is Still Missing

The UK government says it will legislate so under-18s cannot take, view or send nude images, with protection extending from cameras to third-party apps. That is a whole-system objective announced before the whole system of duties. Until a bill assigns each action, signal, handoff…

Sep 11, 2026
A translucent guidance sheet lifts away while a locked rulebook remains connected to health devices and three notification paths

CASE FILE

The FTC Withdrew a Health-App Statement, Not the Breach Rule

A one-page withdrawal can produce a dangerously large misunderstanding. On 9 September, the US Federal Trade Commission rescinded a 2021 policy statement about health apps and connected devices. It did not say that the Health Breach Notification Rule had disappeared. The…

Sep 11, 2026
Abstract pixel tiles pass through a cyan hash-matching aperture, a human-review shield and a separate decision gate, with a correction path returning to the secured set

CASE FILE

Ofcom’s NCII Hash Programme Separates Detection From Judgment

The most important word in Ofcom’s new intimate-image-abuse measure is not “hash”. It is “judgment”. A digital fingerprint can tell a service that an uploaded image resembles material represented in a database. It cannot, by itself, establish consent, context or every element of…

Sep 11, 2026
An empty four-position data block enters a transparent routing carrier; beyond a separate allocation gate, two positions illuminate while a duplicate is diverted and a malformed fragment is stopped.

CASE FILE

The Flag Field Was Extended. No Prefix Property Had Been Defined: RFC 9792

RFC 9792 made room for future OSPF prefix facts without claiming that any such fact yet existed. That small act of restraint creates a useful test for every routing-control assertion: identify the container, the assigned bit, the sender's bytes, the receiver's rule and the…

Sep 11, 2026
A blue registration gate and an amber verification gate lead to an unsealed AI model cube, while a dated evidence folder sits beside a non-decisive judicial balance

CASE FILE

California’s AI-Audit Laws Separate Registration From Verification

California has enacted two gates for a market that promises to check artificial-intelligence systems. One law will require people selling covered AI audits to enter a public registry and follow conduct rules. The other tells the state to decide which auditors merit the more…

Sep 10, 2026
Three changing cyan medical-device modules connect one active version to an anonymous care record, an amber incident lens and a rollback gate, while a policy seal remains behind glass

CASE FILE

UK AI-Health Blueprint Would Put Device Versions in Patient Records—but Is Not Yet Policy

The most important field in Britain’s new blueprint for governing artificial intelligence in healthcare may be a version number. The National Commission into the Regulation of AI in Healthcare wants the device state used in a patient’s care recorded so that an outcome can later…

Sep 10, 2026
Luminous multicast rings and separate receiver identity tokens enter a brass root mechanism that opens distinct outgoing gates for unique mappings.

CASE FILE

The Underlay Group Was Requested. The Receivers Were Not Proved: RFC 9798

One multicast-valued Receiver RLOC reaches a root ITR. It looks like a destination and may cause real forwarding state, but it answers neither “which ETRs asked?” nor “who received data?” RFC 9798 makes the division of labour precise enough to build a better receipt: preserve the…

Sep 10, 2026
Abstract DNS infrastructure with branching query paths, redundant authoritative servers and a contained signal anomaly being repaired.

CASE FILE

When a BIND Fix Is Not Yet a Repair

A resolver vulnerability becomes an institutional accountability test when the patch is available but the evidence of recovery is not. ISC’s public record establishes how two BIND failures can turn hostile DNS input into an availability risk—and identifies a remediation…

Sep 10, 2026
Connected product models send amber security signals through one glass gateway toward blue national coordination nodes, with one gated side route

CASE FILE

The EU’s Cyber-Product Reporting Clock Is Running Before Its Main Security Rules

Europe has switched on one of the Cyber Resilience Act’s most consequential mechanisms fifteen months before the law’s main product-security duties take effect. From 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe security incidents on…

Sep 10, 2026
One nested glass-and-ceramic structure crosses a woven transport conduit into a measured canonical byte frame, with a separate purple display layer.

CASE FILE

The object survived five spellings. Which bytes were signed? RFC 9804

RFC 9804 gives SPKI S-expressions a precise route between readable notation, channel-safe transport, canonical octets and local memory. The route is reversible only when each transition is evidenced. A familiar-looking expression, a display hint or a successful parse cannot by…

Sep 10, 2026
Three glass service modules cross one amber threshold into separate review tracks, each interrupted by a narrow public-record gap, with unmarked evidence blocks below

CASE FILE

The EU Named Three Very Large Services. Their Exact DSA Compliance Dates Are Not Public

The European Commission has put ChatGPT, Reddit and Roblox inside the Digital Services Act’s highest-supervision tier. It also says their additional duties apply by January 2027. What the public record does not yet provide is the day that matters in law: four months after each…

Sep 10, 2026
A cyan data tunnel passes through an open glass threshold into a bounded chamber with an amber review branch, a blue correction loop and five unmarked evidence blocks

CASE FILE

The UK Rejected a VPN Age Gate. Its Platform Enforcement Test Is Still Pending

Britain has made a clear choice about where not to enforce its child-safety policy: it will neither ban VPNs nor require VPN services to age-gate their users. Control has not disappeared, however. The government plans to place the burden on in-scope platforms to detect and…

Sep 10, 2026
Two differently segmented luminous route components enter a precision assembly gate before separate programming, packet-execution and traffic-result paths.

CASE FILE

The Two Routes Arrived. Their Bits Still Did Not Belong Together: RFC 9819

An ingress PE can possess the two BGP advertisements required to construct an SRv6 Service SID and still lack permission to treat their bits as one executable instruction. RFC 9819 makes the missing proof visible: identity, argument size, insertion boundary, local acceptance…

Sep 10, 2026
A complete luminous data tree stands in a glass chamber, separated by amber seams from PCEP exchange, controller decision, device application, forwarding and service layers.

CASE FILE

The Datastore Was Complete. The Control Plane Was Still Unproven: RFC 9826

A clean PCEP management tree can show an entity, its peers, live-looking sessions, notifications and counters in one coherent view. That coherence is a major operational gain. It is also where evidence from a management projection is most easily mistaken for proof of the network…

Sep 10, 2026
Illustrated governance documents, trustee oversight, District of Columbia legal context and network accountability structure.

CASE FILE

Internet Society’s Authority Has a Documented Structure, but Its Remedies Remain Conditional

The Internet Society’s public governance record points to a layered institution rather than a single source of power. Its articles of incorporation, bylaws, Board of Trustees and the District of Columbia nonprofit statute occupy different positions in that structure. The…

Sep 10, 2026
Abstract illustration of African internet registry infrastructure, governance controls and continuity checkpoints in a secure control room.

Afrinic SAGA

AFRINIC’s continuity controls remain harder to prove than its public machinery

AFRINIC can keep a registry visible while the evidence needed to establish lawful authority, privileged access, detection and recovery remains incomplete. The practical test is not whether the machinery appears to run, but whether high-impact changes can be authorised, observed…

Sep 10, 2026
High-contrast editorial network diagram showing administrative identity, DNS and web presence, BGP routing, ASN adjacency, and an unresolved boundary around customer-facing cloud service.

CASE FILE

AS210328 After Registration: The Missing Link Between Network Identity and Cloud Service

AS210328 After Registration: The Missing Link Between Network Identity and Cloud Service intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences…

Sep 10, 2026
Amber and cyan challenge paths return to an existing secure context while an address-binding ring waits and the application chamber remains dark.

CASE FILE

The Cookie Returned. The Service Had Not: RFC 9853

RFC 9853 lets a DTLS endpoint test a peer address after a Connection ID recovers an existing security context from a datagram whose source has changed. The returned cookie can justify one binding decision at one moment. It cannot explain the change, promise a stable path, or…

Sep 9, 2026
A clearly labeled evidence-layer graphic for AS210328 and almazcloud.network, separating registry identity, domain and DNS presence, routing visibility, and unconfirmed service operation.

CASE FILE

AlmazCloud’s ASN Is Registered. What Can Be Shown as Operating?

AlmazCloud’s ASN Is Registered. What Can Be Shown as Operating? intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The…

Sep 9, 2026

Member Unlock

Restricted Profile Intelligence

Login is required to unlock full profile briefings and deep-dive sections.

Only for Strategic Circle

Strategic Circle Briefing

Join to unlock strategic briefings after signing in.

Join Strategic Circle
Only for Leadership Alliance

Leadership Alliance Briefing

For qualified IP-asset owners and management; sign in to unlock alliance briefings.

Join Leadership Alliance

Session Map

Active Dossiers

AFRINIC Saga

Multi-year governance and legal crisis with implications for RIR accountability worldwide.

Open AFRINIC Saga