You Don't Know What AI You're Running

This week looked like a fireworks show of AI launches — OpenAI's GPT-5.6, new real-time voice models, Microsoft leaning on its own in-house models. The more important story ran underneath all of it: the AI inside your company has quietly become a black box you can neither see into nor fully trust. Microsoft has begun replacing OpenAI and Anthropic with its own cheaper MAI models inside Excel and Outlook — its AI chief said the goal is to "eliminate that cost." The security firm Wiz found six major AI coding assistants showed users a fake file path in their safety confirmation while writing to sensitive files. And an independent developer discovered Anthropic had run an undisclosed location tracker inside Claude Code for months.Stephen Forte on why you are now accountable for an AI you cannot inspect — and the three clauses to put in every AI contract before your next renewal: model-transparency and change-notification, an independent audit-logging layer, and a named owner for what is actually running in your stack.