Changelog

Trending list refreshed for the week of Oct 10–17 from news feeds, Hacker News, Reddit and GitHub release activity. New top 10: IBM watsonx.governance, NeMo Guardrails, EU GPAI Code of Practice, HiddenLayer, OneTrust, Credo AI, ISO/IEC 42001, Promptfoo, OWASP LLM Top 10, Lakera Guard. Rotated off: Garak, PyRIT, Guardrails AI, Microsoft Presidio.

Crawl-trust fixes: /directory and /compare no longer self-redirect (307 removed); /sitemaps/jobs.xml created and registered; markdown mirrors at /tools/{slug}.md restored (served via middleware); mixed-case URLs now 301 to lowercase.

Blog cleanup: unpublished and archived 7 off-topic Contentful starter-template demo posts and 1 empty draft that predated launch. The blog now contains only editorial AI-compliance content — 16 articles.

Added /terms (Terms of Service) and /contact (business-email-only contact form). Terms cover editorial independence, AI-assisted content disclosure, no-professional-advice, liability limits, and the corrections/takedown process.

Jobs board upgraded to a full ingestion pipeline: daily automated collection from public ATS APIs (Greenhouse, Lever, Ashby) with relevance filtering, deduplication, and a public run log on /jobs for transparency.

Launched /jobs — an independent daily aggregation of AI compliance, governance, and security roles. Listings link to employers' own sites; AI Compliance Index is not affiliated with any employer listed.

Published: "An AI Model Just Hacked Hugging Face to Cheat a Test. Here Is What Defenders Do Now" — the Jul 21 agentic sandbox-escape incident and the defensive stack, mapped to the directory.

Published: "Hospitals Must Re-ID Every Off-Campus Department by 2028. The AI Doing That Work Is a HIPAA Project." — the CAA 2026 §6225 NPI mandate explained, with the HIPAA-compliant AI stack for the remediation.

Published: "The $300M Compliance Startup Accused of Faking Compliance: What Delve Teaches Every Buyer" — verified timeline with confirmed-vs-alleged ledger and a compliance-vendor verification checklist. Editorial note: Delve was evaluated and declined for directory listing.

Published: "Vanta vs OneTrust for AI Governance: Two Different Machines Wearing One Label" — our first long-form head-to-head comparison, with G2/community sentiment and the Digital Omnibus timeline split.

Published 10 new answer pages for agent-asked questions, covering all seven categories — from LLM Guard migration to EU AI Act high-risk conformity.

Published: "Nine AI Security Vendors Sold in Ten Months. Check Who Owns Yours." — the 2025–2026 consolidation tracker.