About
Most AI teams have governance policies.
Very few have control over what their…
Articles by John M.
Experience
Education
-
University of Oxford
-
-
Advanced executive program examining AI systems governance, alignment challenges, regulatory frameworks, and institutional oversight for large-scale AI deployment.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Licenses & Certifications
Volunteer Experience
-
Reviewer
National Electric Sector Cyber Security Organization Resources (NESCOR)
- 3 years 1 month
Science and Technology
NESCOR was organized as part of a 3-year Department of Energy (DoE) funded project.
Reviewer/Contributor on two Technical Working Groups:
* Cybersecurity Requirements & Standards Assessment
* Cybersecurity Technology Testing & Validation -
Advisor
American National Standards Institute
- 1 year
Advised the International Standards Organization (ISO) – Better Business Bureau (BBB) Identity Theft Prevention and Identity Management Standards Panel (IDSP) Virtual Technical Advisory Group (TAG) for ISO Technical Management Board Task Force on Privacy.
Publications
-
Artificial Intelligence Governance Control Plane (AGCP) Specification v0.9.0.
Sustainable Future Tech Publishing
See publicationInitial release of the Artificial Intelligence Governance Control Plane (AGCP) specification and reference artifacts.
AGCP proposes an architectural pattern for execution governance, ensuring that autonomous or AI-generated actions are mediated by a governance control plane before operational execution.
Live repository: https://github.com/jwillisSFT/agcp-spec -
Response to the NIST CAISI RFI on Security Considerations for Artificial Intelligence Agents (NIST-2025-0035)
National Institute of Standards and Technology (NIST)
See publicationTechnical response submitted to the NIST Center for AI Standards and Innovation Request for Information on security considerations for artificial intelligence agents. The paper discusses execution-layer governance risks in AI-enabled automation and proposes an architectural model combining the Practitioner’s Blueprint for Secure AI (PBSAI) with a deterministic execution mediation architecture referred to as the AI Governance Control Plane (AGCP).
-
The PBSAI Governance Ecosystem: A Multi-Agent AI Reference Architecture for Securing Enterprise AI Estates
arXiv
See publicationIntroduces the Practitioner’s Blueprint for Secure AI (PBSAI), a multi-agent reference architecture for securing enterprise and hyperscale AI estates. PBSAI defines a twelve-domain taxonomy and bounded agent families coordinated through shared context envelopes and structured output contracts. The architecture externalizes governance into deterministic control planes enforcing execution invariants, provenance, and human-in-the-loop guarantees. Demonstrates architectural alignment with NIST AI…
Introduces the Practitioner’s Blueprint for Secure AI (PBSAI), a multi-agent reference architecture for securing enterprise and hyperscale AI estates. PBSAI defines a twelve-domain taxonomy and bounded agent families coordinated through shared context envelopes and structured output contracts. The architecture externalizes governance into deterministic control planes enforcing execution invariants, provenance, and human-in-the-loop guarantees. Demonstrates architectural alignment with NIST AI RMF and application in enterprise SOC and hyperscale defensive environments.
-
Solving Cyber Hard Problems with Transparent Hybrid Quantum AI for Anomaly Detection
Sustainable Future Tech Publishing
See publicationThis working paper introduces a comprehensive architectural framework that integrates the Quantum-Inspired Lifecycle Interpretability System (QILIS) and the Quantum-Powered Anomaly Detector (Q-PAD) to address six foundational Cyber Hard Problems identified by the National Academies. The proposed architecture leverages quantum-inspired interpretability and real-time anomaly detection to provide transparent, modular, and lifecycle-aligned AI security for hybrid classical-quantum systems. Q-PAD…
This working paper introduces a comprehensive architectural framework that integrates the Quantum-Inspired Lifecycle Interpretability System (QILIS) and the Quantum-Powered Anomaly Detector (Q-PAD) to address six foundational Cyber Hard Problems identified by the National Academies. The proposed architecture leverages quantum-inspired interpretability and real-time anomaly detection to provide transparent, modular, and lifecycle-aligned AI security for hybrid classical-quantum systems. Q-PAD enhances detection accuracy and contextual awareness through hybrid classical-quantum analytics, while QILIS ensures end-to-end explainability and governance alignment across all AI lifecycle phases. The framework emphasizes composability, operator configurability, and relevance-driven decision support, establishing a forward-looking foundation for resilient, transparent, and adaptable AI systems in structured communication environments.
-
Response to the 2025 National AI R&D Strategic Plan RFI (90 FR 17835)
Sustainable Future Tech Inc
See publicationFormal technical response to the U.S. Office of Science and Technology Policy Request for Information on the 2025 National AI Research and Development Strategic Plan. Proposed embedded interpretability, lifecycle risk telemetry, and decision-assurance architectures aligned with national AI infrastructure priorities.
-
Strategic R&D Planning for Quantum and Hybrid AI: Navigating Industry Projections and Conservative Pathways (2025-2030)
Sustainable Future Tech Publishing
See publicationThis report provides a comprehensive strategic framework for organizations preparing for the rapid evolution of quantum and hybrid quantum-classical computing between 2025 and 2030. It synthesizes current industry roadmaps, emerging hardware capabilities, and realistic engineering constraints to outline three actionable R&D pathways: a Conservative Estimate Plan, an Industry Projections-Based Plan, and a Milestone-Triggered Plan. By integrating technical projections with risk-governance…
This report provides a comprehensive strategic framework for organizations preparing for the rapid evolution of quantum and hybrid quantum-classical computing between 2025 and 2030. It synthesizes current industry roadmaps, emerging hardware capabilities, and realistic engineering constraints to outline three actionable R&D pathways: a Conservative Estimate Plan, an Industry Projections-Based Plan, and a Milestone-Triggered Plan. By integrating technical projections with risk-governance principles, the report enables leaders in AI, HPC, and quantum technology to make informed, resilient investment decisions under uncertainty. The analysis highlights expected advancements in qubit fidelity, scalability, error correction, and hybrid AI integration, offering a balanced view of both optimistic and conservative developmental trajectories. This publication serves as a strategic guide for enterprises, research teams, and policymakers seeking to position themselves effectively for the coming quantum era.
-
QIXAI: A Quantum-Inspired Framework for Enhancing Classical and Quantum Model Transparency and Understanding
arXiv preprint
See publicationIntroduces QIXAI (Quantum-Inspired Explainable AI), a framework enhancing neural network interpretability using Hilbert space representations, eigenvalue decomposition, and information-theoretic analysis. Demonstrates structured lifecycle transparency beyond model-agnostic methods (SHAP, LIME, LRP) and applies to CNNs, transformers, RNNs, and generative systems across classical and hybrid architectures.
-
DevSecOps Best Practices v.0.1
Turnaround Security
Early framework outlining integrated DevSecOps practices for secure software lifecycle management across regulated environments.
-
Enumerating software security design flaws throughout the SSDLC
Presentation to 23rd International Computer Security Symposium and 8th SABSA World Congress, Naas, Ireland
See publicationPresented methodology and proof-of-concept tool for enumerating security functional requirements and integrating risk-based decision frameworks into enterprise SSDLC processes.
-
Extending the 20 Critical Security Controls to Assessments and Maturity Modeling
ShmooCon Fire Talks
See publicationPresentation on extending security control maturity models to operational assessments.
Patents
-
System and Method for Deterministic Governance of AI-Enabled Action Execution Using Commit-Time Validation and Canonical State Evaluation
Filed APPLICATION No.: 64/012,694
A system and method are provided for governing execution of actions in an artificial intelligence (AI)-enabled environment. One or more software agents generate action proposals, which are evaluated by a governance control plane prior to execution. The governance control plane applies deterministic validation logic to determine execution eligibility of each action proposal.
In certain embodiments, evaluation is performed at an execution boundary using a representation of current system…A system and method are provided for governing execution of actions in an artificial intelligence (AI)-enabled environment. One or more software agents generate action proposals, which are evaluated by a governance control plane prior to execution. The governance control plane applies deterministic validation logic to determine execution eligibility of each action proposal.
In certain embodiments, evaluation is performed at an execution boundary using a representation of current system conditions. The validation process may include applying one or more policy constraints to the action proposal and associated contextual information. Execution of the action proposal is permitted only upon satisfaction of the constraints, and is otherwise prevented.
The system may further support structured action representations, contextual metadata association, and recording of evaluation outcomes to enable audit and replay. The approach separates generation of action proposals from enforcement of execution constraints, enabling controlled and consistent operation of AI-enabled systems across varying domains. -
Provisional Patent: Governance Control Plane Architecture
Filed APPLICATION No.: 63/995,297
A deterministic governance control-plane architecture for managing execution of actions in automated systems. A governance envelope, bound to a tenant and action identifier, is processed through a strictly ordered, non-reorderable evaluation pipeline. Each evaluation stage produces immutable entries in an append-only ledger, assigned strictly increasing sequence values to enforce a per-action total ordering invariant. Lifecycle state is derived exclusively from the ordered ledger entries…
A deterministic governance control-plane architecture for managing execution of actions in automated systems. A governance envelope, bound to a tenant and action identifier, is processed through a strictly ordered, non-reorderable evaluation pipeline. Each evaluation stage produces immutable entries in an append-only ledger, assigned strictly increasing sequence values to enforce a per-action total ordering invariant. Lifecycle state is derived exclusively from the ordered ledger entries, eliminating reliance on independently mutable status fields. Execution is authorized only when a valid authorization reference is present in the ledger and lifecycle state is re-derived immediately prior to execution. Configuration version identifiers may be recorded to support deterministic replay and lifecycle reconstruction.
-
Provisional Patent: Hybrid Classical-Quantum System for Tokenized Bitwise Conversation-level Anomaly Detection in Real-Time Communication Traffic (Q-PAD)
Filed APPLICATION No. 63/984,730
Traditional intrusion detection systems operate at the packet or flow level and rely solely on classical statistical or neural network models. Q-PAD introduces a novel architectural approach that models communication traffic at the bitwise conversation level — formally defining a conversation as the sequence of packets exchanged between endpoint pairs (IP address and port combinations).
The system integrates classical sequential modeling with variational quantum circuits and a quantum…Traditional intrusion detection systems operate at the packet or flow level and rely solely on classical statistical or neural network models. Q-PAD introduces a novel architectural approach that models communication traffic at the bitwise conversation level — formally defining a conversation as the sequence of packets exchanged between endpoint pairs (IP address and port combinations).
The system integrates classical sequential modeling with variational quantum circuits and a quantum recurrent state mechanism that evolves across packet sequences. By encoding structured protocol embeddings into entangled quantum states and fusing quantum measurement outputs with classical representations, Q-PAD models cross-field and cross-packet correlations that are not efficiently representable in comparably sized classical architectures.
The invention contributes a full-stack, deployment-ready hybrid quantum–AI system, including deterministic threshold enforcement, distributed processing, and enterprise-compatible integration pathways. It represents a practical bridge between quantum computing theory and real-world secure infrastructure, advancing the field of hybrid quantum–classical AI for operational cybersecurity applications. -
Provisional Patent: System and Methods for Lifecycle-wide Interpretability and Real-Time Execution Control in Classical, Quantum, and Hybrid Neural Networks
Filed APPLICATION No. 63/984,705
This invention introduces a runtime execution-control framework for neural networks that computes feature relevance during the same forward inference pass and dynamically modifies execution scheduling in real time.
Unlike post-hoc explainability techniques, the system alters the computational graph during inference by suppressing low-relevance computation elements before downstream arithmetic operations are dispatched. This reduces unnecessary arithmetic operations, memory fetches, and…This invention introduces a runtime execution-control framework for neural networks that computes feature relevance during the same forward inference pass and dynamically modifies execution scheduling in real time.
Unlike post-hoc explainability techniques, the system alters the computational graph during inference by suppressing low-relevance computation elements before downstream arithmetic operations are dispatched. This reduces unnecessary arithmetic operations, memory fetches, and processor energy consumption while preserving predictive performance.
The architecture further enforces lifecycle stability by computing cross-phase relevance drift across foundational training, task-specific training, deployment, and post-deployment monitoring phases. A structured lifecycle state engine stores relevance and drift metrics and selectively authorizes parameter updates for unstable components.
Optional embodiments include hardware-aware scheduling and hybrid classical–quantum execution coordination. -
Provisional Patent: Multi-Domain Governance Architecture for Securing AI-Enabled Enterprise Estates
Filed APPLICATION No. 63/980,281
Introduces an ecosystem-level governance control plane that partitions enterprise AI environments into isolated operational domains with defined authority scopes and policy constraints.
Governance is externalized from individual tools into a deterministic control layer that synchronizes execution invariants across domains. The architecture constrains state transitions through validation of authority scope, contextual integrity, and structured contract compliance prior to…Introduces an ecosystem-level governance control plane that partitions enterprise AI environments into isolated operational domains with defined authority scopes and policy constraints.
Governance is externalized from individual tools into a deterministic control layer that synchronizes execution invariants across domains. The architecture constrains state transitions through validation of authority scope, contextual integrity, and structured contract compliance prior to action.
Enables scalable, state-aware governance of distributed AI-enabled cybersecurity operations while preserving structural isolation and cross-domain integrity. -
Provisional Patent: System and Method for Governing AI-Enabled Decision-Making Using Policy-Bounded Multi-Agent Execution
Filed APPLICATION No. 63/979,762
Describes a deterministic governance architecture for integrating probabilistic AI outputs into operational decision systems under explicit policy constraints.
The invention defines a control-plane model that:
• Externalizes policy enforcement from AI agents
• Implements deterministic control gates around autonomous actions
• Establishes structured execution context and authorization validation
• Governs transitions between automated reasoning and human oversight
•…Describes a deterministic governance architecture for integrating probabilistic AI outputs into operational decision systems under explicit policy constraints.
The invention defines a control-plane model that:
• Externalizes policy enforcement from AI agents
• Implements deterministic control gates around autonomous actions
• Establishes structured execution context and authorization validation
• Governs transitions between automated reasoning and human oversight
• Preserves traceability, reproducibility, and bounded execution
Designed to ensure that AI-enabled systems remain policy-bound and operationally coherent in enterprise, regulated, and safety-critical environments. -
Application Security Architecture and Design Modeling, Security Functional Requirements Generation, and Reporting Tool
U.S. Provisional Pat. Ser. No. 62534704, filed July 20, 2017
Automated system for security functional requirements generation and structured risk modeling within enterprise SSDLC processes.
Presented at International Computer Security Symposium and SABSA World Congress (2016).
Honors & Awards
-
Director’s Impact Award
United States Secret Service
Director’s Impact Award in special recognition of efforts and contributions which significantly impacted business practices.
-
CIO Award for Exceptional Technical Performance & Organizational Support
United States Secret Service
Chief Information Officer (CIO) award in recognition of exceptional technical performance and CIO organizational support.
Recommendations received
6 people have recommended John M.
Join now to viewOther similar profiles
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content