John M. Willis

John M. Willis

Gaithersburg, Maryland, United States
11K followers 500+ connections

About

Most AI teams have governance policies.

Very few have control over what their…

Articles by John M.

Experience

  • Sustainable Future Tech Graphic

    Sustainable Future Tech

    Washington DC-Baltimore Area

  • -

    Delhi, India

  • -

    Gaithersburg, MD

  • -

    Washington DC-Baltimore Area

  • -

    Columbia, MD

  • -

    Atlanta Metropolitan Area

Education

  • University of Oxford Graphic

    University of Oxford

    -

    -

    Advanced executive program examining AI systems governance, alignment challenges, regulatory frameworks, and institutional oversight for large-scale AI deployment.

  • -

    -

  • -

    -

  • -

    -

  • -

    -

  • -

    -

  • -

    -

Licenses & Certifications

Volunteer Experience

  • Reviewer

    National Electric Sector Cyber Security Organization Resources (NESCOR)

    - 3 years 1 month

    Science and Technology

    NESCOR was organized as part of a 3-year Department of Energy (DoE) funded project.

    Reviewer/Contributor on two Technical Working Groups:
    * Cybersecurity Requirements & Standards Assessment
    * Cybersecurity Technology Testing & Validation

  • American National Standards Institute Graphic

    Advisor

    American National Standards Institute

    - 1 year

    Advised the International Standards Organization (ISO) – Better Business Bureau (BBB) Identity Theft Prevention and Identity Management Standards Panel (IDSP) Virtual Technical Advisory Group (TAG) for ISO Technical Management Board Task Force on Privacy.

Publications

  • Artificial Intelligence Governance Control Plane (AGCP) Specification v0.9.0.

    Sustainable Future Tech Publishing

    Initial release of the Artificial Intelligence Governance Control Plane (AGCP) specification and reference artifacts.

    AGCP proposes an architectural pattern for execution governance, ensuring that autonomous or AI-generated actions are mediated by a governance control plane before operational execution.

    Live repository: https://github.com/jwillisSFT/agcp-spec

    See publication
  • Response to the NIST CAISI RFI on Security Considerations for Artificial Intelligence Agents (NIST-2025-0035)

    National Institute of Standards and Technology (NIST)

    Technical response submitted to the NIST Center for AI Standards and Innovation Request for Information on security considerations for artificial intelligence agents. The paper discusses execution-layer governance risks in AI-enabled automation and proposes an architectural model combining the Practitioner’s Blueprint for Secure AI (PBSAI) with a deterministic execution mediation architecture referred to as the AI Governance Control Plane (AGCP).

    See publication
  • The PBSAI Governance Ecosystem: A Multi-Agent AI Reference Architecture for Securing Enterprise AI Estates

    arXiv

    Introduces the Practitioner’s Blueprint for Secure AI (PBSAI), a multi-agent reference architecture for securing enterprise and hyperscale AI estates. PBSAI defines a twelve-domain taxonomy and bounded agent families coordinated through shared context envelopes and structured output contracts. The architecture externalizes governance into deterministic control planes enforcing execution invariants, provenance, and human-in-the-loop guarantees. Demonstrates architectural alignment with NIST AI…

    Introduces the Practitioner’s Blueprint for Secure AI (PBSAI), a multi-agent reference architecture for securing enterprise and hyperscale AI estates. PBSAI defines a twelve-domain taxonomy and bounded agent families coordinated through shared context envelopes and structured output contracts. The architecture externalizes governance into deterministic control planes enforcing execution invariants, provenance, and human-in-the-loop guarantees. Demonstrates architectural alignment with NIST AI RMF and application in enterprise SOC and hyperscale defensive environments.

    See publication
  • Solving Cyber Hard Problems with Transparent Hybrid Quantum AI for Anomaly Detection

    Sustainable Future Tech Publishing

    This working paper introduces a comprehensive architectural framework that integrates the Quantum-Inspired Lifecycle Interpretability System (QILIS) and the Quantum-Powered Anomaly Detector (Q-PAD) to address six foundational Cyber Hard Problems identified by the National Academies. The proposed architecture leverages quantum-inspired interpretability and real-time anomaly detection to provide transparent, modular, and lifecycle-aligned AI security for hybrid classical-quantum systems. Q-PAD…

    This working paper introduces a comprehensive architectural framework that integrates the Quantum-Inspired Lifecycle Interpretability System (QILIS) and the Quantum-Powered Anomaly Detector (Q-PAD) to address six foundational Cyber Hard Problems identified by the National Academies. The proposed architecture leverages quantum-inspired interpretability and real-time anomaly detection to provide transparent, modular, and lifecycle-aligned AI security for hybrid classical-quantum systems. Q-PAD enhances detection accuracy and contextual awareness through hybrid classical-quantum analytics, while QILIS ensures end-to-end explainability and governance alignment across all AI lifecycle phases. The framework emphasizes composability, operator configurability, and relevance-driven decision support, establishing a forward-looking foundation for resilient, transparent, and adaptable AI systems in structured communication environments.

    See publication
  • Response to the 2025 National AI R&D Strategic Plan RFI (90 FR 17835)

    Sustainable Future Tech Inc

    Formal technical response to the U.S. Office of Science and Technology Policy Request for Information on the 2025 National AI Research and Development Strategic Plan. Proposed embedded interpretability, lifecycle risk telemetry, and decision-assurance architectures aligned with national AI infrastructure priorities.

    See publication
  • Strategic R&D Planning for Quantum and Hybrid AI: Navigating Industry Projections and Conservative Pathways (2025-2030)

    Sustainable Future Tech Publishing

    This report provides a comprehensive strategic framework for organizations preparing for the rapid evolution of quantum and hybrid quantum-classical computing between 2025 and 2030. It synthesizes current industry roadmaps, emerging hardware capabilities, and realistic engineering constraints to outline three actionable R&D pathways: a Conservative Estimate Plan, an Industry Projections-Based Plan, and a Milestone-Triggered Plan. By integrating technical projections with risk-governance…

    This report provides a comprehensive strategic framework for organizations preparing for the rapid evolution of quantum and hybrid quantum-classical computing between 2025 and 2030. It synthesizes current industry roadmaps, emerging hardware capabilities, and realistic engineering constraints to outline three actionable R&D pathways: a Conservative Estimate Plan, an Industry Projections-Based Plan, and a Milestone-Triggered Plan. By integrating technical projections with risk-governance principles, the report enables leaders in AI, HPC, and quantum technology to make informed, resilient investment decisions under uncertainty. The analysis highlights expected advancements in qubit fidelity, scalability, error correction, and hybrid AI integration, offering a balanced view of both optimistic and conservative developmental trajectories. This publication serves as a strategic guide for enterprises, research teams, and policymakers seeking to position themselves effectively for the coming quantum era.

    See publication
  • QIXAI: A Quantum-Inspired Framework for Enhancing Classical and Quantum Model Transparency and Understanding

    arXiv preprint

    Introduces QIXAI (Quantum-Inspired Explainable AI), a framework enhancing neural network interpretability using Hilbert space representations, eigenvalue decomposition, and information-theoretic analysis. Demonstrates structured lifecycle transparency beyond model-agnostic methods (SHAP, LIME, LRP) and applies to CNNs, transformers, RNNs, and generative systems across classical and hybrid architectures.

    See publication
  • DevSecOps Best Practices v.0.1

    Turnaround Security

    Early framework outlining integrated DevSecOps practices for secure software lifecycle management across regulated environments.

  • Enumerating software security design flaws throughout the SSDLC

    Presentation to 23rd International Computer Security Symposium and 8th SABSA World Congress, Naas, Ireland

    Presented methodology and proof-of-concept tool for enumerating security functional requirements and integrating risk-based decision frameworks into enterprise SSDLC processes.

    See publication
  • Extending the 20 Critical Security Controls to Assessments and Maturity Modeling

    ShmooCon Fire Talks

    Presentation on extending security control maturity models to operational assessments.

    See publication
Join now to see all publications

Patents

  • System and Method for Deterministic Governance of AI-Enabled Action Execution Using Commit-Time Validation and Canonical State Evaluation

    Filed APPLICATION No.: 64/012,694

    A system and method are provided for governing execution of actions in an artificial intelligence (AI)-enabled environment. One or more software agents generate action proposals, which are evaluated by a governance control plane prior to execution. The governance control plane applies deterministic validation logic to determine execution eligibility of each action proposal.

    In certain embodiments, evaluation is performed at an execution boundary using a representation of current system…

    A system and method are provided for governing execution of actions in an artificial intelligence (AI)-enabled environment. One or more software agents generate action proposals, which are evaluated by a governance control plane prior to execution. The governance control plane applies deterministic validation logic to determine execution eligibility of each action proposal.

    In certain embodiments, evaluation is performed at an execution boundary using a representation of current system conditions. The validation process may include applying one or more policy constraints to the action proposal and associated contextual information. Execution of the action proposal is permitted only upon satisfaction of the constraints, and is otherwise prevented.

    The system may further support structured action representations, contextual metadata association, and recording of evaluation outcomes to enable audit and replay. The approach separates generation of action proposals from enforcement of execution constraints, enabling controlled and consistent operation of AI-enabled systems across varying domains.

  • Provisional Patent: Governance Control Plane Architecture

    Filed APPLICATION No.: 63/995,297

    A deterministic governance control-plane architecture for managing execution of actions in automated systems. A governance envelope, bound to a tenant and action identifier, is processed through a strictly ordered, non-reorderable evaluation pipeline. Each evaluation stage produces immutable entries in an append-only ledger, assigned strictly increasing sequence values to enforce a per-action total ordering invariant. Lifecycle state is derived exclusively from the ordered ledger entries…

    A deterministic governance control-plane architecture for managing execution of actions in automated systems. A governance envelope, bound to a tenant and action identifier, is processed through a strictly ordered, non-reorderable evaluation pipeline. Each evaluation stage produces immutable entries in an append-only ledger, assigned strictly increasing sequence values to enforce a per-action total ordering invariant. Lifecycle state is derived exclusively from the ordered ledger entries, eliminating reliance on independently mutable status fields. Execution is authorized only when a valid authorization reference is present in the ledger and lifecycle state is re-derived immediately prior to execution. Configuration version identifiers may be recorded to support deterministic replay and lifecycle reconstruction.

  • Provisional Patent: Hybrid Classical-Quantum System for Tokenized Bitwise Conversation-level Anomaly Detection in Real-Time Communication Traffic (Q-PAD)

    Filed APPLICATION No. 63/984,730

    Traditional intrusion detection systems operate at the packet or flow level and rely solely on classical statistical or neural network models. Q-PAD introduces a novel architectural approach that models communication traffic at the bitwise conversation level — formally defining a conversation as the sequence of packets exchanged between endpoint pairs (IP address and port combinations).

    The system integrates classical sequential modeling with variational quantum circuits and a quantum…

    Traditional intrusion detection systems operate at the packet or flow level and rely solely on classical statistical or neural network models. Q-PAD introduces a novel architectural approach that models communication traffic at the bitwise conversation level — formally defining a conversation as the sequence of packets exchanged between endpoint pairs (IP address and port combinations).

    The system integrates classical sequential modeling with variational quantum circuits and a quantum recurrent state mechanism that evolves across packet sequences. By encoding structured protocol embeddings into entangled quantum states and fusing quantum measurement outputs with classical representations, Q-PAD models cross-field and cross-packet correlations that are not efficiently representable in comparably sized classical architectures.

    The invention contributes a full-stack, deployment-ready hybrid quantum–AI system, including deterministic threshold enforcement, distributed processing, and enterprise-compatible integration pathways. It represents a practical bridge between quantum computing theory and real-world secure infrastructure, advancing the field of hybrid quantum–classical AI for operational cybersecurity applications.

  • Provisional Patent: System and Methods for Lifecycle-wide Interpretability and Real-Time Execution Control in Classical, Quantum, and Hybrid Neural Networks

    Filed APPLICATION No. 63/984,705

    This invention introduces a runtime execution-control framework for neural networks that computes feature relevance during the same forward inference pass and dynamically modifies execution scheduling in real time.

    Unlike post-hoc explainability techniques, the system alters the computational graph during inference by suppressing low-relevance computation elements before downstream arithmetic operations are dispatched. This reduces unnecessary arithmetic operations, memory fetches, and…

    This invention introduces a runtime execution-control framework for neural networks that computes feature relevance during the same forward inference pass and dynamically modifies execution scheduling in real time.

    Unlike post-hoc explainability techniques, the system alters the computational graph during inference by suppressing low-relevance computation elements before downstream arithmetic operations are dispatched. This reduces unnecessary arithmetic operations, memory fetches, and processor energy consumption while preserving predictive performance.

    The architecture further enforces lifecycle stability by computing cross-phase relevance drift across foundational training, task-specific training, deployment, and post-deployment monitoring phases. A structured lifecycle state engine stores relevance and drift metrics and selectively authorizes parameter updates for unstable components.

    Optional embodiments include hardware-aware scheduling and hybrid classical–quantum execution coordination.

  • Provisional Patent: Multi-Domain Governance Architecture for Securing AI-Enabled Enterprise Estates

    Filed APPLICATION No. 63/980,281

    Introduces an ecosystem-level governance control plane that partitions enterprise AI environments into isolated operational domains with defined authority scopes and policy constraints.

    Governance is externalized from individual tools into a deterministic control layer that synchronizes execution invariants across domains. The architecture constrains state transitions through validation of authority scope, contextual integrity, and structured contract compliance prior to…

    Introduces an ecosystem-level governance control plane that partitions enterprise AI environments into isolated operational domains with defined authority scopes and policy constraints.

    Governance is externalized from individual tools into a deterministic control layer that synchronizes execution invariants across domains. The architecture constrains state transitions through validation of authority scope, contextual integrity, and structured contract compliance prior to action.

    Enables scalable, state-aware governance of distributed AI-enabled cybersecurity operations while preserving structural isolation and cross-domain integrity.

  • Provisional Patent: System and Method for Governing AI-Enabled Decision-Making Using Policy-Bounded Multi-Agent Execution

    Filed APPLICATION No. 63/979,762

    Describes a deterministic governance architecture for integrating probabilistic AI outputs into operational decision systems under explicit policy constraints.

    The invention defines a control-plane model that:

    • Externalizes policy enforcement from AI agents
    • Implements deterministic control gates around autonomous actions
    • Establishes structured execution context and authorization validation
    • Governs transitions between automated reasoning and human oversight
    •…

    Describes a deterministic governance architecture for integrating probabilistic AI outputs into operational decision systems under explicit policy constraints.

    The invention defines a control-plane model that:

    • Externalizes policy enforcement from AI agents
    • Implements deterministic control gates around autonomous actions
    • Establishes structured execution context and authorization validation
    • Governs transitions between automated reasoning and human oversight
    • Preserves traceability, reproducibility, and bounded execution

    Designed to ensure that AI-enabled systems remain policy-bound and operationally coherent in enterprise, regulated, and safety-critical environments.

  • Application Security Architecture and Design Modeling, Security Functional Requirements Generation, and Reporting Tool

    U.S. Provisional Pat. Ser. No. 62534704, filed July 20, 2017

    Automated system for security functional requirements generation and structured risk modeling within enterprise SSDLC processes.

    Presented at International Computer Security Symposium and SABSA World Congress (2016).

Honors & Awards

  • Director’s Impact Award

    United States Secret Service

    Director’s Impact Award in special recognition of efforts and contributions which significantly impacted business practices.

  • CIO Award for Exceptional Technical Performance & Organizational Support

    United States Secret Service

    Chief Information Officer (CIO) award in recognition of exceptional technical performance and CIO organizational support.

Recommendations received

View John M.’s full profile

  • See who you know in common
  • Get introduced
  • Contact John M. directly
Join to view full profile

Other similar profiles

Explore top content on LinkedIn

Find curated posts and insights for relevant topics all in one place.

View top content

Add new skills with these courses