SmarterArticles

Keeping the Human in the Loop

The stablecoin transaction that moved $2 billion from Abu Dhabi to Binance in May 2025 looked nothing like what the cypherpunks imagined when they dreamed of digital money. There were no anonymous wallets, no cryptographic rituals, no ideological manifestos. MGX, a sovereign wealth vehicle backed by the United Arab Emirates, simply wired funds denominated in USD1, a stablecoin issued by World Liberty Financial, a company affiliated with the family of the sitting United States President. The transaction settled on blockchain rails that neither party needed to understand or even acknowledge. The technology had become invisible. The revolution had been absorbed.

This moment crystallises the central tension now confronting the cryptocurrency industry as it enters what many are calling its institutional era. Stablecoins processed over $46 trillion in transactions during 2025, rivalling Visa and PayPal in volume. BlackRock's Bitcoin ETF surpassed $100 billion in assets under management, accumulating over 800,000 BTC in less than two years. The GENIUS Act became the first major cryptocurrency legislation passed by Congress, establishing federal standards for stablecoin issuers. Tokenised real-world assets reached $33 billion, with projections suggesting the market could hit $16 trillion by 2030. By every conventional measure, cryptocurrency has succeeded beyond its founders' wildest projections.

Yet success has arrived through a mechanism that would have horrified many of those founders. Crypto went mainstream by becoming invisible, as the a16z State of Crypto 2025 report observed. The technology that was supposed to disintermediate banks now powers their backend operations. The protocol designed to resist surveillance now integrates with anti-money laundering systems. The culture that celebrated pseudonymity now onboards users through email addresses and social logins. The question is whether this represents maturation or betrayal, evolution or erasure.

The Infrastructure Thesis Ascendant

The economic evidence for the invisibility approach has become overwhelming. Stripe's $1.1 billion acquisition of Bridge in February 2025 represented the payments industry's first major acknowledgement that stablecoins could serve as mainstream infrastructure rather than speculative instruments. Within three months, Stripe launched Stablecoin Financial Accounts across 101 countries, enabling businesses to hold balances in USDC and USDB while transacting seamlessly across fiat and crypto rails. The blockchain was there, handling settlement. The users never needed to know.

This pattern has repeated across traditional finance. Visa partnered with Bridge to launch card-issuing products that let cardholders spend their stablecoin balances at any merchant accepting Visa, with automatic conversion to fiat happening invisibly in the background. Klarna announced plans to issue its own stablecoin through Bridge, aiming to reduce cross-border payment costs that currently total roughly $120 billion annually. The fintech giant would become the first bank to tap Stripe's stablecoin stack for blockchain-powered payments, without requiring its customers to understand or interact with blockchain technology directly.

BlackRock has been equally explicit about treating cryptocurrency as infrastructure rather than product. Larry Fink, the firm's chief executive, declared following the Bitcoin ETF approval that “every stock and bond would eventually live on a shared digital ledger.” The company's BUIDL fund, launched on Ethereum in March 2024, has grown to manage over $2 billion in tokenised treasury assets. BlackRock has announced plans to tokenise up to $10 trillion in assets, expanding across multiple blockchain networks including Arbitrum and Polygon. For institutional investors accessing these products, the blockchain is simply plumbing, no more visible or culturally significant than the TCP/IP protocols underlying their email.

The speed of this integration has astonished even bullish observers. Bitcoin and Ethereum spot ETFs accumulated $31 billion in net inflows while processing approximately $880 billion in trading volume during 2025. An estimated 716 million people now own digital assets globally, a 16 percent increase from the previous year. More than one percent of all US dollars now exist as stablecoins on public blockchains. The numbers describe a technology that has crossed from interesting experiment to systemic relevance.

The regulatory environment has reinforced this trajectory. The GENIUS Act, signed into law in July 2025, establishes stablecoin issuers as regulated financial entities subject to the Bank Secrecy Act, with mandatory anti-money laundering programmes, sanctions compliance, and customer identification requirements. Payment stablecoins issued under the framework are explicitly not securities or commodities, freeing them from SEC and CFTC oversight while embedding them within the traditional banking regulatory apparatus. The Act requires permitted issuers to maintain one-to-one reserves in US currency or similarly liquid assets and to publish monthly disclosure of reserve details. This is not the regulatory vacuum that early cryptocurrency advocates hoped would allow decentralised alternatives to flourish. It is integration, absorption, normalisation.

The Cultural Counter-Argument

Against this backdrop of institutional triumph, a parallel ecosystem continues to thrive on explicitly crypto-native principles. Pump.fun, the Solana memecoin launchpad, has facilitated the creation of over 13 million tokens since January 2024, generating more than $866 million in lifetime revenue by October 2025. At its peak, the platform accounted for nearly 90 percent of all token mints on Solana and over 80 percent of launchpad trading volume. Its July 2025 ICO raised $1.3 billion in combined private and public sales, with the $PUMP presale hauling in $500 million in minutes at a fully diluted valuation of approximately $4 billion.

This is not infrastructure seeking invisibility. This is spectacle, culture, community, identity. The meme coin total market capitalisation exceeded $78 billion in 2025, with projects like Fartcoin briefly reaching $2.5 billion in valuation. These assets have no intrinsic utility beyond their function as coordination mechanisms for communities united by shared jokes, aesthetics, and speculative conviction. They are pure culture, and their continued prominence suggests that crypto's cultural layer retains genuine economic significance even as institutional rails proliferate.

The mechanics of attention monetisation have evolved dramatically. In January 2025, a single social media post about the $TRUMP token, launched through a one-click interface on Solana, generated hundreds of millions in trading volume within hours. This represented something genuinely new: the near-instantaneous conversion of social attention into financial activity. The friction that once separated awareness from action has been reduced to a single tap.

Re7 Capital, a venture firm that has invested in Suno and other infrastructure projects, launched a $10 million SocialFi fund in 2025 specifically targeting this intersection of social platforms and blockchain participation. As Luc de Leyritz, the firm's general partner, explained: “For the first time in five years, we see a structural opportunity in early-stage crypto venture, driven by the convergence of attention, composability and capital flows in SocialFi.” The thesis is that platforms enabling rapid conversion of social attention into financial activity represent the next major adoption vector, one that preserves rather than erases crypto's cultural distinctiveness.

Farcaster exemplifies this approach. The decentralised social protocol, backed by $150 million from Paradigm and a16z, has grown to over 546,000 registered users with approximately 40,000 to 60,000 daily active users. Its defining innovation, Farcaster Frames, enables users to mint NFTs, execute trades, and claim tokens directly within social posts without leaving the application. This is not crypto becoming invisible; this is crypto becoming the medium of social interaction itself. The blockchain is not hidden infrastructure but visible identity, with on-chain activities serving as signals of community membership and cultural affiliation.

The tension between these approaches has become central to debates about crypto's future direction. Vitalik Buterin, Ethereum's co-founder, addressed this directly in a New Year's message urging the community to focus on building applications that are “truly decentralised and usable” rather than “winning the next meta.” He outlined practical tests for decentralisation: Can users keep their assets if the company behind an application disappears? How much damage can rogue insiders or compromised front-ends cause? How many lines of code must be trusted to protect users' funds?

These questions expose the gap between infrastructure and culture approaches. Invisible blockchain rails, by definition, rely on intermediaries that users must trust. When Stripe converts stablecoin balances to fiat for Visa transactions, when BlackRock custodies Bitcoin on behalf of ETF holders, when Klarna issues blockchain-powered payments, the technology may be decentralised but the user experience is not. The cypherpunk vision of individuals controlling their own keys, verifying their own transactions, and resisting surveillance has been traded for convenience and scale.

The Cypherpunk Inheritance

To understand what is at stake requires revisiting cryptocurrency's ideological origins. Bitcoin was not born in a vacuum; it emerged from decades of cypherpunk research, debate, and experimentation. The movement's core creed was simple: do not ask permission, build the system. Do not lobby politicians for privacy laws; create technologies that make surveillance impossible. Every point of centralisation was understood as a point of weakness, a chokepoint where power could be exercised by states or corporations against individuals.

Satoshi Nakamoto's 2008 whitepaper directly reflected these principles. By combining cryptography, decentralised consensus, and economic incentives, Bitcoin solved the double-spending problem without requiring a central authority. The vision was censorship-resistant money that allowed individuals to transact privately and securely without permission from governments or corporations. Self-custody was not merely an option but the point. The option to be your own bank, to verify rather than trust, remained open to anyone willing to exercise it.

The cypherpunks were deeply suspicious of any centralised authority, whether government agency or large bank. They saw the fight for freedom in the digital age as a technical problem, not merely a political one. Privacy, decentralisation, self-sovereignty, transparency through open-source code: these were not just preferences but foundational principles. Any compromise on these fronts represented potential capture by the very systems they sought to escape.

The success and commercialisation of Bitcoin has fractured this inheritance. Some argue that compliance with Know Your Customer requirements, integration with regulated exchanges, and accommodation of institutional custody represents necessary compromise to bring cryptocurrency to the masses and achieve mainstream legitimacy. Without these accommodations, Bitcoin would remain a niche asset forever locked out of the global financial system.

For the purist camp, this represents betrayal. Building on-ramps that require identity verification creates a surveillance network around technology designed to be pseudonymous. It links real-world identity to on-chain transactions, destroying privacy. The crypto space itself struggles with centralisation through major exchanges, custodial wallets, and regulatory requirements that conflict with the original vision.

By 2025, Bitcoin's price exceeded $120,000, driven substantially by institutional adoption through ETFs and a maturing investor base. BlackRock's IBIT has accumulated holdings representing 3.8 percent of Bitcoin's total 21 million supply. This is not the distributed ownership pattern the cypherpunks envisioned. Power has concentrated in new hands, different from but not obviously preferable to the financial institutions cryptocurrency was designed to circumvent.

Decentralised Social and the Identity Layer

If invisible infrastructure represents one future and pure speculation another, decentralised social platforms represent an attempt at synthesis. Lens Protocol, launched by the team behind the DeFi lending platform Aave, provides a social graph enabling developers to build applications with composable, user-owned content. Running on Polygon, Lens offers creators direct monetisation through subscriptions, fees from followers, and the ability to turn posts into tradable NFTs. Top users on the protocol average $1,300 monthly in creator earnings, demonstrating that blockchain participation can generate real economic value beyond speculation.

The proposition is that social identity becomes inseparable from on-chain identity. Your follower graph, your content, your reputation travel with you across applications built on the same underlying protocol. When you switch from one Lens-based application to another, you bring your audience and history. No platform can deplatform you because no platform owns your identity. This is decentralisation as lived experience rather than backend abstraction.

Farcaster offers a complementary model focused on protocol-level innovation. Three smart contracts on OP Mainnet handle security-critical functions: IdRegistry maps Farcaster IDs to Ethereum custody addresses, StorageRegistry tracks storage allocations, and KeyRegistry manages application permissions. The infrastructure is explicitly on-chain, but the user experience has been refined to approach consumer-grade accessibility. Account abstraction and social logins mean new users can start with just an email address, reducing time to first transaction from twenty minutes to under sixty seconds.

The platform's technical architecture reflects deliberate choices about where blockchain visibility matters. Storage costs approximately seven dollars per year for 5,000 posts plus reactions and follows, low enough to be accessible but high enough to discourage spam. The identity layer remains explicitly on-chain, ensuring that users maintain control over their credentials even as the application layer becomes increasingly polished.

The engagement metrics suggest these approaches resonate with users who value explicit blockchain participation. Farcaster's engagement rate of 29 interactions per user monthly compares favourably to Lens's 12, indicating higher-quality community even with smaller absolute numbers. The platform recently achieved a milestone of 100,000 funded wallets, driven partly by USDC deposit matching rewards that incentivise users to connect their financial identity to their social presence.

Yet the scale gap with mainstream platforms remains vast. Bluesky's 38 million users dwarf Farcaster's half million. Twitter's daily active users number in the hundreds of millions. For crypto-native social platforms to represent a meaningful alternative rather than a niche experiment, they must grow by orders of magnitude while preserving the properties that differentiate them. The question is whether those properties are features or bugs in the context of mainstream adoption.

The Stablecoin Standardisation

Stablecoins offer the clearest lens on how the invisibility thesis is playing out in practice. The market has concentrated heavily around two issuers: Tether's USDT holds approximately 60 percent market share with a capitalisation exceeding $183 billion, while Circle's USDC holds roughly 25 percent at $73 billion. Together, these two tokens account for over 80 percent of total stablecoin market capitalisation, though that share has declined slightly as competition intensifies.

Tether dominates trading volume, accounting for over 75 percent of stablecoin activity on centralised exchanges. It remains the primary trading pair in emerging markets and maintains higher velocity on exchanges. But USDC has grown faster in 2025, with its market cap climbing 72 percent compared to USDT's 32 percent growth. Analysts attribute this to USDC's better positioning for regulated markets, particularly after USDT faced delistings in Europe due to lack of MiCA authorisation.

Circle's billion-dollar IPO marked the arrival of stablecoin issuers as mainstream financial institutions. The company's aggressive expansion into regulated markets positions USDC as the stablecoin of choice for banks, payment processors, and fintech platforms seeking compliance clarity. This is crypto becoming infrastructure in the most literal sense: a layer enabling transactions that end users never need to understand or acknowledge.

The overall stablecoin supply hit $314 billion in 2025, with the category now comprising 30 percent of all on-chain crypto transaction volume. August 2025 recorded the highest annual volume to date, reaching over $4 trillion for the year, an 83 percent increase on the same period in 2024. Tether alone saw $10 billion in profit in the first three quarters of the year. These are not metrics of a speculative sideshow but of core financial infrastructure.

The emergence of USD1, the stablecoin issued by World Liberty Financial with Trump family involvement, demonstrates how completely stablecoins have departed from crypto's countercultural origins. The token reached $3 billion in circulating supply within six months of launch, integrated with major exchanges including Binance and Tron. Its largest transaction to date, the $2 billion MGX investment in Binance, involved sovereign wealth funds, presidential family businesses, and what senators have alleged are suspicious ties to sanctioned entities. This is not disruption of financial power structures; it is their reconfiguration under blockchain labels.

The GENIUS Act's passage has accelerated this normalisation. By establishing clear regulatory frameworks, the legislation removes uncertainty that previously discouraged traditional financial institutions from engaging with stablecoins. But it also embeds stablecoins within the surveillance and compliance infrastructure that cryptocurrency was originally designed to escape. Issuers must implement anti-money laundering programmes, verify sanctions lists, and identify customers. The anonymous, permissionless transactions that defined early Bitcoin are not merely discouraged but legally prohibited for regulated stablecoin issuers.

The Tokenisation Transformation

Real-world asset tokenisation extends the invisibility thesis from currency into securities. BlackRock's BUIDL fund demonstrated that tokenised treasury assets could attract institutional capital at scale. By year-end 2025, the tokenised RWA market had grown to approximately $33 billion, with the majority concentrated in private credit and US Treasuries representing nearly 90 percent of tokenised value. The market has grown fivefold in two years, crossing from interesting experiment to systemic relevance.

The projections are staggering. A BCG-Ripple report forecasts the tokenised asset market growing from $0.6 trillion to $18.9 trillion by 2033. Animoca Brands research suggests tokenisation could eventually tap into the $400 trillion traditional finance market. Franklin Templeton, Fidelity, and other major asset managers have moved beyond pilots into production-level tokenisation of treasury products.

For institutional investors, the value proposition is efficiency: faster settlement, lower costs, continuous trading availability, fractional ownership. None of these benefits require understanding or caring about blockchain technology. The distributed ledger is simply superior infrastructure for recording ownership and executing transfers. It replaces databases, not ideologies.

This creates an interesting inversion of the original cryptocurrency value proposition. Bitcoin promised to separate money from state control. Tokenisation of real-world assets brings state-sanctioned securities onto blockchain rails, with all their existing regulatory requirements, reporting obligations, and institutional oversight intact. The technology serves traditional finance rather than replacing it.

Major financial institutions including JPMorgan, Goldman Sachs, and BNY Mellon are actively engaging in real-world asset tokenisation. Banks treat blockchain not as novelty but as infrastructure, part of the normal toolkit for financial services. Fintech companies supply connective logic between traditional systems and decentralised networks. Stablecoins, once regarded as a temporary bridge, now operate as permanent fixtures of the financial order.

The Dual Economy

What emerges from this analysis is not a single trajectory but a bifurcation. Two distinct crypto economies now operate in parallel, occasionally intersecting but fundamentally different in their relationship to culture, identity, and visibility.

The institutional economy treats blockchain as infrastructure. Its participants include BlackRock, Fidelity, Stripe, Visa, JPMorgan, and the growing ecosystem of regulated stablecoin issuers and tokenisation platforms. Value accrues through efficiency gains, cost reductions, and access to previously illiquid assets. Users of these products may never know they are interacting with blockchain technology. The culture is that of traditional finance: compliance-focused, institution-mediated, invisible.

The crypto-native economy treats blockchain as culture. Its participants include memecoin traders, decentralised social network users, DeFi power users, and communities organised around specific protocols and tokens. Value accrues through attention, community formation, and speculative conviction. Users of these products explicitly identify with blockchain participation, often displaying on-chain activity as markers of identity and affiliation. The culture is distinctively countercultural: permissionless, community-driven, visible.

DeFi total value locked surged 41 percent in Q3 2025, surpassing $160 billion for the first time since May 2022. Ethereum led growth with TVL jumping from $54 billion in July to $96.5 billion by September. Aave became the largest DeFi lending protocol with over $41 billion in TVL, growing nearly 58 percent since July. Lido ranked second with nearly $39 billion in liquid staking deposits. These are substantial numbers, demonstrating that crypto-native applications retain significant capital commitment even as institutional alternatives proliferate.

The question is whether these economies can coexist indefinitely or whether one will eventually absorb the other. The institutional thesis holds that crypto-native culture is a transitional phenomenon, the early-adopter enthusiasm that accompanies any new technology before it matures into invisible utility. By this view, memecoin speculation and decentralised social experiments are the equivalent of early internet flame wars and personal homepage culture: interesting historical artefacts that give way to professionally operated services as the technology scales.

The counter-thesis holds that crypto-native culture provides irreplaceable competitive advantages. Community formation around tokens creates user loyalty that traditional products cannot match. On-chain identity enables new forms of coordination, reputation, and governance. The transparency of blockchain operations enables trustlessness that opaque corporate structures cannot replicate. By this view, invisible infrastructure misses the point entirely, stripping away the properties that make cryptocurrency distinctive and valuable.

Evaluating Maturation

The debate ultimately hinges on what one considers maturation. If maturation means achieving mainstream adoption, measurable in transaction volumes, market capitalisation, and institutional participation, then the invisibility approach has clearly succeeded. Stablecoins rival Visa in volume. Bitcoin ETFs hold hundreds of billions in assets. Regulated tokenisation platforms are processing institutional-scale transactions. By these metrics, cryptocurrency has grown up.

But maturation can also mean the development of distinctive capabilities rather than assimilation into existing paradigms. By this measure, invisibility represents not maturation but abandonment. The technology that was supposed to disrupt financial intermediation has instead been adopted by intermediaries. The protocol designed to resist censorship integrates with surveillance systems. The culture celebrating individual sovereignty has been absorbed into institutional custody arrangements.

Vitalik Buterin's tests for decentralisation offer a framework for evaluating these competing claims. The walk-away test asks whether users keep their assets if the company behind an application disappears. For BlackRock ETF holders, the answer is clearly no; they hold shares in a fund that custodies assets on their behalf. For self-custody Bitcoin holders, the answer is yes by design. The insider attack test asks how much damage rogue insiders or compromised front-ends can cause. Invisible infrastructure necessarily involves more trusted intermediaries and therefore more potential attack surfaces.

The trusted computing base question asks how many lines of code must be trusted to protect users. Institutional products layer complexity upon complexity: custody arrangements, trading interfaces, fund structures, regulatory compliance systems. Each layer requires trust. The original Bitcoin thesis was that you needed to trust only the protocol itself, verifiable through open-source code and distributed consensus.

Yet crypto-native applications are not immune from these concerns. DeFi protocols have suffered billions in losses through exploits, rug pulls, and governance attacks. Memecoin platforms like Pump.fun face class-action lawsuits alleging manipulation. Decentralised social networks struggle with spam, harassment, and content moderation challenges that their permissionless architecture makes difficult to address. The choice is not between trustless perfection and trusted compromise but between different configurations of trust, risk, and capability.

The Cultural Residue

Perhaps the most honest assessment is that crypto culture will persist as aesthetic residue even as the technology becomes invisible infrastructure. Early-adopter communities will continue to celebrate on-chain participation as identity markers, much as vintage computing enthusiasts celebrate command-line interfaces in an era of graphical operating systems. The technical capability for self-custody and trustless verification will remain available to those who value it, even as the overwhelming majority of users interact through intermediated products that abstract away complexity.

This is not necessarily a tragedy. Other technologies have followed similar trajectories. The internet began as a countercultural space where early adopters celebrated decentralisation and resisted commercialisation. Today, most users access the internet through devices and services controlled by a handful of corporations, but the underlying protocols remain open and the option for direct participation persists for those motivated to exercise it.

The question is whether this residual option matters. If only a tiny fraction of users ever exercise self-custody or participate in decentralised governance, does the theoretical availability of these options provide meaningful protection against centralised control? Or does the concentration of practical usage in institutional channels create the same capture risks that cryptocurrency was designed to prevent?

The $2 billion stablecoin transaction from MGX to Binance suggests an answer that satisfies neither purists nor institutionalists. The technology worked exactly as designed: value transferred across borders instantly and irrevocably, settled on a distributed ledger that neither party needed to understand. But the participants were sovereign wealth funds and exchange conglomerates, the transaction enabled by presidential family connections, and the regulatory framework that of traditional anti-money laundering compliance. This is not what the cypherpunks imagined, but it is what cryptocurrency has become.

Whether that represents maturation or abandonment depends entirely on what one hoped cryptocurrency would achieve. If the goal was efficient global payments infrastructure, the invisible approach has delivered. If the goal was liberation from institutional financial control, the invisible approach has failed precisely by succeeding. The technology escaped the sandbox of speculation and entered the real world, but the real world captured it in return.

The builders who will succeed in this environment are likely those who understand both economies and can navigate between them. Stripe's acquisition of Bridge demonstrates that institutional players recognise the value of crypto infrastructure even when stripped of cultural signifiers. Pump.fun's billion-dollar raise demonstrates that crypto-native culture retains genuine economic value even when disconnected from institutional approval. The most durable projects may be those that maintain optionality: invisible enough to achieve mainstream adoption, crypto-native enough to retain community loyalty, flexible enough to serve users with radically different relationships to the underlying technology.

The original vision has not been abandoned so much as refracted. It persists in self-custody options that most users ignore, in decentralised protocols that institutions build upon, in cultural communities that thrive in parallel with institutional rails. Cryptocurrency did not mature into a single thing. It matured into multiple things simultaneously, serving different purposes for different participants, with different relationships to the values that animated its creation.

Whether the cultural layer remains competitive advantage or becomes mere nostalgia will be determined not by technology but by the choices users make about what they value. If convenience consistently trumps sovereignty, the invisible approach will dominate and crypto culture will become historical curiosity. If enough users continue to prioritise decentralisation, self-custody, and explicit blockchain participation, the cultural layer will persist as more than aesthetic. The technology enables both futures. The question is which one we will choose.


References and Sources

  1. a16z crypto. “State of Crypto 2025: The year crypto went mainstream.” October 2025. https://a16zcrypto.com/posts/article/state-of-crypto-report-2025/

  2. Re7 Capital. “The Future of Crypto is Social.” https://re7.capital/blog/the-future-of-crypto-is-social/

  3. The Block. “Re7 Capital bets on SocialFi with a $10 million fund targeting around 30 startups.” 2025. https://www.theblock.co/post/352562/re7-capital-socialfi-fund-crypto

  4. CNBC. “Stripe closes $1.1 billion Bridge deal, prepares for aggressive stablecoin push.” February 2025. https://www.cnbc.com/2025/02/04/stripe-closes-1point1-billion-bridge-deal-prepares-for-stablecoin-push-.html

  5. Stripe Newsroom. “Introducing Stablecoin Financial Accounts in 101 countries.” 2025. https://stripe.com/blog/introducing-stablecoin-financial-accounts

  6. The White House. “Fact Sheet: President Donald J. Trump Signs GENIUS Act into Law.” July 2025. https://www.whitehouse.gov/fact-sheets/2025/07/fact-sheet-president-donald-j-trump-signs-genius-act-into-law/

  7. Morgan Lewis. “GENIUS Act Passes in US Congress: A Breakdown of the Landmark Stablecoin Law.” July 2025. https://www.morganlewis.com/pubs/2025/07/genius-act-passes-in-us-congress-a-breakdown-of-the-landmark-stablecoin-law

  8. Business Wire. “World Liberty Financial's Stablecoin $USD1 Crosses $3 Billion in Market Capitalization.” December 2025. https://www.businesswire.com/news/home/20251225249806/en/World-Liberty-Financials-Stablecoin-USD1-Crosses-3-Billion-in-Market-Capitalization

  9. CNBC. “Trump's World Liberty Financial jumps into stablecoin game with USD1 reveal.” March 2025. https://www.cnbc.com/2025/03/25/trumps-world-liberty-financial-jumps-into-stablecoin-game-with-usd1-reveal.html

  10. The Block. “BlackRock's bitcoin ETF surpasses 800,000 BTC in assets under management after $4 billion inflow streak.” 2025. https://www.theblock.co/post/373966/blackrock-bitcoin-etf-ibit-800000-btc-aum

  11. CoinDesk. “RWA Tokenization Is Going to Trillions Much Faster Than You Think.” February 2025. https://www.coindesk.com/opinion/2025/02/07/rwa-tokenization-is-going-to-trillions-much-faster-than-you-think

  12. The Block. “Pump.fun surpasses $800 million in lifetime revenue as Solana memecoin launchpad competition heats up.” 2025. https://www.theblock.co/post/367585/pump-fun-surpasses-800-million-in-lifetime-revenue-as-solana-memecoin-launchpad-competition-heats-up

  13. CoinDesk. “Vitalik Buterin: Ethereum at Risk If Decentralization Is Just a Catchphrase.” July 2025. https://www.coindesk.com/tech/2025/07/02/vitalik-buterin-ethereum-at-risk-if-decentralization-is-just-a-catchphrase

  14. CryptoSlate. “10 stories that rewired digital finance in 2025 – the year crypto became infrastructure.” 2025. https://cryptoslate.com/10-stories-that-rewired-digital-finance-in-2025-the-year-crypto-became-infrastructure/

  15. BlockEden. “Farcaster in 2025: The Protocol Paradox.” October 2025. https://blockeden.xyz/blog/2025/10/28/farcaster-in-2025-the-protocol-paradox/

  16. Crystal Intelligence. “USDT vs USDC Q3 2025: Market Share & Dominance Analysis.” 2025. https://crystalintelligence.com/thought-leadership/usdt-maintains-dominance-while-usdc-faces-headwinds/

  17. CoinDesk. “Tether and Circle's Dominance Is Being Put to the Test.” October 2025. https://www.coindesk.com/opinion/2025/10/11/tether-and-circle-s-dominance-is-being-put-to-the-test

  18. The Defiant. “DeFi TVL Surges 41% in Q3 to Three-Year High.” 2025. https://thedefiant.io/news/defi/defi-tvl-surges-41-in-q3-to-three-year-high

  19. PYMNTS. “Making Sense of Meme Coins, Digital Assets and Crypto's Future.” 2025. https://www.pymnts.com/cryptocurrency/2025/making-sense-meme-coins-digital-assets-crypto-future/

  20. D-Central. “Bitcoin and the Cypherpunks – A Journey Towards Decentralisation and Privacy.” https://d-central.tech/bitcoin-and-the-cypherpunks/

  21. World Economic Forum. “How will the GENIUS Act work in the US and impact the world?” July 2025. https://www.weforum.org/stories/2025/07/stablecoin-regulation-genius-act/

  22. Andreessen Horowitz. “What Stripe's Acquisition of Bridge Means for Fintech and Stablecoins.” April 2025. https://a16z.com/newsletter/what-stripes-acquisition-of-bridge-means-for-fintech-and-stablecoins-april-2025-fintech-newsletter/


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

In November 2025, Grammy-winning artist Victoria Monet sat for an interview with Vanity Fair and confronted something unprecedented in her fifteen-year career. Not a rival artist. Not a legal dispute over songwriting credits. Instead, she faced an algorithmic apparition: an AI-generated persona called Xania Monet, whose name, appearance, and vocal style bore an uncanny resemblance to her own. “It's hard to comprehend that, within a prompt, my name was not used for this artist to capitalise on,” Monet told the magazine. “I don't support that. I don't think that's fair.”

The emergence of Xania Monet, who secured a $3 million deal with Hallwood Media and became the first AI artist to debut on a Billboard radio chart, represents far more than a curiosity of technological progress. It exposes fundamental inadequacies in how intellectual property law conceives of artistic identity, and it reveals the emergence of business models specifically designed to exploit zones of legal ambiguity around voice, style, and likeness. The question is no longer whether AI can approximate human creativity. The question is what happens when that approximation becomes indistinguishable enough to extract commercial value from an artist's foundational assets while maintaining plausible deniability about having done so.

The controversy arrives at a moment when the music industry is already grappling with existential questions about AI. Major record labels have filed landmark lawsuits against AI music platforms. European courts have issued rulings that challenge the foundations of how AI companies operate. Congress is debating legislation that would create the first federal right of publicity in American history. And streaming platforms face mounting evidence that AI-generated content is flooding their catalogues, diluting the royalty pool that sustains human artists. Xania Monet sits at the intersection of all these forces, a test case for whether our existing frameworks can protect artistic identity in an age of sophisticated machine learning.

The Anatomy of Approximation

Victoria Monet's concern centres on something that existing copyright law struggles to address: the space between direct copying and inspired derivation. Copyright protects specific expressions of ideas, not the ideas themselves. It cannot protect a vocal timbre, a stylistic approach to melody, or the ineffable quality that makes an artist recognisable across their catalogue. You can copyright a particular song, but you cannot copyright the essence of how Victoria Monet sounds.

This legal gap has always existed, but it mattered less when imitation required human effort and inevitably produced human variation. A singer influenced by Monet would naturally develop their own interpretations, their own quirks, their own identity over time. But generative AI systems can analyse thousands of hours of an artist's work and produce outputs that capture stylistic fingerprints with unprecedented fidelity. The approximation can be close enough to trigger audience recognition without being close enough to constitute legal infringement.

The technical process behind this approximation involves training neural networks on vast corpora of existing music. These systems learn to recognise patterns across multiple dimensions simultaneously: harmonic progressions, rhythmic structures, timbral characteristics, production techniques, and vocal stylings. The resulting model does not store copies of the training data in any conventional sense. Instead, it encodes statistical relationships that allow it to generate new outputs exhibiting similar characteristics. This architecture creates a genuine conceptual challenge for intellectual property frameworks designed around the notion of copying specific works.

Xania Monet exemplifies this phenomenon. The vocals and instrumental music released under her name are created using Suno, the AI music generation platform. The lyrics come from Mississippi poet and designer Telisha Jones, who serves as the creative force behind the virtual persona. But the sonic character, the R&B vocal stylings, the melodic sensibilities that drew comparisons to Victoria Monet, emerge from an AI system trained on vast quantities of existing music. In an interview with Gayle King, Jones defended her creative role, describing Xania Monet as “an extension of myself” and framing AI as simply “a tool, an instrument” to be utilised.

Victoria Monet described a telling experiment: a friend typed the prompt “Victoria Monet making tacos” into ChatGPT's image generator, and the system produced visuals that looked uncannily similar to Xania Monet's promotional imagery. Whether this reflects direct training on Victoria Monet's work or the emergence of stylistic patterns from broader R&B training data, the practical effect remains the same. An artist's distinctive identity becomes raw material for generating commercial competitors.

The precedent for this kind of AI-mediated imitation emerged dramatically in April 2023, when a song called “Heart on My Sleeve” appeared on streaming platforms. Created by an anonymous producer using the pseudonym Ghostwriter977, the track featured AI-generated vocals designed to sound like Drake and the Weeknd. Neither artist had any involvement in its creation. Universal Music Group quickly filed takedown notices citing copyright violation, but the song had already gone viral, demonstrating how convincingly AI could approximate celebrity vocal identities. Ghostwriter later revealed that the actual composition was entirely human-created, with only the vocal filters being AI-generated. The Recording Academy initially considered the track for Grammy eligibility before determining that the AI voice modelling made it ineligible.

The Training Data Black Box

At the heart of these concerns lies a fundamental opacity: the companies building generative AI systems have largely refused to disclose what training data their models consumed. This deliberate obscurity creates a structural advantage. When provenance cannot be verified, liability becomes nearly impossible to establish. When the creative lineage of an AI output remains hidden, artists cannot prove that their work contributed to the system producing outputs that compete with them.

The major record labels, Universal Music Group, Sony Music Entertainment, and Warner Music Group, recognised this threat early. In June 2024, they filed landmark lawsuits against Suno and Udio, the two leading AI music generation platforms, accusing them of “willful copyright infringement at an almost unimaginable scale.” The Recording Industry Association of America alleged that Udio's system had produced outputs with striking similarities to specific protected recordings, including songs by Michael Jackson, the Beach Boys, ABBA, and Mariah Carey. The lawsuits sought damages of up to $150,000 per infringed recording, potentially amounting to hundreds of millions of dollars.

Suno's defence hinged on a revealing argument. CEO Mikey Shulman acknowledged that the company trains on copyrighted music, stating, “We train our models on medium- and high-quality music we can find on the open internet. Much of the open internet indeed contains copyrighted materials.” But he argued this constitutes fair use, comparing it to “a kid writing their own rock songs after listening to the genre.” In subsequent legal filings, Suno claimed that none of the millions of tracks generated on its platform “contain anything like a sample” of existing recordings.

This argument attempts to draw a bright line between the training process and the outputs it produces. Even if the model learned from copyrighted works, Suno contends, the music it generates represents entirely new creations. The analogy to human learning, however, obscures a crucial difference: when humans learn from existing music, they cannot perfectly replicate the statistical patterns of that music's acoustic characteristics. AI systems can. And the scale differs by orders of magnitude. A human musician might absorb influences from hundreds or thousands of songs over a lifetime. An AI system can process millions of tracks and encode their patterns with mathematical precision.

The United States Copyright Office weighed in on this debate with a 108-page report published in May 2025, concluding that using copyrighted materials to train AI models may constitute prima facie infringement and warning that transformative arguments are not inherently valid. Where AI-generated outputs demonstrate substantial similarity to training data inputs, the report suggested, the model weights themselves may infringe reproduction and derivative work rights. The report also noted that the transformative use doctrine was never intended to permit wholesale appropriation of creative works for commercial AI development.

Separately, the Copyright Office had addressed the question of AI authorship. In a January 2025 decision, the office stated that AI-generated work can receive copyright protection “when and if it embodies meaningful human authorship.” This creates an interesting dynamic: the outputs of AI music generation may be copyrightable by the humans who shaped them, even as the training process that made those outputs possible may itself constitute infringement of others' copyrights.

The Personality Protection Gap

The Xania Monet controversy illuminates why copyright law alone cannot protect artists in the age of generative AI. Even if the major label lawsuits succeed in establishing that AI companies must license training data, this would not necessarily protect individual artists from having their identities approximated.

Consider what Victoria Monet actually lost in this situation. The AI persona did not copy any specific song she recorded. It did not sample her vocals. What it captured, or appeared to capture, was something more fundamental: the quality of her artistic presence, the characteristics that make audiences recognise her work. This touches on what legal scholars call the right of publicity, the right to control commercial use of one's name, image, and likeness.

But here the legal landscape becomes fragmented and inadequate. In the United States, there is no federal right of publicity law. Protection varies dramatically by state, with around 30 states providing statutory rights and others relying on common law protections. All 50 states recognise some form of common law rights against unauthorised use of a person's name, image, or likeness, but the scope and enforceability of these protections differ substantially across jurisdictions.

Tennessee's ELVIS Act, which took effect on 1 July 2024, became the first state legislation specifically designed to protect musicians from unauthorised AI replication of their voices. Named in tribute to Elvis Presley, whose estate had litigated to control his posthumous image rights, the law explicitly includes voice as protected property, defining it to encompass both actual voice and AI-generated simulations. The legislation passed unanimously in both chambers of the Tennessee legislature, with 93 ayes in the House and 30 in the Senate, reflecting bipartisan recognition of the threat AI poses to the state's music industry.

Notably, the ELVIS Act contains provisions targeting not just those who create deepfakes without authorisation but also the providers of the systems used to create them. The law allows lawsuits against any person who “makes available an algorithm, software, tool, or other technology, service, or device” whose “primary purpose or function” is creating unauthorised voice recordings. This represents a significant expansion of liability that could potentially reach AI platform developers themselves.

California followed with its own protective measures. In September 2024, Governor Gavin Newsom signed AB 2602, which requires contracts specifying the use of AI-generated digital replicas of a performer's voice or likeness to include specific consent and professional representation during negotiations. The law defines a “digital replica” as a “computer-generated, highly realistic electronic representation that is readily identifiable as the voice or visual likeness of an individual.” AB 1836 prohibits creating or distributing digital replicas of deceased personalities without permission from their estates, extending these protections beyond the performer's lifetime.

Yet these state-level protections remain geographically limited and inconsistently applied. An AI artist created using platforms based outside these jurisdictions, distributed through global streaming services, and promoted through international digital channels exists in a regulatory grey zone. The Copyright Office's July 2024 report on digital replicas concluded there was an urgent need for federal right of publicity legislation protecting all people from unauthorised use of their likeness and voice, noting that the current patchwork of state laws creates “gaps and inconsistencies” that are “far too inconsistent to remedy generative AI commercial appropriation.”

The NO FAKES Act, first introduced in Congress in July 2024 by a bipartisan group of senators including Chris Coons, Marsha Blackburn, Amy Klobuchar, and Thom Tillis, represents the most comprehensive attempt to address this gap at the federal level. The legislation would establish the first federal right of publicity in the United States, providing a national standard to protect creators' likenesses from unauthorised use while allowing control over digital personas for 70 years after death. The reintroduction in April 2025 gained support from an unusual coalition including major record labels, SAG-AFTRA, Google, and OpenAI. Country music artist Randy Travis, whose voice was digitally recreated using AI after a stroke left him unable to sing, appeared at the legislation's relaunch.

But even comprehensive right of publicity protection faces a fundamental challenge: proving that a particular AI persona was specifically created to exploit another artist's identity. Xania Monet's creators have not acknowledged any intention to capitalise on Victoria Monet's identity. The similarity in names could be coincidental. The stylistic resemblances could emerge organically from training on R&B music generally. Without transparency about training data composition, artists face the impossible task of proving a negative.

The Business Logic of Ambiguity

What makes the Xania Monet case particularly significant is what it reveals about emerging business models in AI music. This is not an accidental byproduct of technological progress. It represents a deliberate commercial strategy that exploits the gap between what AI can approximate and what law can protect.

Hallwood Media, the company that signed Xania Monet to her $3 million deal, is led by Neil Jacobson, formerly president of Geffen Records. Hallwood operates as a multi-faceted music company servicing talent through recording, management, publishing, distribution, and merchandising divisions. The company had already invested in Suno and, in July 2025, signed imoliver, described as the top-streaming “music designer” on Suno, in what was billed as the first traditional label signing of an AI music creator. Jacobson positioned these moves as embracing innovation, stating that imoliver “represents the future of our medium. He's a music designer who stands at the intersection of craftwork and taste.”

The distinction between imoliver and Xania Monet is worth noting. Hallwood describes imoliver as a real human creator who uses AI tools, whereas Xania Monet is presented as a virtual artist persona. But in both cases, the commercial model extracts value from AI's ability to generate music at scale with reduced human labour costs.

The economics are straightforward. An AI artist requires no rest, no touring support, no advance payments against future royalties, no management of interpersonal conflicts or creative disagreements. Victoria Monet herself articulated this asymmetry: “It definitely puts creators in a dangerous spot because our time is more finite. We have to rest at night. So, the eight hours, nine hours that we're resting, an AI artist could potentially still be running, studying, and creating songs like a machine.”

Xania Monet's commercial success demonstrates the model's viability. Her song “How Was I Supposed to Know” reached number one on R&B Digital Song Sales and number three on R&B/Hip-Hop Digital Song Sales. Her catalogue accumulated 9.8 million on-demand streams in the United States, with 5.4 million coming in a single tracking week. She became the first AI artist to debut on a Billboard radio chart, entering the Adult R&B Airplay chart at number 30. Her song “Let Go, Let God” debuted at number 21 on Hot Gospel Songs.

For investors and labels, this represents an opportunity to capture streaming revenue without many of the costs associated with human artists. For human artists, it represents an existential threat: the possibility that their own stylistic innovations could be extracted, aggregated, and turned against them in the form of competitors who never tire, never renegotiate contracts, and never demand creative control. The music industry has long relied on finding and developing talent, but AI offers a shortcut that could fundamentally alter how value is created and distributed.

The Industry Response and Its Limits

Human artists have pushed back against AI music with remarkable consistency across genres and career levels. Kehlani took to TikTok to express her frustration about Xania Monet's deal, stating, “There is an AI R&B artist who just signed a multi-million-dollar deal, and has a Top 5 R&B album, and the person is doing none of the work.” She declared that “nothing and no one on Earth will ever be able to justify AI to me.”

SZA expressed environmental and ethical concerns, posting on Instagram that AI technology causes “harm” to marginalised neighbourhoods and asking fans not to create AI images or songs using her likeness. Baby Tate criticised Xania Monet's creator for lacking creativity and authenticity in her music process. Muni Long questioned why AI artists appeared to be gaining acceptance in R&B specifically, asking, “It wouldn't be allowed to happen in country or pop.” She also noted that Xania Monet's Apple Music biography listed her, Keyshia Cole, and K. Michelle as references, adding, “I'm not happy about it at all. Zero percent.”

Beyonce reportedly expressed fear after hearing an AI version of her own voice, highlighting how even artists at the highest commercial tier feel vulnerable to this technology.

This criticism highlights an uncomfortable pattern: the AI music entities gaining commercial traction have disproportionately drawn comparisons to Black R&B artists. Whether this reflects biases in training data composition, market targeting decisions, or coincidental emergence, the effect raises questions about which artistic communities bear the greatest risks from AI appropriation. The history of American popular music includes numerous examples of Black musical innovations being appropriated by white artists and industry figures. AI potentially automates and accelerates this dynamic.

The creator behind Xania Monet has not remained silent. In December 2025, the AI artist released a track titled “Say My Name With Respect,” which directly addressed critics including Kehlani. While the song does not mention Kehlani by name, the accompanying video displayed screenshots of her previous statements about AI alongside comments from other detractors.

The major labels' lawsuits against Suno and Udio remain ongoing, though Universal Music Group announced in 2025 that it had settled with Udio and struck a licensing deal, following similar action by Warner Music Group. These settlements suggest that large rights holders may secure compensation and control over how their catalogues are used in AI training. But individual artists, particularly those not signed to major labels, may find themselves excluded from whatever protections these arrangements provide.

The European Precedent

While American litigation proceeds through discovery and motions, Europe has produced the first major judicial ruling holding an AI developer liable for copyright infringement related to training. On 11 November 2025, the Munich Regional Court ruled largely in favour of GEMA, the German collecting society representing songwriters, in its lawsuit against OpenAI.

The case centred on nine songs whose lyrics ChatGPT could reproduce almost verbatim in response to simple user prompts. The songs at issue included well-known German tracks such as “Atemlos” and “Wie schon, dass du geboren bist.” The court accepted GEMA's argument that training data becomes embedded in model weights and remains retrievable, a phenomenon researchers call “memorisation.” Even a 15-word passage was sufficient to establish infringement, the court found, because such specific text would not realistically be generated from scratch.

Crucially, the court rejected OpenAI's attempt to benefit from text and data mining exceptions applicable to non-profit research. OpenAI argued that while some of its legal entities pursue commercial objectives, the parent company was founded as a non-profit. Presiding Judge Dr Elke Schwager dismissed this argument, stating that to qualify for research exemptions, OpenAI would need to prove it reinvests 100 percent of profits in research and development or operates with a governmentally recognised public interest mandate.

The ruling ordered OpenAI to cease storing unlicensed German lyrics on infrastructure in Germany, provide information about the scope of use and related revenues, and pay damages. The court also ordered that the judgment be published in a local newspaper. Finding that OpenAI had acted with at minimum negligence, the court denied the company a grace period for making the necessary changes. OpenAI announced plans to appeal, and the judgment may ultimately reach the Court of Justice of the European Union. But as the first major European decision holding an AI developer liable for training on protected works, it establishes a significant precedent.

GEMA is pursuing parallel action against Suno in another lawsuit, with a hearing expected before the Munich Regional Court in January 2026. If European courts continue to reject fair use-style arguments for AI training, companies may face a choice between licensing music rights or blocking access from EU jurisdictions entirely.

The Royalty Dilution Problem

Beyond the question of training data rights lies another structural threat to human artists: the dilution of streaming royalties by AI-generated content flooding platforms. Streaming services operate on pro-rata payment models where subscription revenue enters a shared pool divided according to total streams. When more content enters the system, the per-stream value for all creators decreases.

In April 2025, streaming platform Deezer estimated that 18 percent of content uploaded daily, approximately 20,000 tracks, is AI-generated. This influx of low-cost content competes for the same finite pool of listener attention and royalty payments that sustains human artists. In 2024, Spotify alone paid out $10 billion to the music industry, with independent artists and labels collectively generating more than $5 billion from the platform. But this revenue gets divided among an ever-expanding universe of content, much of it now machine-generated.

The problem extends beyond legitimate AI music releases to outright fraud. In a notable case, musician Michael Smith allegedly extracted more than $10 million in royalty payments by uploading hundreds of thousands of AI-generated songs and using bots to artificially inflate play counts. According to fraud detection firm Beatdapp, streaming fraud removes approximately $1 billion annually from the royalty pool.

A global study commissioned by CISAC, the international confederation representing over 5 million creators, projected that while generative AI providers will experience dramatic revenue growth, music creators will see approximately 24 percent of their revenues at risk of loss by 2028. Audiovisual creators face a similar 21 percent risk. This represents a fundamental redistribution of value from human creators to technology platforms, enabled by the same legal ambiguities that allow AI personas to approximate existing artists without liability.

The market for AI in music is expanding rapidly. Global AI in music was valued at $2.9 billion in 2024, with projections suggesting growth to $38.7 billion by 2033 at a compound annual growth rate of 25.8 percent. Musicians are increasingly adopting the technology, with approximately 60 percent utilising AI tools in their projects and 36.8 percent of producers integrating AI into their workflows. But this adoption occurs in the context of profound uncertainty about how AI integration will affect long-term career viability.

The Question of Disclosure

Victoria Monet proposed a simple reform that might partially address these concerns: requiring clear labelling of AI-generated music, similar to how food products must disclose their ingredients. “I think AI music, as it is released, needs to be disclosed more,” she told Vanity Fair. “Like on food, we have labels for organic and artificial so that we can make an informed decision about what we consume.”

This transparency principle has gained traction among legislators. In April 2024, California Representative Adam Schiff introduced the Generative AI Copyright Disclosure Act, which would require AI firms to notify the Copyright Office of copyrighted works used in training at least 30 days before publicly releasing a model. Though the bill did not become law, it reflected growing consensus that the opacity of training data represents a policy problem requiring regulatory intervention.

The music industry's lobbying priorities have coalesced around three demands: permission, payment, and transparency. Rights holders want AI companies to seek permission before training on copyrighted music. They want to be paid for such use through licensing deals. And they want transparency about what data sets models actually use, without which the first two demands cannot be verified or enforced.

But disclosure requirements face practical challenges. How does one audit training data composition at scale? How does one verify that an AI system was not trained on particular artists when the systems themselves may not retain explicit records of their training data? The technical architecture of neural networks does not readily reveal which inputs influenced which outputs. Proving that Victoria Monet's recordings contributed to Xania Monet's stylistic character may be technically impossible even with full disclosure of training sets.

Redefining Artistic Value

Perhaps the most profound question raised by AI music personas is not legal but cultural: what do we value about human artistic creation, and can those values survive technological displacement?

Human music carries meanings that transcend sonic characteristics. When Victoria Monet won three Grammy Awards in 2024, including Best New Artist after fifteen years of working primarily as a songwriter for other performers, that recognition reflected not just the quality of her album Jaguar II but her personal journey, her persistence through years when labels declined to spotlight her, her evolution from writing hits for Ariana Grande to commanding her own audience. “This award was a 15-year pursuit,” she said during her acceptance speech. Her work with Ariana Grande had already earned her three Grammy nominations in 2019, including for Album of the Year for Thank U, Next, but her own artistic identity had taken longer to establish. These biographical dimensions inform how listeners relate to her work.

An AI persona has no such biography. Xania Monet cannot discuss the personal experiences that shaped her lyrics because those lyrics emerge from prompts written by Telisha Jones and processed through algorithmic systems. The emotional resonance of human music often derives from audiences knowing that another human experienced something and chose to express it musically. Can AI-generated music provide equivalent emotional value, or does it offer only a simulation of feeling, convincing enough to capture streams but hollow at its core?

The market appears agnostic on this question, at least in the aggregate. Xania Monet's streaming numbers suggest that significant audiences either do not know or do not care that her music is AI-generated. This consumer indifference may represent the greatest long-term threat to human artists: not that AI music will be legally prohibited, but that it will become commercially indistinguishable from human music in ways that erode the premium audiences currently place on human creativity.

The emergence of AI personas that approximate existing artists reveals that our legal and cultural frameworks for artistic identity were built for a world that no longer exists. Copyright law assumed that copying required access to specific works and that derivation would be obvious. Right of publicity law assumed that commercial exploitation of identity would involve clearly identifiable appropriation. The economics of music assumed that creating quality content would always require human labour that commands payment.

Each of these assumptions has been destabilised by generative AI systems that can extract stylistic essences without copying specific works, create virtual identities that approximate real artists without explicit acknowledgment, and produce unlimited content at marginal costs approaching zero.

The solutions being proposed represent necessary but insufficient responses. Federal right of publicity legislation, mandatory training data disclosure, international copyright treaty updates, and licensing frameworks for AI training may constrain the most egregious forms of exploitation while leaving the fundamental dynamic intact: AI systems can transform human creativity into training data, extract commercially valuable patterns, and generate outputs that compete with human artists in ways that existing law struggles to address.

Victoria Monet's experience with Xania Monet may become the template for a new category of artistic grievance: the sense of being approximated, of having one's creative identity absorbed into a system and reconstituted as competition. Whether law and culture can evolve quickly enough to protect against this form of extraction remains uncertain. What is certain is that the question can no longer be avoided. The ghost has emerged from the machine, and it wears a familiar face.


References and Sources

  1. Face2Face Africa. “Victoria Monet criticizes AI artist Xania Monet, suggests it may have been created using her likeness.” https://face2faceafrica.com/article/victoria-monet-criticizes-ai-artist-xania-monet-suggests-it-may-have-been-created-using-her-likeness

  2. TheGrio. “Victoria Monet sounds the alarm on Xania Monet: 'I don't support that. I don't think that's fair.'” https://thegrio.com/2025/11/18/victoria-monet-reacts-to-xania-monet/

  3. Billboard. “AI Music Artist Xania Monet Signs Multimillion-Dollar Record Deal.” https://www.billboard.com/pro/ai-music-artist-xania-monet-multimillion-dollar-record-deal/

  4. Boardroom. “Xania Monet's $3 Million Record Deal Sparks AI Music Debate.” https://boardroom.tv/xania-monet-ai-music-play-by-play/

  5. Music Ally. “Hallwood Media sees chart success with AI artist Xania Monet.” https://musically.com/2025/09/18/hallwood-media-sees-chart-success-with-ai-artist-xania-monet/

  6. RIAA. “Record Companies Bring Landmark Cases for Responsible AI Against Suno and Udio.” https://www.riaa.com/record-companies-bring-landmark-cases-for-responsible-ai-againstsuno-and-udio-in-boston-and-new-york-federal-courts-respectively/

  7. Rolling Stone. “RIAA Sues AI Music Generators For Copyright Infringement.” https://www.rollingstone.com/music/music-news/record-labels-sue-music-generators-suno-and-udio-1235042056/

  8. TechCrunch. “AI music startup Suno claims training model on copyrighted music is 'fair use.'” https://techcrunch.com/2024/08/01/ai-music-startup-suno-response-riaa-lawsuit/

  9. Skadden. “Copyright Office Weighs In on AI Training and Fair Use.” https://www.skadden.com/insights/publications/2025/05/copyright-office-report

  10. U.S. Copyright Office. “Copyright and Artificial Intelligence.” https://www.copyright.gov/ai/

  11. Wikipedia. “ELVIS Act.” https://en.wikipedia.org/wiki/ELVIS_Act

  12. Tennessee Governor's Office. “Tennessee First in the Nation to Address AI Impact on Music Industry.” https://www.tn.gov/governor/news/2024/1/10/tennessee-first-in-the-nation-to-address-ai-impact-on-music-industry.html

  13. ASCAP. “ELVIS Act Signed Into Law in Tennessee To Protect Music Creators from AI Impersonation.” https://www.ascap.com/news-events/articles/2024/03/elvis-act-tn

  14. California Governor's Office. “Governor Newsom signs bills to protect digital likeness of performers.” https://www.gov.ca.gov/2024/09/17/governor-newsom-signs-bills-to-protect-digital-likeness-of-performers/

  15. Manatt, Phelps & Phillips. “California Enacts a Suite of New AI and Digital Replica Laws.” https://www.manatt.com/insights/newsletters/client-alert/california-enacts-a-host-of-new-ai-and-digital-rep

  16. Congress.gov. “NO FAKES Act of 2025.” https://www.congress.gov/bill/119th-congress/house-bill/2794/text

  17. Billboard. “NO FAKES Act Returns to Congress With Support From YouTube, OpenAI for AI Deepfake Bill.” https://www.billboard.com/pro/no-fakes-act-reintroduced-congress-support-ai-deepfake-bill/

  18. Hollywood Reporter. “Hallwood Media Signs Record Deal With an 'AI Music Designer.'” https://www.hollywoodreporter.com/music/music-industry-news/hallwood-inks-record-deal-ai-music-designer-imoliver-1236328964/

  19. Billboard. “Hallwood Signs 'AI Music Designer' imoliver to Record Deal, a First for the Music Business.” https://www.billboard.com/pro/ai-music-creator-imoliver-record-deal-hallwood/

  20. Complex. “Kehlani Blasts AI Musician's $3 Million Record Deal.” https://www.complex.com/music/a/jadegomez510/kehlani-xenia-monet-ai

  21. Billboard. “Kehlani Slams AI Artist Xania Monet Over $3 Million Record Deal Offer.” https://www.billboard.com/music/music-news/kehlani-slams-ai-artist-xania-monet-million-record-deal-1236071158/

  22. Rap-Up. “Baby Tate & Muni Long Push Back Against AI Artist Xania Monet.” https://www.rap-up.com/article/baby-tate-muni-long-xania-monet-ai-artist-backlash

  23. Bird & Bird. “Landmark ruling of the Munich Regional Court (GEMA v OpenAI) on copyright and AI training.” https://www.twobirds.com/en/insights/2025/landmark-ruling-of-the-munich-regional-court-(gema-v-openai)-on-copyright-and-ai-training

  24. Billboard. “German Court Rules OpenAI Infringed Song Lyrics in Europe's First Major AI Music Ruling.” https://www.billboard.com/pro/gema-ai-music-copyright-case-open-ai-chatgpt-song-lyrics/

  25. Norton Rose Fulbright. “Germany delivers landmark copyright ruling against OpenAI: What it means for AI and IP.” https://www.nortonrosefulbright.com/en/knowledge/publications/656613b2/germany-delivers-landmark-copyright-ruling-against-openai-what-it-means-for-ai-and-ip

  26. CISAC. “Global economic study shows human creators' future at risk from generative AI.” https://www.cisac.org/Newsroom/news-releases/global-economic-study-shows-human-creators-future-risk-generative-ai

  27. WIPO Magazine. “How AI-generated songs are fueling the rise of streaming farms.” https://www.wipo.int/en/web/wipo-magazine/articles/how-ai-generated-songs-are-fueling-the-rise-of-streaming-farms-74310

  28. Grammy.com. “2024 GRAMMYs: Victoria Monet Wins The GRAMMY For Best New Artist.” https://www.grammy.com/news/2024-grammys-victoria-monet-best-new-artist-win

  29. Billboard. “Victoria Monet Wins Best New Artist at 2024 Grammys: 'This Award Was a 15-Year Pursuit.'” https://www.billboard.com/music/awards/victoria-monet-grammy-2024-best-new-artist-1235598716/

  30. Harvard Law School. “AI created a song mimicking the work of Drake and The Weeknd. What does that mean for copyright law?” https://hls.harvard.edu/today/ai-created-a-song-mimicking-the-work-of-drake-and-the-weeknd-what-does-that-mean-for-copyright-law/

  31. Variety. “AI-Generated Fake 'Drake'/'Weeknd' Collaboration, 'Heart on My Sleeve,' Delights Fans and Sets Off Industry Alarm Bells.” https://variety.com/2023/music/news/fake-ai-generated-drake-weeknd-collaboration-heart-on-my-sleeve-1235585451/

  32. ArtSmart. “AI in Music Industry Statistics 2025: Market Growth & Trends.” https://artsmart.ai/blog/ai-in-music-industry-statistics/

  33. Rimon Law. “U.S. Copyright Office Will Accept AI-Generated Work for Registration When and if It Embodies Meaningful Human Authorship.” https://www.rimonlaw.com/u-s-copyright-office-will-accept-ai-generated-work-for-registration-when-and-if-it-embodies-meaningful-human-authorship/

  34. Billboard. “AI Artist Xania Monet Fires Back at Kehlani & AI Critics on Prickly 'Say My Name With Respect' Single.” https://www.billboard.com/music/rb-hip-hop/xania-monet-kehlani-ai-artist-say-my-name-with-respect-1236142321/


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

In February 2025, artificial intelligence researcher Andrej Karpathy, co-founder of OpenAI and former AI leader at Tesla, posted a provocative observation on social media. “There's a new kind of coding I call 'vibe coding',” he wrote, “where you fully give in to the vibes, embrace exponentials, and forget that the code even exists.” By November of that year, Collins Dictionary had named “vibe coding” its Word of the Year, recognising how the term had come to encapsulate a fundamental shift in humanity's relationship with technology. As Alex Beecroft, managing director of Collins, explained: “The selection of 'vibe coding' as Collins' Word of the Year perfectly captures how language is evolving alongside technology.”

The concept is beguilingly simple. Rather than writing code line by line, users describe what they want in plain English, and large language models generate the software. Karpathy himself described the workflow with disarming candour: “I just talk to Composer with SuperWhisper so I barely even touch the keyboard. I ask for the dumbest things like 'decrease the padding on the sidebar by half' because I'm too lazy to find it. I 'Accept All' always, I don't read the diffs anymore.” Or, as he put it more succinctly: “The hottest new programming language is English.”

For newsrooms, this represents both an extraordinary opportunity and a profound challenge. The Generative AI in the Newsroom project, a collaborative effort examining when and how to use generative AI in news production, has been tracking these developments closely. Their assessment suggests that 2026's most significant newsroom innovation will not emerge from development teams but from journalists who can now create their own tools. The democratisation of software development promises to unlock creativity and efficiency at unprecedented scale. But it also threatens to expose news organisations to security vulnerabilities, regulatory violations, and ethical failures that could undermine public trust in an industry already battling credibility challenges.

The stakes could hardly be higher. Journalism occupies a unique position in the information ecosystem, serving as a watchdog on power while simultaneously handling some of society's most sensitive information. From whistleblower communications to investigative documents, from source identities to personal data about vulnerable individuals, newsrooms are custodians of material that demands the highest standards of protection. When the barriers to building software tools collapse, the question becomes urgent: how do organisations ensure that the enthusiasm of newly empowered creators does not inadvertently compromise the very foundations of trustworthy journalism?

The Democratisation Revolution

Kerry Oslund, vice president of AI strategy at The E.W. Scripps Company, captured the zeitgeist at a recent industry panel when he declared: “This is the revenge of the English major.” His observation points to a fundamental inversion of traditional power structures in newsrooms. For decades, journalists with story ideas requiring custom tools had to queue for limited development resources, often watching their visions wither in backlogs or emerge months later in compromised form. Vibe coding tools like Lovable, Claude, Bubble AI, and Base44 have shattered that dependency.

The practical implications are already visible. At Scripps, the organisation has deployed over 300 AI “agents” handling complex tasks that once required significant human oversight. Oslund described “agent swarms” where multiple AI agents pass tasks to one another, compiling weekly reports, summarising deltas, and building executive dashboards without human intervention until the final review. The cost savings are tangible: “We eliminated all third-party voice actors and now use synthetic voice with our own talent,” Oslund revealed at a TV News Check panel.

During the same industry gathering, leaders from Gray Media, Reuters, and Stringr discussed similar developments. Gray Media is using AI to increase human efficiency in newsrooms, allowing staff to focus on higher-value journalism while automated systems handle routine tasks.

For community journalism, the potential is even more transformative. The Nieman Journalism Lab's predictions for 2026 emphasise how vibe coding tools have lowered the cost and technical expertise required to build prototypes, creating space for community journalists to experiment with new roles and collaborate with AI specialists. By translating their understanding of audience needs into tangible prototypes, journalists can instruct large language models on the appearance, features, and data sources they require for new tools.

One prominent data journalist, quoted in coverage of the vibe coding phenomenon, expressed the reaction of many practitioners: “Oh my God, this vibe coding thing is insane. If I had this during our early interactive news days, it would have been a godsend. Once you get the hang of it, it's like magic.”

But magic, as any journalist knows, demands scrutiny. As programmer Simon Willison clarified in his analysis: “If an LLM wrote every line of your code, but you've reviewed, tested, and understood it all, that's not vibe coding in my book. That's using an LLM as a typing assistant.” The distinction matters enormously. True vibe coding, where users accept AI-generated code without fully comprehending its functionality, introduces risks that newsrooms must confront directly.

The Security Imperative and Shadow AI

The IBM 2025 Cost of Data Breach Report revealed statistics that should alarm every news organisation considering rapid AI tool adoption. Thirteen percent of organisations reported breaches of AI models or applications, and of those compromised, a staggering 97% reported lacking AI access controls. Perhaps most troubling: one in five organisations reported breaches due to shadow AI, the unsanctioned use of AI tools by employees outside approved governance frameworks.

The concept of shadow AI represents an evolution of the “shadow IT” problem that has plagued organisations for decades. As researchers documented in Strategic Change journal, the progression from shadow IT to shadow AI introduces new threat vectors. AI systems possess intrinsic security vulnerabilities, from the potential compromising of training data to the exploitation of AI models and networks. When employees use AI tools without organisational oversight, these vulnerabilities multiply.

For newsrooms, the stakes are uniquely high. Journalists routinely handle information that could endanger lives if exposed: confidential sources, whistleblower identities, leaked documents revealing government or corporate malfeasance. The 2014 Sony Pictures hack demonstrated how devastating breaches can be, with hackers releasing salaries of employees and Hollywood executives alongside sensitive email traffic. Data breaches in media organisations are particularly attractive to malicious actors because they often contain not just personal information but intelligence with political or financial value.

The Gartner research firm predicts that by 2027, more than 40% of AI-related data breaches will be caused by improper use of generative AI across borders. The swift adoption of generative AI technologies by end users has outpaced the development of data governance and security measures. According to the Cloud Security Alliance, only 57% of organisations have acceptable use policies for AI tools, and fewer still have implemented access controls for AI agents and models, activity logging and auditing, or identity governance for AI entities.

The media industry's particular vulnerability compounds these concerns. As authentication provider Auth0 documented in an analysis of major data breaches affecting media companies: “Data breaches have become commonplace, and the media industry is notorious for being a magnet for cyberthieves.” With billions of users consuming news online, the attack surface for criminals continues to expand. Media companies frequently rely on external vendors, making it difficult to track third-party security practices even when internal processes are robust.

Liability in the Age of AI-Generated Code

When software fails, who bears responsibility? This question becomes extraordinarily complex when the code was generated by an AI and deployed by someone with no formal engineering training. The legal landscape remains unsettled, but concerning patterns are emerging.

Traditional negligence and product liability principles still apply, but courts have yet to clarify how responsibility should be apportioned between AI tool developers and the organisations utilising these tools. Most AI providers prominently display warnings such as “AI can make mistakes and verify the output” while including warranty disclaimers that push due diligence burdens back onto the businesses integrating AI-generated code. The RAND Corporation's analysis of liability for AI system harms notes that “AI developers might also be held liable for malpractice should courts find there to be a recognised professional standard of care that a developer then violated.”

Copyright and intellectual property considerations add further complexity. In the United States, copyright protection hinges on human authorship. Both case law and the U.S. Copyright Office agree that copyright protection is available only for works created through human creativity. When code is produced solely by an AI without meaningful human authorship, it is not eligible for copyright protection.

Analysis by the Software Freedom Conservancy found that approximately 35% of AI-generated code samples contained licensing irregularities, potentially exposing organisations to significant legal liabilities. This “licence contamination” problem has already forced several high-profile product delays and at least two complete codebase rewrites at major corporations. In the United States, a lawsuit against GitHub Copilot (Doe v. GitHub, Inc.) argues that the tool suggests code without including necessary licence attributions. As of spring 2025, litigation continued.

For news organisations, the implications extend beyond licensing. In journalism, tools frequently interact with personal data protected under frameworks like the General Data Protection Regulation. Article 85 of the GDPR requires Member States to adopt exemptions balancing data protection with freedom of expression, but these exemptions are not blanket protections. The Austrian Constitutional Court declared the Austrian journalistic exemption unconstitutional, ruling that it was illegitimate to entirely exclude media data processing from data protection provisions. When Romanian journalists published videos and documents for an investigation, the data protection authority asked for information that could reveal sources, under threat of penalties reaching 20 million euros.

A tool built through vibe coding that inadvertently logs source communications or retains metadata could expose a news organisation to regulatory action and, more critically, endanger the individuals who trusted journalists with sensitive information.

Protecting Vulnerable Populations and Investigative Workflows

Investigative journalism depends on systems of trust that have been carefully constructed over decades. Sources risk their careers, freedom, and sometimes lives to expose wrongdoing. The Global Investigative Journalism Network's guidance emphasises that “most of the time, sources or whistleblowers do not understand the risks they might be taking. Journalists should help them understand this, so they are fully aware of how publication of the information they have given could impact them.”

Digital security has become integral to this protective framework. SecureDrop, an open-source platform for operating whistleblowing systems, has become standard in newsrooms committed to source protection. Encrypted messaging applications like Signal offer end-to-end protection. These tools emerged from years of security research and have been vetted by experts who understand both the technical vulnerabilities and the human factors that can compromise even robust systems.

When a journalist vibe codes a tool for an investigation, they may inadvertently undermine these protections without recognising the risk. As journalist James Risen of The Intercept observed: “We're being forced to act like spies, having to learn tradecraft and encryption and all the new ways to protect sources. So, there's going to be a time when you might make a mistake or do something that might not perfectly protect a source. This is really hard work.”

The Perugia Principles for Journalists, developed in partnership with 20 international journalists and experts, establish twelve principles for working with whistleblowers in the digital age. First among them: “First, protect your sources. Defend anonymity when it is requested. Provide safe ways for sources to make 'first contact' with you, where possible.” A vibe-coded tool, built without understanding of metadata, logging, or network traffic patterns, could create exactly the kind of traceable communication channel that puts sources at risk.

Research from the Center for News, Technology and Innovation documents how digital security threats have become more important than ever for global news media. Journalists and publishers have become high-profile targets for malware, spyware, and digital surveillance. These threats risk physical safety, privacy, and mental health while undermining whistleblower protection and source confidentiality.

The resource disparity across the industry compounds these challenges. News organisations in wealthier settings are generally better resourced and more able to adopt protective technologies. Smaller, independent, and freelance journalists often lack the means to defend against threats. Vibe coding might seem to level this playing field by enabling under-resourced journalists to build their own tools, but without security expertise, it may instead expose them to greater risk.

Governance Frameworks for Editorial and Technical Leadership

The challenge for news organisations is constructing governance frameworks that capture the benefits of democratised development while mitigating its risks. Research on AI guidelines and policies from 52 media organisations worldwide, analysed by journalism researchers and published through Journalist's Resource, offers insights into emerging best practices.

The findings emphasise the need for human oversight throughout AI-assisted processes. As peer-reviewed analysis notes: “The maintenance of a 'human-in-the-loop' principle, where human judgment, creativity, and editorial oversight remain central to the journalistic process, is vital.” The Guardian requires senior editor approval for significant AI-generated content. The CBC has committed not to use AI-powered identification tools for investigative journalism without proper permissions.

The NIST AI Risk Management Framework provides a structured approach applicable to newsroom contexts. It guides organisations through four repeatable actions: identifying how AI systems are used and where risks may appear (Map), evaluating risks using defined metrics (Measure), applying controls to mitigate risks (Manage), and establishing oversight structures to ensure accountability (Govern). The accompanying AI RMF Playbook offers practical guidance that organisations can adapt to their specific needs.

MIT Sloan researchers have proposed a “traffic light” framework for categorising AI use cases by risk level. Red-light use cases are prohibited entirely. Green-light use cases, such as chatbots for general customer service, present low risk and can proceed with minimal oversight. Yellow-light use cases, which comprise most AI applications, require enhanced review and human judgment at critical decision points.

For newsrooms, this framework might translate as follows:

Green-light applications might include internal productivity tools, calendar management systems, or draft headline generators where errors create inconvenience rather than harm.

Yellow-light applications would encompass data visualisations for publication, interactive features using public datasets, and transcription tools for interviews with non-sensitive subjects. These require review by someone with technical competence before deployment.

Red-light applications would include anything touching source communications, whistleblower data, investigative documents, or personal information about vulnerable individuals. These should require professional engineering oversight and security review regardless of how they were initially prototyped.

Building Decision Trees for Non-Technical Staff

Operationalising these distinctions requires clear decision frameworks that non-technical staff can apply independently. The Poynter Institute's guidance on newsroom AI ethics policies emphasises the need for organisations to create AI committees and designate senior staff to lead ongoing governance efforts. “This step is critical because the technology is going to evolve, the tools are going to multiply and the policy will not keep up unless it is routinely revised.”

A practical decision tree for vibe-coded projects might begin with a series of questions:

First, does this tool handle any data that is not already public? If so, escalate to technical review.

Second, could a malfunction in this tool result in publication of incorrect information, exposure of source identity, or violation of individual privacy? If yes, professional engineering oversight is required.

Third, will this tool be used by anyone other than its creator, or persist beyond a single use? Shared tools and long-term deployments require enhanced scrutiny.

Fourth, does this tool connect to external services, databases, or APIs? External connections introduce security considerations that require expert evaluation.

Fifth, would failure of this tool create legal liability, regulatory exposure, or reputational damage? Legal and compliance review should accompany technical review for such applications.

The Cloud Security Alliance's Capabilities-Based Risk Assessment framework offers additional granularity, suggesting that organisations apply proportional safeguards based on risk classification. Low-risk AI applications receive lightweight controls, medium-risk applications get enhanced monitoring, and high-risk applications require full-scale governance including regular audits.

Bridging the Skills Gap Without Sacrificing Speed

The tension at the heart of vibe coding governance is balancing accessibility against accountability. The speed and democratisation that make vibe coding attractive would be undermined by bureaucratic review processes that reimpose the old bottlenecks. Yet the alternative, allowing untrained staff to deploy tools handling sensitive information, creates unacceptable risks.

Several approaches can help navigate this tension.

Tiered review processes can match the intensity of oversight to the risk level of the application. Simple internal tools might require only a checklist review by the creator themselves. Published tools or those handling non-public data might need peer review by a designated “AI champion” with intermediate technical knowledge. Tools touching sensitive information would require full security review by qualified professionals.

Pre-approved templates and components can provide guardrails that reduce the scope for dangerous errors. News organisations can work with their development teams to create vetted building blocks: secure form handlers, properly configured database connections, privacy-compliant analytics modules. Journalists can be directed to incorporate these components rather than generating equivalent functionality from scratch.

Sandboxed development environments can allow experimentation without production risk. Vibe-coded prototypes can be tested and evaluated in isolated environments before any decision about broader deployment. This preserves the creative freedom that makes vibe coding valuable while creating a checkpoint before tools reach users or sensitive data.

Mandatory training programmes should ensure that all staff using vibe coding tools understand basic security concepts, data handling requirements, and the limitations of AI-generated code. This training need not make everyone a programmer, but it should cultivate healthy scepticism about what AI tools produce and awareness of the questions to ask before deployment.

The Emerging Regulatory Landscape

News organisations cannot develop governance frameworks in isolation from the broader regulatory environment. The European Union's AI Act, adopted in 2024, establishes requirements that will affect media organisations using AI tools. While journalism itself is not classified as high-risk under the Act, AI systems used in media that could manipulate public opinion or spread disinformation face stricter oversight. AI-generated content, including synthetic media, must be clearly labelled.

The Dynamic Coalition on the Sustainability of Journalism and News Media released its 2024-2025 Annual Report on AI and Journalism, calling for shared strategies to safeguard journalism's integrity in an AI-driven world. The report urges decision-makers to “move beyond reactive policy-making and invest in forward-looking frameworks that place human rights, media freedom, and digital inclusion at the centre of AI governance.”

In the United States, the regulatory landscape is more fragmented. More than 1,000 AI-related bills have been introduced across state legislatures in 2024-2025. California, Colorado, New York, and Illinois have adopted or proposed comprehensive AI and algorithmic accountability laws addressing transparency, bias mitigation, and sector-specific safeguards. News organisations operating across multiple jurisdictions must navigate a patchwork of requirements.

The Center for News, Technology and Innovation's review of 188 national and regional AI strategies found that regulatory attempts rarely directly address journalism and vary dramatically in their frameworks, enforcement capacity, and international coordination. This uncertainty places additional burden on news organisations to develop robust internal governance rather than relying on external regulatory guidance.

Cultural Transformation and Organisational Learning

Technical governance alone cannot address the challenges of democratised development. Organisations must cultivate cultures that balance innovation with responsibility.

IBM's research on shadow AI governance emphasises that employees should be “encouraged to disclose how they use AI, confident that transparency will be met with guidance, not punishment. Leadership, in turn, should celebrate responsible experimentation as part of organisational learning.” Punitive approaches to unsanctioned AI use tend to drive it underground, where it becomes invisible to governance processes.

News organisations have particular cultural advantages in addressing these challenges. Journalism is built on verification, scepticism, and accountability. The same instincts that lead journalists to question official sources and demand evidence should be directed at AI-generated outputs. Newsroom cultures that emphasise “trust but verify” can extend this principle to tools and code as readily as to sources and documents.

The Scripps approach, which Oslund described as starting with “guardrails and guidelines to prevent missteps,” offers a model. “It all starts with public trust,” Oslund emphasised, noting Scripps' commitment to accuracy and human oversight of AI outputs. Embedding AI governance within broader commitments to editorial integrity may prove more effective than treating it as a separate technical concern.

The Accountability Question

When something goes wrong with a vibe-coded tool, who is responsible? This question resists easy answers but demands organisational clarity.

The journalist who created the tool bears some responsibility, but their liability should be proportional to what they could reasonably have been expected to understand. An editor who approved deployment shares accountability, as does any technical reviewer who cleared the tool. The organisation itself, having enabled vibe coding without adequate governance, may bear ultimate responsibility.

Clear documentation of decision-making processes becomes essential. When a tool is deployed, records should capture: who created it, what review it received, who approved it, what data it handles, and what risk assessment was performed. This documentation serves both as a protection against liability and as a learning resource when problems occur.

As professional standards for AI governance in journalism emerge, organisations that ignore them may face enhanced liability exposure. The development of industry norms creates benchmarks against which organisational practices will be measured.

Recommendations for News Organisations

Based on the analysis above, several concrete recommendations emerge for news organisations navigating the vibe coding revolution.

Establish clear acceptable use policies for AI development tools, distinguishing between permitted, restricted, and prohibited use cases. Make these policies accessible and understandable to non-technical staff.

Create tiered review processes that match oversight intensity to risk level. Not every vibe-coded tool needs security audit, but those handling sensitive data or reaching public audiences require appropriate scrutiny.

Designate AI governance leadership within the organisation, whether through an AI committee, a senior editor with oversight responsibility, or a dedicated role. This leadership should have authority to pause or prohibit deployments that present unacceptable risk.

Invest in training that builds basic security awareness and AI literacy across editorial staff. Training should emphasise the limitations of AI-generated code and the questions to ask before deployment.

Develop pre-approved components for common functionality, allowing vibe coders to build on vetted foundations rather than generating security-sensitive code from scratch.

Implement sandbox environments for development and testing, creating separation between experimentation and production systems handling real data.

Maintain documentation of all AI tool deployments, including creation, review, approval, and risk assessment records.

Conduct regular audits of deployed tools, recognising that AI-generated code may contain latent vulnerabilities that only become apparent over time.

Engage with regulatory developments at national and international levels, ensuring that internal governance anticipates rather than merely reacts to legal requirements.

Foster cultural change that treats AI governance as an extension of editorial integrity rather than a constraint on innovation.

Vibe coding represents neither utopia nor dystopia for newsrooms. It is a powerful capability that, like any technology, will be shaped by the choices organisations make about its use. The democratisation of software development can expand what journalism is capable of achieving, empowering practitioners to create tools tailored to their specific needs and audiences. But this empowerment carries responsibility.

The distinction between appropriate prototyping and situations requiring professional engineering oversight is not always obvious. Decision frameworks and governance structures can operationalise this distinction, but they require ongoing refinement as technology evolves and organisational learning accumulates. Liability, compliance, and ethical accountability gaps are real, particularly where published tools interface with sensitive data, vulnerable populations, or investigative workflows.

Editorial and technical leadership must work together to ensure that speed and accessibility gains do not inadvertently expose organisations to data breaches, regulatory violations, or reputational damage. The journalists building tools through vibe coding are not the enemy; they are practitioners seeking to serve their audiences and advance their craft. But good intentions are insufficient protection against technical vulnerabilities or regulatory requirements.

As the Generative AI in the Newsroom project observes, the goal is “collaboratively figuring out how and when (or when not) to use generative AI in news production.” That collaborative spirit, extending across editorial and technical domains, offers the best path forward. Newsrooms that get this balance right will harness vibe coding's transformative potential while maintaining the trust that makes journalism possible. Those that do not may find that the magic of democratised development comes with costs their organisations, their sources, and their audiences cannot afford.


References and Sources

  1. Karpathy, A. (2025). “Vibe Coding.” X (formerly Twitter). https://x.com/karpathy/status/1886192184808149383

  2. Collins Dictionary. (2025). “Word of the Year 2025: Vibe Coding.” https://www.collinsdictionary.com/us/woty

  3. CNN. (2025). “'Vibe coding' named Collins Dictionary's Word of the Year.” https://www.cnn.com/2025/11/06/tech/vibe-coding-collins-word-year-scli-intl

  4. Generative AI in the Newsroom. (2025). “Vibe Coding for Newsrooms.” https://generative-ai-newsroom.com/vibe-coding-for-newsrooms-6848b17dac99

  5. Nieman Journalism Lab. (2025). “Rise of the vibecoding journalists.” https://www.niemanlab.org/2025/12/rise-of-the-vibecoding-journalists/

  6. TV News Check. (2025). “Agent Swarms And Vibe Coding: Inside The New Operational Reality Of The Newsroom.” https://tvnewscheck.com/ai/article/agent-swarms-and-vibe-coding-inside-the-new-operational-reality-of-the-newsroom/

  7. The E.W. Scripps Company. (2024). “Scripps creates AI team to lead strategy, business development and operations across company.” https://scripps.com/press-releases/scripps-creates-ai-team-to-lead-strategy-business-development-and-operations-across-company/

  8. IBM Newsroom. (2025). “IBM Report: 13% Of Organizations Reported Breaches Of AI Models Or Applications.” https://newsroom.ibm.com/2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications

  9. Gartner. (2025). “Gartner Predicts 40% of AI Data Breaches Will Arise from Cross-Border GenAI Misuse by 2027.” https://www.gartner.com/en/newsroom/press-releases/2025-02-17-gartner-predicts-forty-percent-of-ai-data-breaches-will-arise-from-cross-border-genai-misuse-by-2027

  10. Auth0. (2024). “11 of the Worst Data Breaches in Media.” https://auth0.com/blog/11-of-the-worst-data-breaches-in-media/

  11. Threatrix. (2025). “Software Liability in 2025: AI-Generated Code Compliance & Regulatory Risks.” https://threatrix.io/blog/threatrix/software-liability-in-2025-ai-generated-code-compliance-regulatory-risks/

  12. MBHB. (2025). “Navigating the Legal Landscape of AI-Generated Code: Ownership and Liability Challenges.” https://www.mbhb.com/intelligence/snippets/navigating-the-legal-landscape-of-ai-generated-code-ownership-and-liability-challenges/

  13. European Data Journalism Network. (2024). “Data protection in journalism: a practical handbook.” https://datavis.europeandatajournalism.eu/obct/data-protection-handbook/gdpr-applied-to-journalism.html

  14. Global Investigative Journalism Network. (2025). “Expert Advice to Keep Your Sources and Whistleblowers Safe.” https://gijn.org/stories/gijc25-tips-keep-sources-whistleblowers-safe/

  15. Journalist's Resource. (2024). “Researchers compare AI policies and guidelines at 52 news organizations.” https://journalistsresource.org/home/generative-ai-policies-newsrooms/

  16. SAGE Journals. (2024). “AI Ethics in Journalism (Studies): An Evolving Field Between Research and Practice.” https://journals.sagepub.com/doi/10.1177/27523543241288818

  17. Poynter Institute. (2024). “Your newsroom needs an AI ethics policy. Start here.” https://www.poynter.org/ethics-trust/2024/how-to-create-newsroom-artificial-intelligence-ethics-policy/

  18. Center for News, Technology and Innovation. (2024). “Journalism's New Frontier: An Analysis of Global AI Policy Proposals and Their Impacts on Journalism.” https://cnti.org/reports/journalisms-new-frontier-an-analysis-of-global-ai-policy-proposals-and-their-impacts-on-journalism/

  19. Media Rights Agenda. (2025). “DC-Journalism Launches 2024/2025 Annual Report on Artificial Intelligence, Journalism.” https://mediarightsagenda.org/dc-journalism-launches-2024-2025-annual-report-on-artificial-intelligence-journalism/

  20. NIST. (2024). “AI Risk Management Framework.” https://www.nist.gov/itl/ai-risk-management-framework

  21. Cloud Security Alliance. (2025). “Capabilities-Based AI Risk Assessment (CBRA) for AI Systems.” https://cloudsecurityalliance.org/artifacts/capabilities-based-risk-assessment-cbra-for-ai-systems

  22. Palo Alto Networks. (2025). “What Is Shadow AI? How It Happens and What to Do About It.” https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai

  23. IBM. (2025). “What Is Shadow AI?” https://www.ibm.com/think/topics/shadow-ai

  24. Help Net Security. (2025). “Shadow AI risk: Navigating the growing threat of ungoverned AI adoption.” https://www.helpnetsecurity.com/2025/11/12/delinea-shadow-ai-governance/

  25. Wikipedia. (2025). “Vibe coding.” https://en.wikipedia.org/wiki/Vibe_coding

  26. Simon Willison. (2025). “Not all AI-assisted programming is vibe coding (but vibe coding rocks).” https://simonwillison.net/2025/Mar/19/vibe-coding/

  27. RAND Corporation. (2024). “Liability for Harms from AI Systems: The Application of U.S. Tort Law.” https://www.rand.org/pubs/research_reports/RRA3243-4.html

  28. Center for News, Technology and Innovation. (2024). “Journalists & Cyber Threats.” https://innovating.news/article/journalists-cyber-threats/

  29. USC Center for Health Journalism. (2025). “An early AI pioneer shares how the 'vibe coding' revolution could reshape data journalism.” https://centerforhealthjournalism.org/our-work/insights/early-ai-pioneer-shares-how-vibe-coding-revolution-could-reshape-data-journalism

  30. Wiley Online Library. (2024). “From Shadow IT to Shadow AI: Threats, Risks and Opportunities for Organizations.” Strategic Change. https://onlinelibrary.wiley.com/doi/10.1002/jsc.2682

  31. U.S. Copyright Office. (2024). “Copyright and Artificial Intelligence.” https://www.copyright.gov/ai/


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

The promise was seductive: AI that writes code faster than any human, accelerating development cycles and liberating engineers from tedious boilerplate. The reality, as thousands of development teams have discovered, is considerably more complicated. According to the JetBrains State of Developer Ecosystem 2025 survey of nearly 25,000 developers, 85% now regularly use AI tools for coding and development. Yet Stack Overflow's 2025 Developer Survey reveals that only 33% of developers trust the accuracy of AI output, down from 43% in 2024. More developers actively distrust AI tools (46%) than trust them.

This trust deficit tells a story that productivity metrics alone cannot capture. While GitHub reports developers code 55% faster with Copilot and McKinsey studies suggest tasks can be completed twice as quickly with generative AI assistance, GitClear's analysis of 211 million changed lines of code reveals a troubling counter-narrative. The percentage of code associated with refactoring has plummeted from 25% in 2021 to less than 10% in 2024. Duplicated code blocks increased eightfold. For the first time in GitClear's measurement history, copy-pasted lines exceeded refactored lines.

The acceleration is real. So is the architectural degradation it enables.

What emerges from this data is not a simple story of AI success or failure. It is a more nuanced picture of tools that genuinely enhance productivity when deployed with discipline but create compounding problems when adopted without appropriate constraints. The developers and organisations navigating this landscape successfully share a common understanding: AI coding assistants require guardrails, architectural oversight, and deliberate workflow design to deliver sustainable value.

The Feature Creep Accelerator

Feature creep has plagued software development since the industry's earliest days. Wikipedia defines it as the excessive ongoing expansion or addition of new features beyond the original scope, often resulting in software bloat and over-complication rather than simple design. It is considered the most common source of cost and schedule overruns and can endanger or even kill products and projects. What AI coding assistants have done is not create this problem, but radically accelerate its manifestation.

Consider the mechanics. A developer prompts an AI assistant to add a user authentication feature. The AI generates functional code within seconds. The developer, impressed by the speed and apparent correctness, accepts the suggestion. Then another prompt, another feature, another quick acceptance. The velocity feels exhilarating. The Stack Overflow survey confirms this pattern: 84% of developers now use or plan to use AI tools in their development process. The JetBrains survey reports that 74% cite increased productivity as AI's primary benefit, with 73% valuing faster completion of repetitive tasks.

But velocity without direction creates chaos. Google's 2024 DORA report found that while AI adoption increased individual output by 21% more tasks completed and 98% more pull requests merged, organisational delivery metrics remained flat. More alarmingly, AI adoption correlated with a 7.2% reduction in delivery stability. The 2025 DORA report confirms this pattern persists: AI adoption continues to have a negative relationship with software delivery stability. As the DORA researchers concluded, speed without stability is accelerated chaos.

The mechanism driving this instability is straightforward. AI assistants optimise for immediate task completion. They generate code that works in isolation but lacks awareness of broader architectural context. Each generated component may function correctly yet contradict established patterns elsewhere in the codebase. One function uses promises, another async/await, a third callbacks. Database queries are parameterised in some locations and concatenated strings in others. Error handling varies wildly between endpoints.

This is not a failing of AI intelligence. It reflects a fundamental mismatch between how AI assistants operate and how sustainable software architecture develops. The Qodo State of AI Code Quality report identifies missing context as the top issue developers face, reported by 65% during refactoring and approximately 60% during test generation and code review. Only 3.8% of developers report experiencing both low hallucination rates and high confidence in shipping AI-generated code without human review.

Establishing Effective Guardrails

The solution is not to abandon AI assistance but to contain it within structures that preserve architectural integrity. CodeScene's research demonstrates that unhealthy code exhibits 15 times more defects, requires twice the development time, and creates 10 times more delivery uncertainty compared to healthy code. Their approach involves implementing guardrails across three dimensions: code quality, code familiarity, and test coverage.

The first guardrail dimension addresses code quality directly. Every line of code, whether AI-generated or handwritten, undergoes automated review against defined quality standards. CodeScene's CodeHealth Monitor detects over 25 code smells including complex methods and God functions. When AI or human introduces issues, the monitor flags them instantly before the code reaches the main branch. This creates a quality gate that treats AI-generated code with the same scrutiny applied to human contributions.

The quality dimension requires teams to define their code quality standards explicitly and automate enforcement via pull request reviews. A 2023 study found that popular AI assistants generate correct code in only 31.1% to 65.2% of cases. Similarly, CodeScene's Refactoring vs. Refuctoring study found that AI breaks code in two out of three refactoring attempts. These statistics make quality gates not optional but essential.

The second dimension concerns code familiarity. Research from the 2024 DORA report reveals that 39% of respondents reported little to no trust in AI-generated code. This distrust correlates with experience level: senior developers show the lowest “highly trust” rate at 2.6% and the highest “highly distrust” rate at 20%. These experienced developers have learned through hard experience that AI suggestions require verification. Guardrails should institutionalise this scepticism by requiring review from developers familiar with affected areas before AI-generated changes merge.

The familiarity dimension serves another purpose: knowledge preservation. When AI generates code that bypasses human understanding, organisations lose institutional knowledge about how their systems work. When something breaks at 3 a.m. and the code was generated by an AI six months ago, can the on-call engineer actually understand what is failing? Can they trace through the logic and implement a meaningful fix without resorting to trial and error?

The third dimension emphasises test coverage. The Ox Security report titled “Army of Juniors: The AI Code Security Crisis” identified 10 architecture and security anti-patterns commonly found in AI-generated code. Comprehensive test suites serve as executable documentation of expected behaviour. When AI-generated code breaks tests, the violation becomes immediately visible. When tests pass, developers gain confidence that at least basic correctness has been verified.

Enterprise adoption requires additional structural controls. The 2026 regulatory landscape, with the EU AI Act's high-risk provisions taking effect in August and penalties reaching 35 million euros or 7% of global revenue, demands documented governance. AI governance committees have become standard in mid-to-large enterprises, with structured intake processes covering security, privacy, legal compliance, and model risk.

Preventing Architectural Drift

Architectural coherence presents a distinct challenge from code quality. A codebase can pass all quality metrics while still representing a patchwork of inconsistent design decisions. The term “vibe coding” has emerged to describe an approach where developers accept AI-generated code without fully understanding it, relying solely on whether the code appears to work.

The consequences of architectural drift compound over time. A September 2025 Fast Company report quoted senior software engineers describing “development hell” when working with AI-generated code. One developer's experience became emblematic: “Random things are happening, maxed out usage on API keys, people bypassing the subscription.” Eventually: “Cursor keeps breaking other parts of the code,” and the application was permanently shut down.

Research examining ChatGPT-generated code found that only five out of 21 programs were initially secure when tested across five programming languages. Missing input sanitisation emerged as the most common flaw, while Cross-Site Scripting failures occurred 86% of the time and Log Injection vulnerabilities appeared 88% of the time. These are not obscure edge cases but fundamental security flaws that any competent developer should catch during code review.

Preventing this drift requires explicit architectural documentation that AI assistants can reference. A recommended approach involves creating a context directory containing specialised documents: a Project Brief for core goals and scope, Product Context for user experience workflows and business logic, System Patterns for architecture decisions and component relationships, Tech Context for the technology stack and dependencies, and Progress Tracking for working features and known issues.

This Memory Bank approach addresses AI's fundamental limitation: forgetting implementation choices made earlier when working on large projects. AI assistants lose track of architectural decisions, coding patterns, and overall project structure, creating inconsistency as project complexity increases. By maintaining explicit documentation that gets fed into every AI interaction, teams can maintain consistency even as AI generates new code.

The human role in this workflow resembles a navigator in pair programming. The navigator directs overall development strategy, makes architectural decisions, and reviews AI-generated code. The AI functions as the driver, generating code implementations and suggesting refactoring opportunities. The critical insight is treating AI as a junior developer beside you: capable of producing drafts, boilerplate, and solid algorithms, but lacking the deep context of your project.

Breaking Through Repetitive Problem-Solving Patterns

Every developer who has used AI coding assistants extensively has encountered the phenomenon: the AI gets stuck in a loop, generating the same incorrect solution repeatedly, each attempt more confidently wrong than the last. The 2025 Stack Overflow survey captures this frustration, with 66% of developers citing “AI solutions that are almost right, but not quite” as their top frustration. Meanwhile, 45% report that debugging AI-generated code takes more time than expected. These frustrations have driven 35% of developers to turn to Stack Overflow specifically after AI-generated code fails.

The causes of these loops are well documented. VentureBeat's analysis of why AI coding agents are not production-ready identifies brittle context windows, broken refactors, and missing operational awareness as primary culprits. When AI exceeds its context limit, it loses track of previous attempts and constraints. It regenerates similar solutions because the underlying prompt and available context have not meaningfully changed.

Several strategies prove effective for breaking these loops. The first involves starting fresh with new context. Opening a new chat session can help the AI think more clearly without the baggage of previous failed attempts in the prompt history. This simple reset often proves more effective than continued iteration within a corrupted context.

The second strategy involves switching to analysis mode. Rather than asking the AI to fix immediately, developers describe the situation and request diagnosis and explanation. By doing this, the AI outputs analysis or planning rather than directly modifying code. This shift in mode often reveals the underlying issue that prevented the AI from generating a correct solution.

Version control provides the third strategy. Committing a working state before adding new features or accepting AI fixes creates reversion points. When a loop begins, developers can quickly return to the last known good version rather than attempting to untangle AI-generated complexity. Frequent checkpointing makes the decision between fixing forward and reverting backward much easier.

The fourth strategy acknowledges when manual intervention becomes necessary. One successful workaround involves instructing the agent not to read the file and instead requesting it to provide the desired configuration, with the developer manually adding it. This bypasses whatever confusion the AI has developed about the file's current state.

The fifth strategy involves providing better context upfront. Developers should always copy-paste the exact error text or describe the wrong behaviour precisely. Giving all relevant errors and output to the AI leads to more direct fixes, whereas leaving it to infer the issue can lead to loops.

These strategies share a common principle: recognising when AI assistance has become counterproductive and knowing when to take manual control. The 90/10 rule offers useful guidance. AI currently excels at planning architectures and writing code blocks but struggles with debugging real systems and handling edge cases. When projects reach 90% completion, switching from building mode to debugging mode leverages human strengths rather than fighting AI limitations.

Leveraging Complementary AI Models

The 2025 AI landscape has matured beyond questions of whether to use AI assistance toward more nuanced questions of which AI model best serves specific tasks. Research published on ResearchGate comparing Gemini 2.5, Claude 4, LLaMA 4, GPT-4.5, and DeepSeek V3.1 concludes that no single model excels at everything. Each has distinct strengths and weaknesses. Rather than a single winner, the 2025 landscape shows specialised excellence.

Professional developers increasingly adopt multi-model workflows that leverage each AI's advantages while avoiding their pitfalls. The recommended approach matches tasks to model strengths: Gemini for deep reasoning and multimodal analysis, GPT series for balanced performance and developer tooling, Claude for long coding sessions requiring memory of previous context, and specialised models for domain-specific requirements.

Orchestration platforms have emerged to manage these multi-model workflows. They provide the integration layer that routes requests to appropriate models, retrieves relevant knowledge, and monitors performance across providers. Rather than committing to a single AI vendor, organisations deploy multiple models strategically, routing queries to the optimal model per task type.

This multi-model approach proves particularly valuable for breaking through architectural deadlocks. When one model gets stuck in a repetitive pattern, switching to a different model often produces fresh perspectives. The models have different training data, different architectural biases, and different failure modes. What confuses one model may be straightforward for another.

The competitive advantage belongs to developers who master multi-model workflows rather than committing to a single platform. This represents a significant shift in developer skills. Beyond learning specific AI tools, developers must develop meta-skills for evaluating which AI model suits which task and when to switch between them.

Mandatory Architectural Review Before AI Implementation

Enterprise teams have discovered that AI output velocity can exceed review capacity. Qodo's analysis observes that AI coding agents increased output by 25-35%, but most review tools do not address the widening quality gap. The consequences include larger pull requests, architectural drift, inconsistent standards across multi-repository environments, and senior engineers buried in validation work instead of system design. Leaders frequently report that review capacity, not developer output, is the limiting factor in delivery.

The solution emerging across successful engineering organisations involves mandatory architectural review before AI implements major changes. The most effective teams have shifted routine review load off senior engineers by automatically approving small, low-risk, well-scoped changes while routing schema updates, cross-service changes, authentication logic, and contract modifications to human reviewers.

AI review systems must therefore categorise pull requests by risk and flag unrelated changes bundled in the same pull request. Selective automation of approvals under clearly defined conditions maintains velocity for routine changes while ensuring human judgment for consequential decisions. AI-assisted development now accounts for nearly 40% of all committed code, making these review processes critical to organisational health.

The EU AI Act's requirements make this approach not merely advisable but legally necessary for certain applications. Enterprises must demonstrate full data lineage tracking knowing exactly what datasets contributed to each model's output, human-in-the-loop checkpoints for workflows impacting safety, rights, or financial outcomes, and risk classification tags labelling each model with its risk level, usage context, and compliance status.

The path toward sustainable AI-assisted development runs through consolidation and discipline. Organisations that succeed will be those that stop treating AI as a magic solution for software development and start treating it as a rigorous engineering discipline requiring the same attention to process and quality as any other critical capability.

Safeguarding Against Hidden Technical Debt

The productivity paradox of AI-assisted development becomes clearest when examining technical debt accumulation. An HFS Research and Unqork study found that while 84% of organisations expect AI to reduce costs and 80% expect productivity gains, 43% report that AI will create new technical debt. Top concerns include security vulnerabilities at 59%, legacy integration complexity at 50%, and loss of visibility at 42%.

The mechanisms driving this debt accumulation differ from traditional technical debt. AI technical debt compounds through three primary vectors. Model versioning chaos results from the rapid evolution of code assistant products. Code generation bloat emerges as AI produces more code than necessary. Organisation fragmentation develops as different teams adopt different AI tools and workflows. These vectors, coupled with the speed of AI code generation, interact to cause exponential growth.

SonarSource's August 2025 analysis of thousands of programming tasks completed by leading language models uncovered what researchers describe as a systemic lack of security awareness. The Ox Security report found AI-generated code introduced 322% more privilege escalation paths and 153% more design flaws compared to human-written code. AI-generated code is highly functional but systematically lacking in architectural judgment.

The financial implications are substantial. By 2025, CISQ estimates nearly 40% of IT budgets will be spent maintaining technical debt. A Stripe report found developers spend, on average, 42% of their work week dealing with technical debt and bad code. AI assistance that accelerates code production without corresponding attention to code quality simply accelerates technical debt accumulation.

The State of Software Delivery 2025 report by Harness found that contrary to perceived productivity benefits, the majority of developers spend more time debugging AI-generated code and more time resolving security vulnerabilities than before AI adoption. This finding aligns with GitClear's observation that code churn, defined as the percentage of code discarded less than two weeks after being written, has nearly doubled from 3.1% in 2020 to 5.7% in 2024.

Safeguarding against this hidden debt requires continuous measurement and explicit debt budgeting. Teams should track not just velocity metrics but also code health indicators. The refactoring rate, clone detection, code churn within two weeks of commit, and similar metrics reveal whether AI assistance is building sustainable codebases or accelerating decay. If the current trend continues, GitClear believes it could soon bring about a phase change in how developer energy is spent, with defect remediation becoming the leading day-to-day developer responsibility rather than developing new features.

Structuring Developer Workflows for Multi-Model Effectiveness

Effective AI-assisted development requires restructuring workflows around AI capabilities and limitations rather than treating AI as a drop-in replacement for human effort. The Three Developer Loops framework published by IT Revolution provides useful structure: a tight inner loop of coding and testing, a middle loop of integration and review, and an outer loop of planning and architecture.

AI excels in the inner loop. Code generation, test creation, documentation, and similar tasks benefit from AI acceleration without significant risk. Development teams spend nearly 70% of their time on repetitive tasks instead of creative problem-solving, and AI handles approximately 40% of the time developers previously spent on boilerplate code. The middle loop requires more careful orchestration. AI can assist with code review and integration testing, but human judgment must verify that generated code aligns with architectural intentions. The outer loop remains primarily human territory. Planning, architecture, and strategic decisions require understanding of business context, user needs, and long-term maintainability that AI cannot provide.

The workflow implications are significant. Rather than using AI continuously throughout development, effective developers invoke AI assistance at specific phases while maintaining manual control at others. During initial planning and architecture, AI might generate options for human evaluation but should not make binding decisions. During implementation, AI can accelerate code production within established patterns. During integration and deployment, AI assistance should be constrained by automated quality gates that verify generated code meets established standards.

Context management becomes a critical developer skill. The METR 2025 study that found developers actually take 19% longer when using AI tools attributed this primarily to context management overhead. The study examined 16 experienced open-source developers with an average of five years of prior experience with the mature projects they worked on. Before completing tasks, developers predicted AI would speed them up by 24%. After experiencing the slowdown firsthand, they still reported believing AI had improved their performance by 20%. The objective measurement showed the opposite.

The context directory approach described earlier provides one structural solution. Alternative approaches include using version-controlled markdown files to track AI interactions and decisions, employing prompt templates that automatically include relevant context, and establishing team conventions for what context AI should receive for different task types. The specific approach matters less than having a systematic approach that the team follows consistently.

Real-World Implementation Patterns

The theoretical frameworks for AI guardrails translate into specific implementation patterns that teams can adopt immediately. The first pattern involves pre-commit hooks that validate AI-generated code against quality standards before allowing commits. These hooks can verify formatting consistency, run static analysis, check for known security vulnerabilities, and enforce architectural constraints. When violations occur, the commit is rejected with specific guidance for resolution.

The second pattern involves staged code review with AI assistance. Initial review uses AI tools to identify obvious issues like formatting violations, potential bugs, or security vulnerabilities. Human reviewers then focus on architectural alignment, business logic correctness, and long-term maintainability. This two-stage approach captures AI efficiency gains while preserving human judgment for decisions requiring context that AI lacks.

The third pattern involves explicit architectural decision records that AI must reference. When developers prompt AI for implementation, they include references to relevant decision records. The AI then generates code that respects documented constraints. This requires discipline in maintaining decision records but provides concrete guardrails against architectural drift.

The fourth pattern involves regular architectural retrospectives that specifically examine AI-generated code. Teams review samples of AI-generated commits to identify patterns of architectural violation, code quality degradation, or security vulnerability. These retrospectives inform adjustments to guardrails, prompt templates, and review processes.

The fifth pattern involves model rotation for complex problems. When one AI model gets stuck, teams switch to a different model rather than continuing to iterate with the stuck model. This requires access to multiple AI providers and skills in prompt translation between models.

Measuring Success Beyond Velocity

Traditional development metrics emphasise velocity: lines of code, commits, pull requests merged, features shipped. AI assistance amplifies these metrics while potentially degrading unmeasured dimensions like code quality, architectural coherence, and long-term maintainability. Sustainable AI-assisted development requires expanding measurement to capture these dimensions.

The DORA framework has evolved to address this gap. The 2025 report introduced rework rate as a fifth core metric precisely because AI shifts where development time gets spent. Teams produce initial code faster but spend more time reviewing, validating, and correcting it. Monitoring cycle time, code review patterns, and rework rates reveals the true productivity picture that perception surveys miss.

Code health metrics provide another essential measurement dimension. GitClear's analysis tracks refactoring rate, code clone frequency, and code churn. These indicators reveal whether codebases are becoming more or less maintainable over time. When refactoring declines and clones increase, as GitClear's data shows has happened industry-wide, the codebase is accumulating debt regardless of how quickly features appear to ship. The percentage of moved or refactored lines decreased dramatically from 24.1% in 2020 to just 9.5% in 2024, while lines classified as copy-pasted or cloned rose from 8.3% to 12.3% in the same period.

Security metrics deserve explicit attention given AI's documented tendency to generate vulnerable code. The Georgetown University Centre for Security and Emerging Technology identified three broad risk categories: models generating insecure code, models themselves being vulnerable to attack and manipulation, and downstream cybersecurity impacts including feedback loops where insecure AI-generated code gets incorporated into training data for future models.

Developer experience metrics capture dimensions that productivity metrics miss. The Stack Overflow survey finding that 45% of developers report debugging AI-generated code takes more time than expected suggests that velocity gains may come at the cost of developer satisfaction and cognitive load. Sustainable AI adoption requires monitoring not just what teams produce but how developers experience the production process.

The Discipline That Enables Speed

The paradox of AI-assisted development is that achieving genuine productivity gains requires slowing down in specific ways. Establishing guardrails, maintaining context documentation, implementing architectural review, and measuring beyond velocity all represent investments that reduce immediate output. Yet without these investments, the apparent gains from AI acceleration prove illusory as technical debt accumulates, architectural coherence degrades, and debugging time compounds.

The organisations succeeding with AI coding assistance share common characteristics. They maintain rigorous code review regardless of code origin. They invest in automated testing proportional to development velocity. They track quality metrics alongside throughput metrics. They train developers to evaluate AI suggestions critically rather than accepting them reflexively.

These organisations have learned that AI coding assistants are powerful tools requiring skilled operators. In the hands of experienced developers who understand both AI capabilities and limitations, they genuinely accelerate delivery. Applied without appropriate scaffolding, they create technical debt faster than any previous development approach. Companies implementing comprehensive AI governance frameworks report 60% fewer hallucination-related incidents compared to those using AI tools without oversight controls.

The 19% slowdown documented by the METR study represents one possible outcome, not an inevitable one. But achieving better outcomes requires abandoning the comfortable perception that AI automatically makes development faster. It requires embracing the more complex reality that speed and quality require continuous, deliberate balancing.

The future belongs to developers and organisations that treat AI assistance not as magic but as another engineering discipline requiring its own skills, processes, and guardrails. The best developers of 2025 will not be the ones who generate the most lines of code with AI, but the ones who know when to trust it, when to question it, and how to integrate it responsibly. The tools are powerful. The question is whether we have the discipline to wield them sustainably.


References and Sources


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

The promotional materials are breathtaking. Artificial intelligence systems that can analyse medical scans with superhuman precision, autonomous vehicles that navigate complex urban environments, and vision-language models that understand images with the fluency of a seasoned art critic. The benchmark scores are equally impressive: 94% accuracy here, state-of-the-art performance there, human-level capabilities across dozens of standardised tests.

Then reality intrudes. A robotaxi in San Francisco fails to recognise a pedestrian trapped beneath its chassis and drags her twenty feet before stopping. An image recognition system confidently labels photographs of Black individuals as gorillas. A frontier AI model, asked to count the triangles in a simple geometric image, produces answers that would embarrass a primary school student. These are not edge cases or adversarial attacks designed to break the system. They represent the routine failure modes of technologies marketed as transformative advances in machine intelligence.

The disconnect between marketed performance and actual user experience has become one of the defining tensions of the artificial intelligence era. It raises uncomfortable questions about how we measure machine intelligence, what incentives shape the development and promotion of AI systems, and whether the public has been sold a vision of technological capability that fundamentally misrepresents what these systems can and cannot do. Understanding this gap requires examining the architecture of how AI competence is assessed, the economics that drive development priorities, and the cognitive science of what these systems actually understand about the world they purport to perceive.

The Benchmark Mirage

To understand why AI systems that excel on standardised tests can fail so spectacularly in practice, one must first examine how performance is measured. The Stanford AI Index Report 2025 documented a striking phenomenon: many benchmarks that researchers use to evaluate AI capabilities have become “saturated,” meaning systems score so high that the tests are no longer useful for distinguishing between models. This saturation has occurred across domains including general knowledge, reasoning about images, mathematics, and coding. The Visual Question Answering Challenge, for instance, now sees top-performing models achieving 84.3% accuracy, while the human baseline sits at approximately 80%.

The problem runs deeper than simple test exhaustion. Research conducted by MIT's Computer Science and Artificial Intelligence Laboratory revealed that “traditionally, object recognition datasets have been skewed towards less-complex images, a practice that has led to an inflation in model performance metrics, not truly reflective of a model's robustness or its ability to tackle complex visual tasks.” The researchers developed a new metric called “minimum viewing time” which quantifies the difficulty of recognising an image based on how long a person needs to view it before making a correct identification. When researchers at MIT developed ObjectNet, a dataset comprising images collected from real-life settings rather than curated repositories, they discovered substantial performance gaps between laboratory conditions and authentic deployment scenarios.

This discrepancy reflects a phenomenon that economists have studied for decades: Goodhart's Law, which states that when a measure becomes a target, it ceases to be a good measure. A detailed 68-page analysis from researchers at Cohere, Stanford, MIT, and the Allen Institute for AI documented systematic distortions in how companies approach AI evaluation. The researchers found that major technology firms including Meta, OpenAI, Google, and Amazon were able to “privately pit many model versions in the Arena and then only publish the best results.” This practice creates a misleading picture of consistent high performance rather than the variable and context-dependent capabilities that characterise real AI systems.

The problem of data contamination compounds these issues. When testing GPT-4 on benchmark problems from Codeforces in 2023, researchers found the model could regularly solve problems classified as easy, provided they had been added before September 2021. For problems added later, GPT-4 could not solve a single question correctly. The implication is stark: the model had memorised questions and answers from its training data rather than developing genuine problem-solving capabilities. As one research team observed, the “AI industry has turned benchmarks into targets, and now those benchmarks are failing us.”

The consequence of this gaming dynamic extends beyond misleading metrics. It shapes the entire trajectory of AI development, directing research effort toward whatever narrow capabilities will boost leaderboard positions rather than toward the robust, generalisable intelligence that practical applications require.

Counting Failures and Compositional Collapse

Perhaps nothing illustrates the gap between benchmark performance and real-world competence more clearly than the simple task of counting objects in an image. Research published in late 2024 introduced VLMCountBench, a benchmark testing vision-language models on counting tasks using only basic geometric shapes such as triangles and circles. The findings were revealing: while these sophisticated AI systems could count reliably when only one shape type was present, they exhibited substantial failures when multiple shape types were combined. This phenomenon, termed “compositional counting failure,” suggests that these systems lack the discrete object representations that make counting trivial for humans.

This limitation has significant implications for practical applications. A study using Bongard problems, visual puzzles that test pattern recognition and abstraction, found that humans achieved an 84% success rate on average, while the best-performing vision-language model, GPT-4o, managed only 17%. The researchers noted that “even elementary concepts that may seem trivial to humans, such as simple spirals, pose significant challenges” for these systems. They observed that “most models misinterpreted or failed to count correctly, suggesting challenges in AI's visual counting capabilities.”

Text-to-image generation systems demonstrate similar limitations. Research on the T2ICountBench benchmark revealed that “all state-of-the-art diffusion models fail to generate the correct number of objects, with accuracy dropping significantly as the number of objects increases.” When asked to generate an image of ten oranges, these systems frequently produce either substantially more or fewer items than requested. The failure is not occasional or marginal but systematic and predictable. As one research paper noted, “depicting a specific number of objects in the image with text conditioning often fails to capture the exact quantity of details.”

These counting failures point to a more fundamental issue in how current AI architectures process visual information. Unlike human cognition, which appears to involve discrete object representations and symbolic reasoning about quantities, large vision-language models operate on statistical patterns learned from training data. They can recognise that images containing many objects of a certain type tend to have particular visual characteristics, but they lack what researchers call robust “world models” that would allow them to track individual objects and their properties reliably.

The practical implications extend far beyond academic curiosity. Consider an AI system deployed to monitor inventory in a warehouse, assess damage after a natural disaster, or count cells in a medical sample. Systematic failures in numerical accuracy would render such applications unreliable at best and dangerous at worst.

The Architectural Divide

The question of whether these failures represent fundamental limitations of current AI architectures or merely training deficiencies remains actively debated. Gary Marcus, professor emeritus of psychology and neural science at New York University and author of the 2024 book “Taming Silicon Valley: How We Can Ensure That AI Works for Us,” has argued consistently that neural networks face inherent constraints in tasks requiring abstraction and symbolic reasoning.

Marcus has pointed to a problem he first demonstrated in 1998: neural networks trained on even numbers could generalise to some new even numbers, but when tested on odd numbers, they would systematically fail. He concluded that “these tools are good at interpolating functions, but not very good at extrapolating functions.” This distinction between interpolation within known patterns and extrapolation to genuinely novel situations lies at the heart of the benchmark-reality gap.

Marcus characterises current large language models as systems that “work at the extensional level, but they don't work at the intentional level. They are not getting the abstract meaning of anything.” The chess-playing failures of models like ChatGPT, which Marcus has documented attempting illegal moves such as having a Queen jump over a knight, illustrate how systems can “approximate the game of chess, but can't play it reliably because it never induces a proper world model of the board and the rules.” He has emphasised that these systems “still fail at abstraction, at reasoning, at keeping track of properties of individuals. I first wrote about hallucinations in 2001.”

Research on transformer architectures, the technical foundation underlying most modern AI systems, has identified specific limitations in spatial reasoning. A 2024 paper titled “On Limitations of the Transformer Architecture” identified “fundamental incompatibility with the Transformer architecture for certain problems, suggesting that some issues should not be expected to be solvable in practice indefinitely.” The researchers documented that “when prompts involve spatial information, transformer-based systems appear to have problems with composition.” Simple cases where temporal composition fails cause all state-of-the-art models to return incorrect answers.

The limitations extend to visual processing as well. Research has found that “ViT learns long-range dependencies via self-attention between image patches to understand global context, but the patch-based positional encoding mechanism may miss relevant local spatial information and usually cannot attain the performance of CNNs on small-scale datasets.” This architectural limitation has been highlighted particularly in radiology applications where critical findings are often minute and contained within small spatial locations.

Melanie Mitchell, professor at the Santa Fe Institute whose research focuses on conceptual abstraction and analogy-making in artificial intelligence, has offered a complementary perspective. Her recent work includes a 2025 paper titled “Do AI models perform human-like abstract reasoning across modalities?” which examines whether these systems engage in genuine reasoning or sophisticated pattern matching. Mitchell has argued that “there's a lot of evidence that LLMs aren't reasoning abstractly or robustly, and often over-rely on memorised patterns in their training data, leading to errors on 'out of distribution' problems.”

Mitchell identifies a crucial gap in current AI systems: the absence of “rich internal models of the world.” As she notes, “a tenet of modern cognitive science is that humans are not simply conditioned-reflex machines; instead, we have inside our heads abstracted models of the physical and social worlds that reflect the causes of events rather than merely correlations among them.” Current AI systems, despite their impressive performance on narrow benchmarks, appear to lack this causal understanding.

An alternative view holds that these limitations may be primarily a consequence of training data rather than architectural constraints. Some researchers hypothesise that “the limited spatial reasoning abilities of current VLMs is not due to a fundamental limitation of their architecture, but rather is a limitation in common datasets available at scale on which such models are trained.” This perspective suggests that co-training multimodal models on synthetic spatial data could potentially address current weaknesses. Additionally, researchers note that “VLMs' limited spatial reasoning capability may be due to the lack of 3D spatial knowledge in training data.”

When Failures Cause Harm

The gap between benchmark performance and real-world capability becomes consequential when AI systems are deployed in high-stakes domains. The case of autonomous vehicles provides particularly sobering examples. According to data compiled by researchers at Craft Law Firm, between 2021 and 2024, there were 3,979 incidents involving autonomous vehicles in the United States, resulting in 496 reported injuries and 83 fatalities. The Stanford AI Index Report 2025 noted that the AI Incidents Database recorded 233 incidents in 2024, a 56.4% increase compared to 2023, marking a record high.

In May 2025, Waymo recalled over 1,200 robotaxis following disclosure of a software flaw that made vehicles prone to colliding with certain stationary objects, specifically “thin or suspended barriers like chains, gates, and even utility poles.” These objects, which human drivers would navigate around without difficulty, apparently fell outside the patterns the perception system had learned to recognise. Investigation revealed failures in the system's ability to properly classify and respond to stationary objects under certain lighting and weather conditions. As of April 2024, Tesla's Autopilot system had been involved in at least 13 fatal crashes according to NHTSA data, with Tesla's Full Self-Driving system facing fresh regulatory scrutiny in January 2025.

The 2018 Uber fatal accident in Tempe, Arizona, illustrated similar limitations. The vehicle's sensors detected a pedestrian, but the AI system failed to classify her accurately as a human, leading to a fatal collision. The safety driver was distracted by a mobile device and did not intervene in time. As researchers have noted, “these incidents reveal a fundamental problem with current AI systems: they excel at pattern recognition in controlled environments but struggle with edge cases that human drivers handle instinctively.” The failure to accurately classify the pedestrian as a human being highlighted a critical weakness in object recognition capabilities, particularly in low-light conditions and complex environments.

A particularly disturbing incident involved General Motors' Cruise robotaxi in San Francisco, where the vehicle struck a pedestrian who had been thrown into its path by another vehicle, then dragged her twenty feet before stopping. The car's AI systems failed to recognise that a human being was trapped underneath the vehicle. When the system detected an “obstacle,” it continued to move, causing additional severe injuries.

These cases highlight how AI systems that perform admirably on standardised perception benchmarks can fail catastrophically when encountering situations not well-represented in their training data. The gap between laboratory performance and deployment reality is not merely academic; it translates directly into physical harm.

The Gorilla Problem That Never Went Away

One of the most persistent examples of AI visual recognition failure involves the 2015 incident in which Google Photos labelled photographs of Black individuals as “gorillas.” In that incident, a Black software developer tweeted that Google Photos had labelled images of him with a friend as “gorillas.” The incident exposed how image recognition algorithms trained on biased data can produce racist outputs. Google's response was revealing: rather than solving the underlying technical problem, the company blocked the words “gorilla,” “chimpanzee,” “monkey,” and related terms from the system entirely.

Nearly a decade later, that temporary fix remains in place. By censoring these searches, the service can no longer find primates such as “gorilla,” “chimp,” “chimpanzee,” or “monkey.” Despite enormous advances in AI technology since 2015, Google Photos still refuses to label images of gorillas. This represents a tacit acknowledgement that the fundamental problem has not been solved, only circumvented. The workaround creates a peculiar situation where one of the world's most advanced image recognition systems cannot identify one of the most recognisable animals on Earth. As one analysis noted, “Apple learned from Google's mistake and simply copied their fix.”

The underlying issue extends beyond a single company's product. Research has consistently documented that commercially available facial recognition technologies perform far worse on darker-skinned individuals, particularly women. Three commercially available systems made by Microsoft, IBM, and Megvii misidentified darker female faces nearly 35% of the time while achieving near-perfect accuracy (99%) on white men.

These biases have real consequences. Cases such as Ousmane Bah, a teenager wrongly accused of theft at an Apple Store because of faulty face recognition, and Amara K. Majeed, wrongly accused of participating in the 2019 Sri Lanka bombings after her face was misidentified, demonstrate how AI failures disproportionately harm marginalised communities. The technology industry's approach of deploying these systems despite known limitations and then addressing failures reactively raises serious questions about accountability and the distribution of risk.

The Marketing Reality Gap

The discrepancy between how AI capabilities are marketed and how they perform in practice reflects a broader tension in the technology industry. A global study led by Professor Nicole Gillespie at Melbourne Business School surveying over 48,000 people across 47 countries between November 2024 and January 2025 found that although 66% of respondents already use AI with some regularity, less than half (46%) are willing to trust it. Notably, this represents a decline in trust compared to surveys conducted prior to ChatGPT's release in 2022. People have become less trusting and more worried about AI as adoption has increased.

The study found that consumer distrust is growing significantly: 63% of consumers globally do not trust AI with their data, up from 44% in 2024. In the United Kingdom, the situation is even starker, with 76% of shoppers feeling uneasy about AI handling their information. Research from the Nuremberg Institute for Market Decisions showed that only 21% of respondents trust AI companies and their promises, and only 20% trust AI itself. These findings reveal “a notable gap between general awareness of AI in marketing and a deeper understanding or trust in its application.”

Emily Bender, professor of linguistics at the University of Washington and one of the authors of the influential 2021 “stochastic parrots” paper, has been a prominent voice challenging AI hype. Bender was recognised in TIME Magazine's first 100 Most Influential People in Artificial Intelligence and is the author of the upcoming book “The AI Con: How to Fight Big Tech's Hype and Create the Future We Want.” She has argued that “so much of what we read about language technology and other things that get called AI makes the technology sound magical. It makes it sound like it can do these impossible things, and that makes it that much easier for someone to sell a system that is supposedly objective but really just reproduces systems of oppression.”

The practical implications of this marketing-reality gap are significant. A McKinsey global survey in early 2024 found that 65% of respondents said their organisations use generative AI in some capacity, nearly double the share from ten months prior. However, despite widespread experimentation, “comprehensive integration of generative AI into core business operations remains limited.” A 2024 Deloitte study noted that “organisational change only happens so fast” despite rapid AI advances, meaning many companies are deliberately testing in limited areas before scaling up.

The gap is particularly striking in mental health applications. Despite claims that AI is replacing therapists, only 21% of the 41% of adults who sought mental health support in the past six months turned to AI, representing only 9% of the total population. The disconnect between hype and actual behaviour underscores how marketing narratives can diverge sharply from lived reality.

Hallucinations and Multimodal Failures

The problem of AI systems generating plausible but incorrect outputs, commonly termed “hallucinations,” extends beyond text into visual domains. Research published in 2024 documented that multimodal large language models “often generate outputs that are inconsistent with the visual content, a challenge known as hallucination, which poses substantial obstacles to their practical deployment and raises concerns regarding their reliability in real-world applications.”

Object hallucination represents a particularly problematic failure mode, occurring when models identify objects that do not exist in an image. Researchers have developed increasingly sophisticated benchmarks to evaluate these failures. ChartHal, a benchmark featuring a taxonomy of hallucination scenarios in chart understanding, demonstrated that “state-of-the-art LVLMs suffer from severe hallucinations” when interpreting visual data.

The VHTest benchmark introduced in 2024 comprises 1,200 diverse visual hallucination instances across eight modes. Medical imaging presents particular risks: the MediHall Score benchmark was developed specifically to assess hallucinations in medical contexts through a hierarchical scoring system. When AI systems hallucinate in clinical settings, the consequences can be life-threatening.

Mitigation efforts have shown some promise. One recent framework operating entirely with frozen, pretrained vision-language models and requiring no gradient updates “reduces hallucination rates by 9.8 percentage points compared to the baseline, while improving object existence accuracy by 4.7 points on adversarial splits.” Research by Yu et al. (2023) explored human error detection to mitigate hallucinations, successfully reducing them by 44.6% while maintaining competitive performance.

However, Gary Marcus has argued that there is “no principled solution to hallucinations in systems that traffic only in the statistics of language without explicit representation of facts and explicit tools to reason over those facts.” This perspective suggests that hallucinations are not bugs to be fixed but fundamental characteristics of current architectural approaches. He advocates for neurosymbolic AI, which would combine neural networks with symbolic AI, making an analogy to Daniel Kahneman's System One and System Two thinking.

The ARC Challenge and the Limits of Pattern Matching

Francois Chollet, the creator of Keras, an open-source deep learning library adopted by over 2.5 million developers, introduced the Abstraction and Reasoning Corpus (ARC) in 2019 as a benchmark designed to measure fluid intelligence rather than narrow task performance. ARC consists of 800 puzzle-like tasks designed as grid-based visual reasoning problems. These tasks, trivial for humans but challenging for machines, typically provide only a small number of example input-output pairs, usually around three.

What makes ARC distinctive is its focus on measuring the ability to “generalise from limited examples, interpret symbolic meaning, and flexibly apply rules in varying contexts.” Unlike benchmarks that can be saturated through extensive training on similar problems, ARC tests precisely the kind of novel reasoning that current AI systems struggle to perform. The benchmark “requires the test taker to deduce underlying rules through abstraction, inference, and prior knowledge rather than brute-force or extensive training.”

From its introduction in 2019 until late 2024, ARC remained essentially unsolved by AI systems, maintaining its reputation as one of the toughest benchmarks available for general intelligence. The ARC Prize competition, co-founded by Mike Knoop and Francois Chollet, saw 1,430 teams submit 17,789 entries in 2024. The state-of-the-art score on the ARC private evaluation set increased from 33% to 55.5% during the competition period, propelled by techniques including deep learning-guided program synthesis and test-time training. More than $125,000 in prizes were awarded across top papers and top scores.

While this represents meaningful progress, it remains far below human performance and the 85% threshold set for the $500,000 grand prize. The persistent difficulty of ARC highlights a crucial distinction: current AI systems excel at tasks that can be solved through pattern recognition and interpolation within training distributions but struggle with the kind of abstract reasoning that humans perform effortlessly.

Trust Erosion and the Normalisation of Failure

Research on human-AI interaction has documented asymmetric trust dynamics: building trust in AI takes more time compared to building trust in humans, but when AI encounters problems, trust loss occurs more rapidly. Studies have found that simpler tasks show greater degradation of trust following errors, suggesting that failures on tasks perceived as easy may be particularly damaging to user confidence.

This pattern reflects what researchers term “perfect automation schema,” the tendency for users to expect flawless performance from AI systems and interpret any deviation as evidence of fundamental inadequacy rather than normal performance variation. The marketing of AI as approaching or exceeding human capabilities may inadvertently amplify this effect by setting unrealistic expectations.

Research comparing early and late errors found that initial errors affect trust development more negatively than late ones in some studies, while others found that trust dropped most for late mistakes. The explanation may be that early mistakes allow people to adjust expectations over time, whereas trust damaged at a later stage proves more difficult to repair. Research has found that “explanations that combine causal attribution (explaining why the error occurred) with boundary specification (identifying system limitations) prove most effective for competence-based trust repair.”

The normalisation of AI failures presents a concerning trajectory. If users come to expect that AI systems will periodically produce nonsensical or harmful outputs, they may either develop excessive caution that undermines legitimate use cases or, alternatively, become desensitised to failures in ways that increase risk. Neither outcome serves the goal of beneficial AI deployment.

Measuring Intelligence or Measuring Training

The fundamental question underlying these failures concerns what benchmarks actually measure. The dramatic improvement in AI performance on new benchmarks shortly after their introduction, documented by the Stanford AI Index, suggests that current systems are exceptionally effective at optimising for whatever metrics researchers define. In 2023, AI systems could solve just 4.4% of coding problems on SWE-bench. By 2024, this figure had jumped to 71.7%. Performance on MMMU and GPQA saw gains of 18.8 and 48.9 percentage points respectively.

This pattern of rapid benchmark saturation has led some researchers to question whether improvements reflect genuine capability gains or increasingly sophisticated ways of matching test distributions. The Stanford report noted that despite strong benchmark performance, “AI models excel at tasks like International Mathematical Olympiad problems but still struggle with complex reasoning benchmarks like PlanBench. They often fail to reliably solve logic tasks even when provably correct solutions exist.”

The narrowing performance gaps between models further complicate the picture. According to the AI Index, the Elo score difference between the top and tenth-ranked model on the Chatbot Arena Leaderboard was 11.9% in 2023. By early 2025, this gap had narrowed to just 5.4%. Similarly, the difference between the top two models shrank from 4.9% in 2023 to just 0.7% in 2024.

The implications for AI development are significant. If benchmarks are increasingly unreliable guides to real-world performance, the incentive structure for AI research may be misaligned with the goal of building genuinely capable systems. Companies optimising for benchmark rankings may invest disproportionately in test-taking capabilities at the expense of robustness and reliability in deployment.

Francois Chollet has framed this concern explicitly, arguing that ARC-style tasks test “the ability to generalise from limited examples, interpret symbolic meaning, and flexibly apply rules in varying contexts” rather than the ability to recognise patterns encountered during training. The distinction matters profoundly for understanding what current AI systems can and cannot do.

Reshaping Expectations and Rebuilding Trust

Addressing the gap between marketed performance and actual capability will require changes at multiple levels. Researchers have begun developing dynamic benchmarks that are regularly updated to prevent data contamination. LiveBench, for example, is updated with new questions monthly, many from recently published sources, ensuring that performance cannot simply reflect memorisation of training data. This approach represents “a close cousin of the private benchmark” that keeps benchmarks fresh without worrying about contamination.

Greater transparency about the conditions under which AI systems perform well or poorly would help users develop appropriate expectations. OpenAI's documentation acknowledges that their models struggle with “tasks requiring precise spatial localisation, such as identifying chess positions” and “may generate incorrect descriptions or captions in certain scenarios.” Such candour, while not universal in the industry, represents a step toward more honest communication about system limitations.

The AI Incidents Database, maintained by the Partnership on AI, and the AIAAIC Repository provide systematic tracking of AI failures. The AIAAIC documented that in 2024, while incidents declined to 187 compared to the previous year, issues surged to 188, the highest number recorded, totalling 375 occurrences, ten times more than in 2016. Accuracy and reliability and safety topped the list of incident categories. OpenAI, Tesla, Google, and Meta account for the highest number of AI-related incidents in the repository.

Academic researchers have proposed that evaluation frameworks should move beyond narrow task performance to assess broader capabilities including robustness to distribution shift, calibration of confidence, and graceful degradation when facing unfamiliar inputs. Melanie Mitchell has argued that “AI systems ace benchmarks yet stumble in the real world, and it's time to rethink how we probe intelligence in machines.”

Mitchell maintains that “just scaling up these same kinds of models will not solve these problems. Some new approach has to be created, as there are basic capabilities that current architectures and training methods aren't going to overcome.” She notes that current models “are not learning from their mistakes in any long-term sense. They can't carry learning from one session to another. They also have no 'episodic memory,' unlike humans who learn from experiences, mistakes, and successes.”

The gap between benchmark performance and real-world capability is not simply a technical problem awaiting a technical solution. It reflects deeper questions about how we define and measure intelligence, what incentives shape technology development, and how honest we are prepared to be about the limitations of systems we deploy in consequential domains. The answers to these questions will shape not only the trajectory of AI development but also the degree to which public trust in these technologies can be maintained or rebuilt.

For now, the most prudent stance may be one of calibrated scepticism: appreciating what AI systems can genuinely accomplish while remaining clear-eyed about what they cannot. The benchmark scores may be impressive, but the measure of a technology's value lies not in how it performs in controlled conditions but in how it serves us in the messy, unpredictable complexity of actual use.


References and Sources


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

Somewhere in a data warehouse, a customer record sits incomplete. A postcode field contains only the first half of its expected value. An email address lacks its domain. A timestamp references a date that never existed. These fragments of broken data might seem trivial in isolation, but multiply them across millions of records and the consequences become staggering. According to Gartner research, poor data quality costs organisations an average of $12.9 million annually, whilst MIT Sloan Management Review research with Cork University Business School found that companies lose 15 to 25 percent of revenue each year due to data quality failures.

The challenge facing modern enterprises is not merely detecting these imperfections but deciding what to do about them. Should a machine learning algorithm guess at the missing values? Should a rule-based system fill gaps using statistical averages? Or should a human being review each problematic record individually? The answer, as it turns out, depends entirely on what you are trying to protect and what you can afford to lose.

The Anatomy of Broken Content

Before examining solutions, it is worth understanding what breaks and why. Content can fail in countless ways: fields left empty during data entry, format inconsistencies introduced during system migrations, encoding errors from international character sets, truncation from legacy database constraints, and corruption from network transmission failures. Each failure mode demands a different repair strategy.

The taxonomy of data quality dimensions provides a useful framework. Researchers have identified core metrics including accuracy, completeness, consistency, timeliness, validity, availability, and uniqueness. A missing value represents a completeness failure. A postcode that does not match its corresponding city represents a consistency failure. A price expressed in pounds where euros were expected represents a validity failure. Each dimension requires different detection logic and repair approaches.

The scale of these problems is often underestimated. A systematic survey of software tools dedicated to data quality identified 667 distinct platforms, reflecting the enormity of the challenge organisations face. Traditional approaches relied on manually generated criteria to identify issues, a process that was both time-consuming and resource-intensive. Newer systems leverage machine learning to automate rule creation and error identification, producing more consistent and accurate outputs.

Modern data quality tools have evolved to address these varied failure modes systematically. Platforms such as Great Expectations, Monte Carlo, Anomalo, and dbt have emerged as industry standards for automated detection. Great Expectations, an open-source Python library, allows teams to define validation rules and run them continuously across data pipelines. The platform supports schema validation to ensure data conforms to specified structures, value range validation to confirm data falls within expected bounds, and row count validation to verify record completeness. This declarative approach to data quality has gained significant traction, with the tool now integrating seamlessly with Apache Airflow, Apache Spark, dbt, and cloud platforms including Snowflake and BigQuery.

Monte Carlo has taken a different approach, pioneering what the industry calls data observability. The platform uses unsupervised machine learning to detect anomalies across structured, semi-structured, and unstructured data without requiring manual configuration. According to Gartner estimates, by 2026, 50 percent of enterprises implementing distributed data architectures will adopt data observability tools, up from less than 20 percent in 2024. This projection reflects a fundamental shift in how organisations think about data quality: from reactive firefighting to proactive monitoring. The company, having raised $200 million in Series E funding at a $3.5 billion valuation, counts organisations including JetBlue and Nasdaq among its enterprise customers.

The Three Pillars of Automated Repair

Once malformed content is detected, organisations face a crucial decision: how should it be repaired? Three distinct approaches have emerged, each with different risk profiles, resource requirements, and accuracy characteristics.

Heuristic Imputation: The Statistical Foundation

The oldest and most straightforward approach to data repair relies on statistical heuristics. When a value is missing, replace it with the mean, median, or mode of similar records. When a format is inconsistent, apply a transformation rule. When a constraint is violated, substitute a default value. These methods are computationally cheap, easy to understand, and broadly applicable.

Mean imputation, for instance, calculates the average of all observed values for a given field and uses that figure to fill gaps. If customer ages range from 18 to 65 with an average of 42, every missing age field receives the value 42. This approach maintains the overall mean of the dataset but introduces artificial clustering around that central value, distorting the true distribution of the data. Analysts working with mean-imputed data may draw incorrect conclusions about population variance and make flawed predictions as a result.

Regression imputation offers a more sophisticated alternative. Rather than using a single value, regression models predict missing values based on relationships with other variables. A missing salary figure might be estimated from job title, years of experience, and geographic location. This preserves some of the natural variation in the data but assumes linear relationships that may not hold in practice. When non-linear relationships exist between variables, linear regression-based imputation performs poorly, creating systematic errors that propagate through subsequent analyses.

Donor-based imputation, used extensively by statistical agencies including Statistics Canada, the U.S. Bureau of Labor Statistics, and the U.S. Census Bureau, takes values from similar observed records and applies them to incomplete ones. For each recipient with a missing value, a donor is identified based on similarity across background characteristics. This approach preserves distributional properties more effectively than mean imputation but requires careful matching criteria to avoid introducing bias.

The fundamental limitation of all heuristic methods is their reliance on assumptions. Mean imputation assumes values cluster around a central tendency. Regression imputation assumes predictable relationships between variables. Donor imputation assumes that similar records should have similar values. When these assumptions fail, the repairs introduce systematic errors that compound through downstream analyses.

Machine Learning Inference: The Algorithmic Frontier

Machine learning approaches to data repair represent a significant evolution from statistical heuristics. Rather than applying fixed rules, ML algorithms learn patterns from the data itself and use those patterns to generate contextually appropriate repairs.

K-nearest neighbours (KNN) imputation exemplifies this approach. The algorithm identifies records most similar to the incomplete one across multiple dimensions, then uses values from those neighbours to fill gaps. Research published in BMC Medical Informatics found that KNN algorithms demonstrated the overall best performance as assessed by mean squared error, with results independent from the mechanism of randomness and applicable to both Missing at Random (MAR) and Missing Completely at Random (MCAR) data. Due to its simplicity, comprehensibility, and relatively high accuracy, the KNN approach has been successfully deployed in real data processing applications at major statistical agencies.

However, the research revealed an important trade-off. While KNN with higher k values (more neighbours) reduced imputation errors, it also distorted the underlying data structure. The use of three neighbours in conjunction with feature selection appeared to provide the best balance between imputation accuracy and preservation of data relationships. This finding underscores a critical principle: repair methods must be evaluated not only on how accurately they fill gaps but on how well they preserve the analytical value of the dataset. Research on longitudinal prenatal data found that using five nearest neighbours with appropriate temporal segmentation provided imputed values with the least error, with no difference between actual and predicted values for 64 percent of deleted segments.

MissForest, an iterative imputation method based on random forests, has emerged as a particularly powerful technique for complex datasets. By averaging predictions across many decision trees, the algorithm handles mixed data types and captures non-linear relationships that defeat simpler methods. Original evaluations showed missForest reducing imputation error by more than 50 percent compared to competing approaches, particularly in datasets with complex interactions. The algorithm uses built-in out-of-bag error estimates to assess imputation accuracy without requiring separate test sets, enabling continuous quality monitoring during the imputation process.

Yet missForest is not without limitations. Research published in BMC Medical Research Methodology found that while the algorithm achieved high predictive accuracy for individual missing values, it could produce severely biased regression coefficient estimates when imputed variables were used in subsequent statistical analyses. The algorithm's tendency to predict toward variable means introduced systematic distortions that accumulated through downstream modelling. This finding led researchers to conclude that random forest-based imputation should not be indiscriminately used as a universal solution; correct analysis requires careful assessment of the missing data mechanism and the interrelationships between variables.

Multiple Imputation by Chained Equations (MICE), sometimes called fully conditional specification, represents another sophisticated ML-based approach. Rather than generating a single imputed dataset, MICE creates multiple versions, each with different plausible values for missing entries. This technique accounts for statistical uncertainty in the imputations and has emerged as a standard method in statistical research. The MICE algorithm, first appearing in 2000 as an S-PLUS library and subsequently as an R package in 2001, can impute mixes of continuous, binary, unordered categorical, and ordered categorical data whilst maintaining consistency through passive imputation. The approach preserves variable distributions and relationships between variables more effectively than univariate imputation methods, though it requires significant computational resources and expertise to implement correctly. Generally, ten cycles are performed during imputation, though research continues on identifying optimal iteration counts under different conditions.

The general consensus from comparative research is that ML-based methods preserve data distribution better than simple imputations, whilst hybrid techniques combining multiple approaches yield the most robust results. Optimisation-based imputation methods have demonstrated average reductions in mean absolute error of 8.3 percent against the best cross-validated benchmark methods across diverse datasets. Studies have shown that the choice of imputation method directly influences how machine learning models interpret and rank features; proper feature importance analysis ensures models rely on meaningful predictors rather than artefacts of data preprocessing.

Human Review: The Accuracy Anchor

Despite advances in automation, human review remains essential for certain categories of data repair. The reason is straightforward: humans can detect subtle, realistic-sounding failure cases that automated systems routinely miss. A machine learning model might confidently predict a plausible but incorrect value. A human reviewer can recognise contextual signals that indicate the prediction is wrong. Humans can distinguish between technically correct responses and actually helpful responses, a distinction that proves critical when measuring user satisfaction, retention, or trust.

Field studies have demonstrated that human-in-the-loop approaches can maintain accuracy levels of 87 percent whilst reducing annotation costs by 62 percent and time requirements by a factor of three. The key is strategic allocation of human effort. Automated systems handle routine cases whilst human experts focus on ambiguous, complex, or high-stakes situations. One effective approach combines multiple prompts or multiple language models and calculates the entropy of predictions to determine whether automated annotation is reliable enough or requires human review.

Research on automated program repair in software engineering has illuminated the trust dynamics at play. Studies found that whether code repairs were produced by humans or automated systems significantly influenced trust perceptions and intentions. The research also discovered that test suite provenance, whether tests were written by humans or automatically generated, had a significant effect on patch quality, with developer-written tests typically producing higher-quality repairs. This finding extends to data repair: organisations may be more comfortable deploying automated repairs for low-risk fields whilst insisting on human review for critical business data.

Combined human-machine systems have demonstrated superior performance in domains where errors carry serious consequences. Medical research has shown that collaborative approaches outperform both human-only and ML-only systems in tasks such as identifying breast cancer from medical imaging. The principle translates directly to data quality: neither humans nor machines should work alone.

The optimal hybrid approach involves iterative annotation. Human annotators initially label a subset of problematic records, the automated system learns from these corrections and makes predictions on new records, human annotators review and correct errors, and the cycle repeats. Uncertainty sampling focuses human attention on cases where the automated system has low confidence, maximising the value of human expertise whilst minimising tedious review of straightforward cases. This approach allows organisations to manage costs while maintaining efficiency by strategically allocating human involvement.

Matching Methods to Risk Profiles

The choice between heuristic, ML-based, and human-mediated repair depends critically on the risk profile of the data being repaired. Three factors dominate the decision.

Consequence of Errors: What happens if a repair is wrong? For marketing analytics, an incorrectly imputed customer preference might result in a slightly suboptimal campaign. For financial reporting, an incorrectly imputed transaction amount could trigger regulatory violations. For medical research, an incorrectly imputed lab value could lead to dangerous treatment decisions. The higher the stakes, the stronger the case for human review.

Volume and Velocity: How much data requires repair, and how quickly must it be processed? Human review scales poorly. A team of analysts might handle hundreds of records per day; automated systems can process millions. Real-time pipelines using technologies such as Apache Kafka and Apache Spark Streaming demand automated approaches simply because human review cannot keep pace. These architectures handle millions of messages per second with built-in fault tolerance and horizontal scalability.

Structural Complexity: How complicated are the relationships between variables? Simple datasets with independent fields can be repaired effectively using basic heuristics. Complex datasets with intricate interdependencies between variables require sophisticated ML approaches that can model those relationships. Research consistently shows that missForest and similar algorithms excel when complex interactions and non-linear relations are present.

A practical framework emerges from these considerations. Low-risk, high-volume data with simple structure benefits from heuristic imputation: fast, cheap, good enough. Medium-risk data with moderate complexity warrants ML-based approaches: better accuracy, acceptable computational cost. High-risk data, regardless of volume or complexity, requires human review: slower and more expensive, but essential for protecting critical business processes.

Enterprise Toolchains in Practice

The theoretical frameworks for data repair translate into concrete toolchains that enterprises deploy across their data infrastructure. Understanding these implementations reveals how organisations balance competing demands for speed, accuracy, and cost.

Detection Layer: Modern toolchains begin with continuous monitoring. Great Expectations provides declarative validation rules that run against data as it flows through pipelines. Teams define expectations such as column values should be unique, values should fall within specified ranges, or row counts should match expected totals. The platform generates validation reports and can halt pipeline execution when critical checks fail. Data profiling capabilities generate detailed summaries including statistical measures, distributions, and patterns that can be compared over time to identify changes indicating potential issues.

dbt (data build tool) has emerged as a complementary technology, with over 60,000 teams worldwide relying on it for data transformation and testing. The platform includes built-in tests for common quality checks: unique values, non-null constraints, accepted value ranges, and referential integrity between tables. About 40 percent of dbt projects run tests each week, reflecting the integration of quality checking into routine data operations. The tool has been recognised as both Snowflake Data Cloud Partner of the Year and Databricks Customer Impact Partner of the Year, reflecting its growing enterprise importance.

Monte Carlo and Anomalo represent the observability layer, using machine learning to detect anomalies that rule-based systems miss. These platforms monitor for distribution drift, schema changes, volume anomalies, and freshness violations. When anomalies are detected, automated alerts trigger investigation workflows. Executive-level dashboards present key metrics including incident frequency, mean time to resolution, platform adoption rates, and overall system uptime with automated updates.

Repair Layer: Once issues are detected, repair workflows engage. ETL platforms such as Oracle Data Integrator and Talend provide error handling within transformation layers. Invalid records can be redirected to quarantine areas for later analysis, ensuring problematic data does not contaminate target systems whilst maintaining complete data lineage. When completeness failures occur, graduated responses match severity to business impact: minor gaps generate warnings for investigation, whilst critical missing data that would corrupt financial reporting halts pipeline processing entirely.

AI-powered platforms have begun automating repair decisions. These systems detect and correct incomplete, inconsistent, and incorrect records in real time, reducing manual effort by up to 50 percent according to vendor estimates. The most sophisticated implementations combine rule-based repairs for well-understood issues with ML-based imputation for complex cases and human escalation for high-risk or ambiguous situations.

Orchestration Layer: Apache Airflow, Prefect, and similar workflow orchestration tools coordinate the components. A typical pipeline might ingest data from source systems, run validation checks, route records to appropriate repair workflows based on error types and risk levels, apply automated corrections where confidence is high, queue uncertain cases for human review, and deliver cleansed data to target systems.

Schema registries, particularly in Kafka-based architectures, enforce data contracts at the infrastructure level. Features include schema compatibility checking, versioning support, and safe evolution of data structures over time. This proactive approach prevents many quality issues before they occur, ensuring data compatibility across distributed systems.

Measuring Business Impact

Deploying sophisticated toolchains is only valuable if organisations can demonstrate meaningful business outcomes. The measurement challenge is substantial: unlike traditional IT projects with clear cost-benefit calculations, data quality initiatives produce diffuse benefits that are difficult to attribute. Research has highlighted organisational and managerial challenges in realising value from analytics, including cultural resistance, poor data quality, and the absence of clear goals.

Discovery Improvements

One of the most tangible benefits of improved data quality is enhanced data discovery. When data is complete, consistent, and well-documented, analysts can find relevant datasets more quickly and trust what they find. Organisations implementing data governance programmes have reported researchers locating relevant datasets 60 percent faster, with report errors reduced by 35 percent and exploratory analysis time cut by 45 percent.

Data discoverability metrics assess how easily users can find specific datasets within data platforms. Poor discoverability, such as a user struggling to locate sales data for a particular region, indicates underlying quality and metadata problems. Improvements in these metrics directly translate to productivity gains as analysts spend less time searching and more time analysing.

The measurement framework should track throughput (how quickly users find data) and quality (accuracy and completeness of search results). Time metrics focus on the speed of accessing data and deriving insights. Relevancy metrics evaluate whether data is fit for its intended purpose. Additional metrics include the number of data sources identified, the percentage of sensitive data classified, the frequency and accuracy of discovery scans, and the time taken to remediate privacy issues.

Analytics Fidelity

Poor data quality undermines the reliability of analytical outputs. When models are trained on incomplete or inconsistent data, their predictions become unreliable. When dashboards display metrics derived from flawed inputs, business decisions suffer. Gartner reports that only nine percent of organisations rate themselves at the highest analytics maturity level, with 87 percent demonstrating low business intelligence maturity.

Research from BARC found that more than 40 percent of companies do not trust the outputs of their AI and ML models, whilst more than 45 percent cite data quality as the top obstacle to AI success. These statistics highlight the direct connection between data quality and analytical value. Global spending on big data analytics is projected to reach $230.6 billion by 2025, with spending on analytics, AI, and big data platforms expected to surpass $300 billion by 2030. This investment amplifies the importance of ensuring that underlying data quality supports reliable outcomes.

Measuring analytics fidelity requires tracking model performance over time. Are prediction errors increasing? Are dashboard metrics drifting unexpectedly? Are analytical conclusions being contradicted by operational reality? These signals indicate data quality degradation that toolchains should detect and repair.

Data observability platforms provide executive-level dashboards presenting key metrics including incident frequency, mean time to resolution, platform adoption rates, and overall system uptime. These operational metrics enable continuous improvement by letting organisations track trends over time, spot degradation early, and measure the impact of improvements.

Return on Investment

The financial case for data quality investment is compelling but requires careful construction. Gartner research indicates poor data quality costs organisations an average of $12.9 to $15 million annually. IBM research published in Harvard Business Review estimated poor data quality cost the U.S. economy $3.1 trillion per year. McKinsey Global Institute found that poor-quality data leads to 20 percent decreases in productivity and 30 percent increases in costs. Additionally, 20 to 30 percent of enterprise revenue is lost due to data inefficiencies.

Against these costs, the returns from data quality toolchains can be substantial. Data observability implementations have demonstrated ROI percentages ranging from 25 to 87.5 percent. Cost savings for addressing issues such as duplicate new user orders and improving fraud detection can reach $100,000 per issue annually, with potential savings from enhancing analytics dashboard accuracy reaching $150,000 per year.

One organisation documented over $2.3 million in cost savings and productivity improvements directly attributable to their governance initiative within six months. Companies with mature data governance and quality programmes experience 45 percent lower data breach costs, according to IBM's Cost of a Data Breach Report, which found average breach costs reached $4.88 million in 2024.

The ROI calculation should incorporate several components. Direct savings from reduced error correction effort (data teams spend 50 percent of their time on remediation according to Ataccama research) represent the most visible benefit. Revenue protection from improved decision-making addresses the 15 to 25 percent revenue loss that MIT research associates with poor quality. Risk reduction from fewer compliance violations and security breaches provides insurance value. Opportunity realisation from enabled analytics and AI initiatives captures upside potential. Companies with data governance programmes report 15 to 20 percent higher operational efficiency according to McKinsey research.

A holistic ROI formula considers value created, impact of quality issues, and total investment. Data downtime, when data is unavailable or inaccurate, directly impacts initiative value. Including downtime in ROI calculations reveals hidden costs and encourages investment in quality improvement.

The Emerging Landscape

Several trends are reshaping how organisations approach content repair and quality measurement.

AI-Native Quality Tools: The integration of artificial intelligence into data quality platforms is accelerating. Unsupervised machine learning detects anomalies without manual configuration. Natural language interfaces allow business users to query data quality without technical expertise. Generative AI is beginning to suggest repair strategies and explain anomalies in business terms. The Stack Overflow 2024 Developer Survey shows 76 percent of developers using or planning to use AI tools in their workflows, including data engineering tasks.

According to Gartner, by 2028, 33 percent of enterprise applications will include agentic AI, up from less than 1 percent in 2024. This shift will transform data quality from a technical discipline into an embedded capability of data infrastructure.

Proactive Quality Engineering: Great Expectations represents an advanced approach to quality management, moving governance from reactive, post-error correction to proactive systems of assertions, continuous validation, and instant feedback. The practice of analytics engineering, as articulated by dbt Labs, believes data quality testing should be integrated throughout the transformation process, not bolted on at the end.

This philosophy is gaining traction. Data teams increasingly test raw data upon warehouse arrival, validate transformations as business logic is applied, and verify quality before production deployment. Quality becomes a continuous concern rather than a periodic audit.

Consolidated Platforms: The market is consolidating around integrated platforms. The announced merger between dbt Labs and Fivetran signals a trend toward end-to-end solutions that handle extraction, transformation, and quality assurance within unified environments. IBM has been recognised as a Leader in Gartner Magic Quadrants for Augmented Data Quality Solutions, Data Integration Tools, and Data and Analytics Governance Platforms for 17 consecutive years, reflecting the value of comprehensive capabilities.

Trust as Competitive Advantage: Consumer trust research shows 75 percent of consumers would not purchase from organisations they do not trust with their data, according to Cisco's 2024 Data Privacy Benchmark Study. This finding elevates data quality from an operational concern to a strategic imperative. Organisations that demonstrate data stewardship through quality and governance programmes build trust that translates to market advantage.

The Human Element

Despite technological sophistication, the human element remains central to effective data repair. Competitive advantage increasingly depends on data quality rather than raw computational power. Organisations with superior training data and more effective human feedback loops will build more capable AI systems than competitors relying solely on automated approaches.

The most successful implementations strategically allocate human involvement, using AI to handle routine cases whilst preserving human input for complex, ambiguous, or high-stakes situations. Uncertainty sampling allows automated systems to identify cases where they lack confidence, prioritising these for human review and focusing expert attention where it adds most value.

Building effective human review processes requires attention to workflow design, expertise cultivation, and feedback mechanisms. Reviewers need context about why records were flagged, access to source systems for investigation, and clear criteria for making repair decisions. Their corrections should feed back into automated systems, continuously improving algorithmic performance.

Strategic Implementation Guidance

The question of how to handle incomplete or malformed content has no universal answer. Heuristic imputation offers speed and simplicity but introduces systematic distortions. Machine learning inference provides contextual accuracy but requires computational resources and careful validation. Human review delivers reliability but cannot scale. The optimal strategy combines all three, matched to the risk profile and operational requirements of each data domain.

Measurement remains challenging but essential. Discovery improvements, analytics fidelity, and financial returns provide the metrics needed to justify investment and guide continuous improvement. Organisations that treat data quality as a strategic capability rather than a technical chore will increasingly outcompete those that do not. Higher-quality data reduces rework, improves decision-making, and protects investment by tying outcomes to reliable information.

The toolchains are maturing rapidly. From validation frameworks to observability platforms to AI-powered repair engines, enterprises now have access to sophisticated capabilities that were unavailable five years ago. The organisations that deploy these tools effectively, with clear strategies for matching repair methods to risk profiles and robust frameworks for measuring business impact, will extract maximum value from their data assets.

In a world where artificial intelligence is transforming every industry, data quality determines AI quality. The patterns and toolchains for detecting and repairing content are not merely operational necessities but strategic differentiators. Getting them right is no longer optional.


References and Sources

  1. Gartner. “Data Quality: Why It Matters and How to Achieve It.” Gartner Research. https://www.gartner.com/en/data-analytics/topics/data-quality

  2. MIT Sloan Management Review with Cork University Business School. Research on revenue loss from poor data quality.

  3. Great Expectations. “Have Confidence in Your Data, No Matter What.” https://greatexpectations.io/

  4. Monte Carlo. “Data + AI Observability Platform.” https://www.montecarlodata.com/

  5. Atlan. “Automated Data Quality: Fix Bad Data & Get AI-Ready in 2025.” https://atlan.com/automated-data-quality/

  6. Nature Communications Medicine. “The Impact of Imputation Quality on Machine Learning Classifiers for Datasets with Missing Values.” https://www.nature.com/articles/s43856-023-00356-z

  7. BMC Medical Informatics and Decision Making. “Nearest Neighbor Imputation Algorithms: A Critical Evaluation.” https://link.springer.com/article/10.1186/s12911-016-0318-z

  8. Oxford Academic Bioinformatics. “MissForest: Non-parametric Missing Value Imputation for Mixed-type Data.” https://academic.oup.com/bioinformatics/article/28/1/112/219101

  9. BMC Medical Research Methodology. “Accuracy of Random-forest-based Imputation of Missing Data in the Presence of Non-normality, Non-linearity, and Interaction.” https://link.springer.com/article/10.1186/s12874-020-01080-1

  10. PMC. “Multiple Imputation by Chained Equations: What Is It and How Does It Work?” https://pmc.ncbi.nlm.nih.gov/articles/PMC3074241/

  11. Appen. “Human-in-the-Loop Improves AI Data Quality.” https://www.appen.com/blog/human-in-the-loop-approach-ai-data-quality

  12. dbt Labs. “Deliver Trusted Data with dbt.” https://www.getdbt.com/

  13. Integrate.io. “Data Quality Improvement Stats from ETL: 50+ Key Facts Every Data Leader Should Know in 2025.” https://www.integrate.io/blog/data-quality-improvement-stats-from-etl/

  14. IBM. “IBM Named a Leader in the 2024 Gartner Magic Quadrant for Augmented Data Quality Solutions.” https://www.ibm.com/blog/announcement/gartner-magic-quadrant-data-quality/

  15. Alation. “Data Quality Metrics: How to Measure Data Accurately.” https://www.alation.com/blog/data-quality-metrics/

  16. Sifflet Data. “Considering the ROI of Data Observability Initiatives.” https://www.siffletdata.com/blog/considering-the-roi-of-data-observability-initiatives

  17. Data Meaning. “The ROI of Data Governance: Measuring the Impact on Analytics.” https://datameaning.com/2025/04/07/the-roi-of-data-governance-measuring-the-impact-on-analytics/

  18. BARC. “Observability for AI Innovation Study.” Research on AI/ML model trust and data quality obstacles.

  19. Cisco. “2024 Data Privacy Benchmark Study.” Research on consumer trust and data handling.

  20. IBM. “Cost of a Data Breach Report 2024.” Research on breach costs and governance programme impact.

  21. AWS. “Real-time Stream Processing Using Apache Spark Streaming and Apache Kafka on AWS.” https://aws.amazon.com/blogs/big-data/real-time-stream-processing-using-apache-spark-streaming-and-apache-kafka-on-aws/

  22. Journal of Applied Statistics. “A Novel Ranked K-nearest Neighbors Algorithm for Missing Data Imputation.” https://www.tandfonline.com/doi/full/10.1080/02664763.2024.2414357

  23. Contrary Research. “Monte Carlo Company Profile.” https://research.contrary.com/company/monte-carlo

  24. PMC. “A Survey of Data Quality Measurement and Monitoring Tools.” https://pmc.ncbi.nlm.nih.gov/articles/PMC9009315/

  25. ResearchGate. “High-Quality Automated Program Repair.” Research on trust perceptions in automated vs human code repair.

  26. Stack Overflow. “2024 Developer Survey.” Research on AI tool adoption in development workflows.


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

Somewhere in a data centre, a pipeline is failing. Not with a dramatic explosion or a cascade of red alerts, but with the quiet malevolence of a null value slipping through validation checks, corrupting records, and propagating errors downstream before anyone notices. By the time engineers trace the problem back to its source, hours have passed, dashboards have gone dark, and business decisions have been made on fundamentally broken data.

This scenario plays out thousands of times daily across enterprises worldwide. According to Gartner research, poor data quality costs organisations an average of $12.9 million to $15 million annually, with 20 to 30 per cent of enterprise revenue lost due to data inefficiencies. The culprit behind many of these failures is deceptively simple: malformed JSON, unexpected null values, and schema drift that silently breaks the assumptions upon which entire systems depend.

Yet the tools and patterns to prevent these catastrophes exist. They have existed for years. The question is not whether organisations can protect their content ingestion pipelines from null and malformed JSON, but whether they will adopt the defensive programming patterns, open-source validation libraries, and observability practices that can reduce downstream incidents by orders of magnitude.

The economic stakes are staggering. Production defects cost enterprises $1.7 trillion globally each year, with individual critical bugs averaging $5.6 million in business impact. Schema drift incidents alone carry an estimated average cost of $35,000 per incident. For data-intensive organisations, these are not abstract figures but line items that directly impact profitability and competitive position.

The Anatomy of Pipeline Failure

Content ingestion pipelines are the circulatory system of modern data infrastructure. They consume data from APIs, message queues, file uploads, and third-party integrations, transforming and routing information to databases, analytics systems, and downstream applications. When they work, they are invisible. When they fail, the consequences ripple outward in ways that can take weeks to fully understand.

The fundamental challenge is that JSON, despite its ubiquity as a data interchange format, provides no guarantees about structure. A field that contained a string yesterday might contain null today. An array that once held objects might arrive empty. A required field might simply vanish when an upstream team refactors their API without updating downstream consumers. The lightweight flexibility that made JSON popular is precisely what makes it dangerous in production systems that depend on consistent structure.

Schema drift, as this phenomenon is known, occurs when changes to a data model in one system are not synchronised across connected systems. According to industry analysis, the average cost per schema drift incident is estimated at $35,000, with undetected drift sometimes requiring complete system remapping that costs millions. One analysis suggests schema drift silently breaks enterprise data architecture at a cost of up to $2.1 million annually in broken processes, failed initiatives, and compliance risk.

The problem compounds because JSON parsing failures often do not fail loudly. A missing field might be coerced to null, which then propagates through transformations, appearing as zeros in financial calculations or blank entries in customer records. By the time the corrupted data surfaces in a quarterly report or customer complaint, the original cause is buried under layers of subsequent processing.

The hidden operational costs accumulate gradually. Most data pipeline issues do not manifest as major failures. They build slowly through missed updates, manual report fixes, and dashboards that run behind schedule. Engineers stay busy keeping things stable rather than making improvements, and decisions that should be simple start taking longer than necessary.

Defensive Programming and Null Value Handling

The first line of defence against malformed JSON is a philosophy that treats every piece of incoming data as potentially hostile. Defensive programming assumes that any piece of functionality can only be used explicitly for its intended purpose and that every input might be a malicious attempt to break the system.

In practical terms, defensive programming means expecting the worst possible outcome with every user input. Rather than trusting that upstream systems will always send well-formed data, defensive pipelines validate everything at the point of ingestion. This approach is easier to implement than it might seem, because lifting overly strict validation rules is simpler than compensating for corrupted data by adding rules after the fact.

The MITRE organisation lists null pointer dereference as one of the most commonly exploited software weaknesses. When code attempts to access a property on a null value, the result ranges from silent corruption to complete system crashes. Errors such as buffer overflows, null pointer dereferences, and memory leaks can lead to catastrophic failures, making defensive programming essential for mitigating these risks through strict checks and balances.

Key strategies for handling null values defensively include validating all inputs before processing, avoiding returning null from methods when possible, returning empty collections or default objects rather than null, and using static analysis tools to detect potential null pointer issues before deployment. Static analysis tools such as Splint detect null pointer dereferences by analysing pointers at procedure interface boundaries, enabling teams to catch problems before code reaches production.

The trade-off of defensive programming is worth considering. While users no longer see the programme crash, neither does the test or quality assurance department. The programme might now silently fail despite programming errors in the caller. This is why defensive programming must be paired with observability: catching problems silently is only useful if those problems are logged and monitored effectively.

JSON Schema as a Validation Standard

JSON Schema has emerged as the primary standard for defining the structure and constraints of JSON documents. By specifying the expected data types, formats, and constraints that data should adhere to, schemas make it possible to catch errors early in the processing pipeline, ensuring that only valid data reaches downstream systems.

The current stable version, draft 2020-12, introduced significant improvements including redesigned array and tuple keywords, dynamic references, and better handling of unevaluated properties. The items and additionalItems keywords were replaced by prefixItems and items, providing cleaner semantics for array validation. The format vocabulary was divided into format-annotation and format-assertion, providing clearer semantics for format validation.

JSON Schema validation reportedly prevents 60 per cent of API integration failures and ensures data consistency across distributed systems. When schemas are enforced at ingestion boundaries, invalid data is rejected immediately rather than allowed to propagate. This fail-fast approach transforms debugging from an archaeological expedition through logs and databases into a simple matter of reading validation error messages.

The specification handles null values explicitly. When a schema specifies a type of null, it has only one acceptable value: null itself. Importantly, null in JSON is not equivalent to something being absent, a distinction that catches many developers off guard. To handle nullable fields, schemas define types as arrays that include both the expected type and null.

Community discussions emphasise that schema validation errors affect user experience profoundly, requiring clear and actionable error messages rather than technical implementation details. The goal is not merely to reject invalid data but to communicate why data was rejected in terms that enable rapid correction.

Validation Libraries for Production Systems

Implementing JSON Schema validation requires libraries that can parse schemas and apply them to incoming data. Several open-source options have emerged as industry standards, each with different strengths for different use cases.

Ajv (Another JSON Validator) has become the dominant choice in the JavaScript and Node.js ecosystem. According to benchmarks, Ajv is currently the fastest JSON schema validator available, running 50 per cent faster than the second-place option and 20 to 190 per cent faster in the jsck benchmark. The library generates code that turns JSON schemas into optimised validation functions, achieving performance that makes runtime validation practical even for high-throughput pipelines.

The library's production credentials are substantial. ESLint, the JavaScript linting tool used by millions of developers, relies on Ajv for validating its complex configuration files. The ESLint team has noted that Ajv has proven reliable over years of use, donating $100 monthly to support the project's continued development. Ajv has also been used in production to validate requests for a federated undiagnosed genetic disease programme that has led to new scientific discoveries.

Beyond raw speed, Ajv provides security guarantees that matter for production deployments. Version 7 was rebuilt with secure code generation as a primary objective, providing type-level guarantees against remote code execution even when processing untrusted schemas. The best performance is achieved when using compiled functions returned by the compile or getSchema methods, with applications compiling schemas only once and reusing compiled validation functions throughout their lifecycle.

For TypeScript applications, Zod has gained significant traction as a schema validation library that bridges compile-time type safety and runtime validation. TypeScript only exists during coding; the moment code compiles to JavaScript, type checks vanish, leaving applications vulnerable to external APIs, user inputs, and unexpected null values. Zod addresses this gap by allowing developers to declare a validator once while automatically inferring the corresponding TypeScript type.

The goal of Zod is to eliminate duplicative type declarations. Developers declare a validator once and Zod automatically infers the static TypeScript type, making it easy to compose simpler types into complex data structures. When validation fails, the parse method throws a ZodError instance with granular information about validation issues.

For binary serialisation in streaming data pipelines, Apache Avro and Protocol Buffers provide schema-based validation with additional benefits. Avro's handling of schema evolution is particularly sophisticated. The Avro parser can accept two different schemas, using resolution rules to translate data from the writer schema into the reader schema. This capability is extremely valuable in production systems because it allows different components to be updated independently without worrying about compatibility.

Protocol Buffers use .proto files where each field receives a unique numeric tag as its identifier. Fields can be added, deprecated, or removed, but never reused. This approach is particularly well-suited to microservices architectures where performance and interoperability are paramount.

Centralised Schema Management with Registries

As systems grow more complex, managing schemas across dozens of services becomes its own challenge. Schema registries provide centralised repositories for storing, versioning, and validating schemas, ensuring that producers and consumers agree on data formats before messages are exchanged.

Confluent Schema Registry has become the standard for Apache Kafka deployments. The registry provides a RESTful interface for storing and retrieving Avro, JSON Schema, and Protobuf schemas, maintaining a versioned history based on configurable subject name strategies. It enforces compatibility rules that prevent breaking changes and enables governance workflows where teams negotiate schema changes safely.

The architecture is designed for production resilience. Schema Registry uses Kafka itself as a commit log to store all registered schemas durably, maintaining in-memory indices for fast lookups. A single registry instance can handle approximately 10,000 unique schemas, covering most enterprise deployments. The registry has no disk-resident data; the only disk usage comes from storing log files.

For larger organisations, multi-datacenter deployments synchronise data across sites, protect against data loss, and reduce latency. Schema Registry is designed to work as a distributed service using single primary architecture, where at most one instance is the primary at any moment. Durability configurations should set min.insync.replicas on the schemas topic higher than one, ensuring schema registration is durable across multiple replicas.

Alternative options include AWS Glue Schema Registry for organisations invested in the AWS ecosystem and Karapace as an open-source alternative to Confluent's offering. Regardless of the specific tool, the pattern remains consistent: centralise schema management to prevent drift and enforce compatibility.

Contract Testing for Microservices Integration

While schema validation catches structural problems with individual messages, contract testing addresses a different challenge: ensuring that services can actually communicate with each other successfully. In microservices architectures where different teams manage different services, assumptions about API behaviour can diverge in subtle ways that schema validation alone cannot detect.

Pact has emerged as the leading open-source framework for consumer-driven contract testing. Unlike schemas or specifications that describe all possible states of a resource, a Pact contract is enforced by executing test cases that describe concrete request and response pairs. This approach is effectively contract by example, validating actual integration behaviour rather than theoretical structure.

The consumer-driven aspect of Pact places the consumers of services at the centre of the design process. Consumers define their expectations for provider APIs, and these expectations are captured as contracts that providers must satisfy. This inversion ensures that APIs actually meet the needs of their callers rather than making assumptions about how consumers will use them.

Contract testing bridges gaps among different testing methodologies. It is a technique for testing integration points by isolating each microservice and checking whether the HTTP requests and responses conform to a shared understanding documented in a contract. Pact enables identification of mismatches between consumer and provider early in the development process, reducing the likelihood of integration failures during later stages.

The Pact Broker provides infrastructure for sharing contracts and verification results across teams. By integrating with CI/CD pipelines, the broker enables automated detection of breaking changes before they reach production. Teams can rapidly increase test coverage across system integration points by reusing existing tests on both sides of an integration.

For Pact to work effectively, both consumer and provider teams must agree on adopting the contract testing approach. When one side does not commit to the process, the framework loses its value. While Pact excels at testing HTTP-based services, support for other protocols like gRPC or Kafka requires additional plugins.

The return on investment for contract testing can be substantial. Analysis suggests that implementing contract testing delivers positive returns, with cumulative savings exceeding cumulative investments by the end of the second year. A conservative estimate places complete recovery of initial investment within three to four years for a single team, with benefits amplifying as more teams adopt the practice.

Observability for Data Pipeline Health

Validation and contract testing provide preventive controls, but production systems also require visibility into what is actually happening. Observability enables teams to detect and diagnose problems that slip past preventive measures.

OpenTelemetry has become the primary open-source standard for collecting and processing telemetry data. The OpenTelemetry Collector acts as a neutral intermediary for collecting, processing, and forwarding traces, metrics, and logs to observability backends. This architecture simplifies observability setups by eliminating the need for multiple agents for different telemetry types, consolidating everything into a unified collection point.

For data pipelines specifically, observability must extend beyond traditional application monitoring. Data quality issues often manifest as subtle anomalies rather than outright failures. A pipeline might continue running successfully while producing incorrect results because an upstream schema change caused fields to be misinterpreted. Without observability into data characteristics, these problems remain invisible until their effects surface in business processes.

OpenTelemetry Weaver, introduced in 2025, addresses schema validation challenges by providing design-time validation that can run as part of CI/CD pipelines. The tool enables schema definition through semantic conventions, validation of telemetry against defined schemas, and type-safe code generation for client SDKs. By catching observability issues in CI/CD rather than production, Weaver shifts the detection of problems earlier in the development lifecycle.

The impact of observability on incident response is well-documented. According to research from New Relic, organisations with mature observability practices experience 34 per cent less downtime annually compared to those without. Those achieving full-stack observability are 18 per cent more likely to resolve high-business-impact outages in 30 minutes or less. Organisations with five or more observability capabilities deployed are 42 per cent more likely to achieve this rapid resolution.

Observability adoption materially improves mean time to recovery. In North America, 67 per cent of organisations reported 50 per cent or greater improvement in mean time to recovery after adopting observability practices. Integrating real-time monitoring tools with alerting systems can reduce incident response times by an average of 30 per cent.

For data engineering specifically, the statistics are sobering. Data teams reported an average of 67 incidents per month in 2023, up from 59 in 2022, signalling growing data-source sprawl and schema volatility. Mean time to resolve climbed to 15 hours, a 166 per cent year-over-year increase. Without observability tooling, 68 per cent of teams need four or more hours just to detect issues.

Shift-Left Testing for Early Defect Detection

The economics of defect detection are brutally clear: the earlier a problem is found, the cheaper it is to fix. This principle, known as shift-left testing, advocates for moving testing activities earlier in the development lifecycle rather than treating testing as a phase that occurs after development is complete.

Shift-left testing is a proactive approach that involves performing testing activities earlier in the software development lifecycle. Unlike traditional testing, the shift-left approach starts testing from the very beginning, during requirements gathering, design, or even planning stages. This helps identify defects, ambiguities, or performance bottlenecks early, when they are cheaper and easier to fix.

In data engineering, shift-left testing means moving data quality checks earlier in the pipeline. Instead of focusing monitoring efforts at the data warehouse stage, shift-left testing ensures that issues are detected as soon as data enters the pipeline. A shift-left approach catches problems like schema changes, data anomalies, and inconsistencies before they propagate, preventing costly fixes and bad business decisions.

Key data pipeline monitors include data diff tools that detect unexpected changes in output, schema change detection that alerts on structural modifications, metrics monitoring that tracks data quality indicators over time, and data tests that validate business rules and constraints. Real-time anomaly detection is absolutely critical. By setting up real-time alerts for issues like data freshness or schema changes, data teams can respond to problems as they arise.

Automated testing within CI/CD pipelines forms the foundation of shift-left practices. Running unit, integration, and smoke tests automatically on every commit catches problems before they merge into main branches. Having developers run one automated test locally before any commit catches roughly 40 per cent more issues upfront than traditional approaches.

The benefits of shift-left testing are measurable. A strategic approach can deliver 50 per cent faster releases and 40 per cent fewer production escapes, directly impacting revenue and reducing downtime costs. Enterprises that transition from manual to automated API testing approaches reduce their critical defect escape rate by an average of 85 per cent within the first 12 months.

Economic Returns from Schema-First Development

The business case for schema-first ingestion and automated contract validation extends beyond preventing incidents. By establishing clear contracts between systems, organisations reduce coordination costs, accelerate development, and enable teams to work independently without fear of breaking integrations.

The direct financial impact of data quality issues is substantial. Production defects cost enterprises $1.7 trillion globally each year, with individual critical bugs averaging $5.6 million in business impact. Nearly 60 per cent of organisations do not measure the annual financial cost of poor quality data. Failing to measure this impact results in reactive responses to data quality issues, missed business growth opportunities, increased risks, and lower return on investment.

Beyond direct costs, poor data quality undermines digital initiatives, weakens competitive standing, and erodes customer trust. The hidden costs accumulate through missed business growth opportunities, increased risks, and lower return on investment across data initiatives. In addition to immediate negative effects on revenue, the long-term effects of poor quality data increase the complexity of data ecosystems and lead to poor decision making.

The return on investment for implementing proper validation and testing can be dramatic. One financial institution achieved a 200 per cent return on investment within the first 12 months of implementing automated contract testing, preventing over 2,500 bugs from entering production while lowering testing cost and effort by 75 per cent and 85 per cent respectively. Another Fortune 500 organisation achieved a 10-fold increase in test case coverage with a 40 per cent increase in test execution speed.

Time and resources saved through implementing proper validation can be redirected toward innovation and development of new features. Contract testing facilitates clearer interactions between components, significantly reducing dependencies and potential blocking situations between teams. Teams who have implemented contract testing experience benefits such as the ability to test single integrations at a time, no need to create and manage dedicated test environments, and fast, reliable feedback on developer machines.

Building Layered Defence in Depth

Implementing effective protection against null and malformed JSON requires a layered approach that combines multiple techniques. No single tool or pattern provides complete protection; instead, organisations must build defence in depth.

At the ingestion boundary, JSON Schema validation should reject malformed data immediately. Schemas should be strict enough to catch problems but loose enough to accommodate legitimate variation. Defining nullable fields explicitly rather than allowing any field to be null prevents accidental acceptance of missing data. Validation errors should produce clear, actionable messages that enable rapid diagnosis and correction by upstream systems.

For inter-service communication, contract testing ensures that services agree on API behaviour beyond just data structure. Consumer-driven contracts place the focus on actual usage rather than theoretical capabilities. Integration with CI/CD pipelines catches breaking changes before deployment.

Schema registries provide governance for evolving data formats. Compatibility rules prevent breaking changes from being registered. Versioning enables gradual migration between schema versions. Centralised management prevents drift across distributed systems.

Observability provides visibility into production behaviour. OpenTelemetry provides vendor-neutral telemetry collection. Data quality metrics track validation failures, null rates, and schema violations. Alerting notifies teams when anomalies occur. Distributed tracing enables rapid root cause analysis.

Schema evolution in streaming data pipelines is not a nice-to-have but a non-negotiable requirement for production-grade real-time systems. By combining schema registries, compatible schema design, and resilient processing logic, teams can build pipelines that evolve alongside the business.

Organisational Culture and Data Ownership

Tools and patterns are necessary but not sufficient. Successful adoption of schema-first development requires cultural changes that treat data interfaces with the same rigour as application interfaces.

Treating data interfaces like APIs means formalising them with data contracts. Schema definitions using Avro, Protobuf, or JSON Schema validate incoming data at the point of ingestion. Automatic validation checks run within streaming pipelines or ingestion gateways. Breaking changes trigger build failures or alerts rather than silently propagating.

One of the most common causes of broken pipelines is schema drift, when upstream producers change the shape of data without warning, breaking downstream consumers. The fix is to treat data interfaces like APIs and formalise them with data contracts. A data contract defines the expected structure, types, and semantics of ingested data.

Teams must own the quality of data they produce, not just the functionality of their services. This ownership means understanding downstream consumers, communicating schema changes proactively, and treating breaking changes with the same gravity as breaking API changes.

Organisations conducting post-incident reviews see a 20 per cent reduction in repeat incidents. Those adopting blameless post-incident reviews see a 40 per cent reduction. Learning from failures and improving processes requires psychological safety that encourages disclosure of problems rather than concealment.

Implementing distributed tracing can lead to a 25 per cent decrease in troubleshooting time, particularly in complex architectures. Research indicates that 65 per cent of organisations find centralised logging improves incident recovery times. These capabilities require cultural investment beyond merely deploying tools.

Investing in Data Quality Infrastructure

The challenges of null and malformed JSON in content ingestion pipelines are not going away. As data volumes grow and systems become more interconnected, the potential for schema drift and data quality issues only increases. Data teams already report an average of 67 incidents per month, up from 59 the previous year.

The good news is that the tools and patterns for addressing these challenges have matured significantly. JSON Schema draft 2020-12 provides comprehensive vocabulary for structural validation. Ajv delivers validation performance that enables runtime checking even in high-throughput systems. Pact offers battle-tested contract testing for HTTP-based services. OpenTelemetry provides vendor-neutral observability. Schema registries enable centralised governance.

The organisations that thrive will be those that adopt these practices comprehensively rather than reactively. Schema-first development is not merely a technical practice but an organisational capability that reduces coordination costs, accelerates development, and prevents the cascade failures that turn minor data issues into major business problems.

The pipeline that fails silently today, corrupting data before anyone notices, represents an avoidable cost. The question is not whether organisations can afford to implement proper validation and observability. Given the documented costs of poor data quality, the question is whether they can afford not to.


References and Sources

  1. Gartner. “Data Quality: Why It Matters and How to Achieve It.” Gartner Research. https://www.gartner.com/en/data-analytics/topics/data-quality

  2. JSON Schema Organisation. “JSON Schema Validation: A Vocabulary for Structural Validation of JSON.” Draft 2020-12. https://json-schema.org/draft/2020-12/json-schema-validation

  3. Ajv JSON Schema Validator. Official Documentation. https://ajv.js.org/

  4. ESLint. “Supporting ESLint's Dependencies.” ESLint Blog, September 2020. https://eslint.org/blog/2020/09/supporting-eslint-dependencies/

  5. GitHub. “json-schema-benchmark: Benchmarks for Node.js JSON-schema validators.” https://github.com/ebdrup/json-schema-benchmark

  6. Pact Documentation. “Writing Consumer Tests.” https://docs.pact.io/consumer

  7. OpenTelemetry. “Observability by Design: Unlocking Consistency with OpenTelemetry Weaver.” https://opentelemetry.io/blog/2025/otel-weaver/

  8. Confluent. “Schema Registry for Confluent Platform.” Confluent Documentation. https://docs.confluent.io/platform/current/schema-registry/index.html

  9. New Relic. “Service-Level Metric Benchmarks.” Observability Forecast 2023. https://newrelic.com/resources/report/observability-forecast/2023/state-of-observability/service-level-metrics

  10. Zod. “TypeScript-first schema validation with static type inference.” https://zod.dev/

  11. GitHub. “colinhacks/zod: TypeScript-first schema validation with static type inference.” https://github.com/colinhacks/zod

  12. Integrate.io. “What is Schema-Drift Incident Count for ETL Data Pipelines.” https://www.integrate.io/blog/what-is-schema-drift-incident-count/

  13. Syncari. “The $2.1M Schema Drift Problem.” https://syncari.com/blog/the-2-1m-schema-drift-problem-why-enterprise-leaders-cant-ignore-this-hidden-data-destroyer/

  14. Contentful. “Defensive Design and Content Model Validation.” https://www.contentful.com/blog/defensive-design-and-content-model-validation/

  15. DataHen. “Ensuring Data Quality with JSON Schema Validation in Data Processing Pipelines.” https://www.datahen.com/blog/ensuring-data-quality-with-json-schema-validation-in-data-processing-pipelines/

  16. Shaped. “10 Best Practices in Data Ingestion: A Scalable Framework for Real-Time, Reliable Pipelines.” https://www.shaped.ai/blog/10-best-practices-in-data-ingestion

  17. Sngular. “Understanding the ROI for Contract Testing.” https://www.sngular.com/insights/299/understanding-the-roi-for-contract-testing

  18. Datafold. “Data Pipeline Monitoring: Implementing Proactive Data Quality Testing.” https://www.datafold.com/blog/what-is-data-pipeline-monitoring

  19. Kleppmann, Martin. “Schema evolution in Avro, Protocol Buffers and Thrift.” December 2012. https://martin.kleppmann.com/2012/12/05/schema-evolution-in-avro-protocol-buffers-thrift.html

  20. Datadog. “Best Practices for Shift-Left Testing.” https://www.datadoghq.com/blog/shift-left-testing-best-practices/

  21. Datadog. “Use OpenTelemetry with Observability Pipelines.” https://www.datadoghq.com/blog/observability-pipelines-otel-cost-control/

  22. Parasoft. “API ROI: Maximize the ROI of API Testing.” https://www.parasoft.com/blog/maximize-the-roi-of-automated-api-testing-solutions/

  23. Pactflow. “What is Contract Testing & How is it Used?” https://pactflow.io/blog/what-is-contract-testing/


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

The numbers are staggering and increasingly meaningless. In the first half of 2025, TikTok's automated moderation systems achieved a 99.2 per cent accuracy rate, removing over 87 per cent of violating content before any human ever saw it. Meta's Q4 2024 transparency report showed content restrictions based on local law dropping from 84.6 million in the second half of 2024 to 35 million in the first half of 2025. YouTube processed 16.8 million content actions in the first half of 2024 alone. X reported suspending over 5.3 million accounts and removing 10.6 million posts in six months.

These figures appear in transparency dashboards across every major platform, presented with the precision of scientific measurement. Yet beneath this veneer of accountability lies a fundamental paradox: the more data platforms publish, the less we seem to understand about how content moderation actually works, who it serves, and whether it protects or harms the billions of users who depend on these systems daily.

The gap between transparency theatre and genuine accountability has never been wider. As the European Union's Digital Services Act forces platforms into unprecedented disclosure requirements, and as users increasingly demand meaningful recourse when their content is removed, platforms find themselves navigating impossible terrain. They must reveal enough to satisfy regulators without exposing systems to gaming. They must process millions of appeals whilst maintaining the fiction that humans review each one. They must publish KPIs that demonstrate progress without admitting how often their systems get it catastrophically wrong.

This is the glass house problem: transparency that lets everyone see in whilst obscuring what actually matters.

When Europe Built a Database and Discovered Its Limits

When the European Union launched the DSA Transparency Database in February 2024, it represented the most ambitious attempt in history to peer inside the black boxes of content moderation. Every online platform operating in the EU, with exceptions for micro and small enterprises, was required to submit detailed statements of reasons for every content moderation decision. The database would track these decisions in near real time, offering researchers, regulators, and the public unprecedented visibility into how platforms enforce their rules.

By January 2025, 116 online platforms had registered, submitting a staggering 9.4 billion statements of reasons in just six months. The majority came from Google, Facebook, and TikTok. The sheer volume suggested success: finally, platforms were being forced to account for their decisions at scale. The database allowed tracking of content moderation decisions in almost real time, offering tools for accessing, analysing, and downloading the information that platforms must make available.

But researchers who analysed this data found something troubling. A 2024 study by researchers from the Netherlands discovered that the database allowed platforms to remain opaque on the grounds behind content moderation decisions, particularly for decisions based on terms of service infringements. A 2025 study from Italian researchers found inconsistencies between the DSA Transparency Database and the separate transparency reports that Very Large Online Platforms published independently. The two sources of truth contradicted each other, raising fundamental questions about data reliability.

X stood out as particularly problematic. Unlike all other platforms where low moderation delays were consistently linked to high reliance on automation, X continued to report near instantaneous moderation actions whilst claiming to rely exclusively on manual detection. The platform's H2 2024 transparency report revealed 181 million user reports filed from July to December 2024, with 1,275 people working in content moderation globally. Spam and platform manipulation would add an additional 335 million total actions to those figures. The mathematics of manual review at that scale strain credibility.

The database revealed what happens when transparency becomes a compliance exercise rather than a genuine commitment to accountability. Platforms could technically fulfil their obligations whilst structuring their submissions to minimise meaningful scrutiny. They could flood the system with data whilst revealing little about why specific decisions were made.

The European Commission recognised these deficiencies. In November 2024, it adopted an implementing regulation laying down standardised templates for transparency reports. Starting from 1 July 2025, platforms would collect data according to these new specifications, with the first harmonised reports due in early 2026. But standardisation addresses only one dimension of the problem. Even perfectly formatted data means little if platforms can still choose what to measure and how to present it. Critics have described current transparency practices as transparency theatre.

Measuring Success When Everyone Defines It Differently

Walk through any platform's transparency report and you will encounter an alphabet soup of metrics: VVR (Violative View Rate), prevalence rates, content actioned, appeals received, appeals upheld. These Key Performance Indicators have become the lingua franca of content moderation accountability, the numbers regulators cite, journalists report, and researchers analyse.

But which KPIs actually matter? And who gets to decide?

Meta's Community Standards Enforcement Report tracks prevalence, the percentage of content that violates policies, across multiple harm categories. In Q4 2024, the company reported that prevalence remained consistent across violation types, with decreases on Facebook and Instagram for Adult Nudity and Sexual Activity due to adjustments to proactive detection technology. This sounds reassuring until you consider what it obscures: how many legitimate posts were incorrectly removed, how many marginalised users were disproportionately affected. The report noted that content actioned on Instagram for Restricted Goods and Services decreased as a result of changes made due to over enforcement and mistakes, an acknowledgment that the company's own systems were removing too much legitimate content.

Following policy changes announced in January 2025, Meta reported cutting enforcement mistakes in the United States by half, whilst the low prevalence of violating content remained largely unchanged for most problem areas. This suggests that the company had previously been making significant numbers of erroneous enforcement decisions, a reality that earlier transparency reports did not adequately disclose.

TikTok publishes accuracy rates for its automated moderation technologies, claiming 99.2 per cent accuracy in the first half of 2025. This builds upon the high accuracy they achieved in the first half of 2024, even as moderation volumes increased. But accuracy is a slippery concept. A system can be highly accurate in aggregate whilst systematically failing specific communities, languages, or content types. Research has consistently shown that automated moderation systems perform unevenly across protected groups, misclassifying hate directed at some demographics more often than others. There will always be too many false positives and too many false negatives, with both disproportionately falling on already marginalised groups.

YouTube's transparency report tracks the Violative View Rate, the percentage of views on content that later gets removed. In June 2025, YouTube noted a slight increase due to strengthened policies related to online gambling content. This metric tells us how much harmful content viewers encountered before it was removed but nothing about the content wrongly removed that viewers never got to see.

The DSA attempted to address these gaps by requiring platforms to report on the accuracy and rate of error of their automated systems. Article 15 specifically mandates annual reporting on automated methods, detailing their purposes, accuracy, error rates, and applied safeguards. But how platforms calculate these metrics remains largely at their discretion. Reddit reported that approximately 72 per cent of content removed from January to June 2024 was removed by automated systems. Meta reported that automated systems removed 90 per cent of violent and graphic content, 86 per cent of bullying and harassment, and only 4 per cent of child nudity and physical abuse on Instagram in the EU between April and September 2024.

Researchers have proposed standardising disclosure practices in four key areas: distinguishing between ex ante and ex post identification of violations, disclosing decision making processes, differentiating between passive and active engagement with problematic content, and providing information on the efficacy of user awareness tools. Establishing common KPIs would allow meaningful evaluation of platforms' performance over time.

The operational KPIs that content moderation practitioners actually use tell a different story. Industry benchmarks suggest flagged content response should be optimised to under five minutes, moderation accuracy maintained at 95 per cent to lower false positive and negative rates. Customer centric metrics include client satisfaction scores consistently above 85 per cent and user complaint resolution time under 30 minutes. These operational metrics reveal the fundamental tension: platforms optimise for speed and cost efficiency whilst regulators demand accuracy and fairness.

The Appeals System That Cannot Keep Pace

When Meta's Oversight Board published its 2024 annual report, it revealed a fundamental truth about content moderation appeals: the system is overwhelmed. The Board received 558,235 user generated appeals to restore content in 2024, a 33 per cent increase from the previous year. Yet the Board's capacity is limited to 15 to 30 cases annually. For every case the Board reviews, roughly 20,000 go unexamined. When the doors opened for appeals in October 2020, the Board received 20,000 cases, prioritising those with potential to affect many users worldwide.

This bottleneck exists at every level. Meta reported receiving more than 7 million appeals in February 2024 alone from users whose content had been removed under Hateful Conduct rules. Of those appealing, 80 per cent chose to provide additional context, a pathway the Oversight Board recommended to help content reviewers understand when policy exceptions might apply. The recommendation led to the creation of a new pathway for users to provide additional context in appeal submissions.

YouTube tells users that appeals are manually reviewed by human staff. Its official account stated in November 2025 that appeals are manually reviewed so it can take time to get a response. Yet creators who analysed their communication metadata discovered responses were coming from Sprinklr, an AI powered automated customer service platform. The responses arrived within minutes, far faster than human review would require. YouTube's own data revealed that the vast majority of termination decisions were upheld.

This gap between stated policy and operational reality is existential. If appeals are automated, then the safety net does not exist. The system becomes a closed loop where automated decisions are reviewed by automated processes, with no human intervention to recognise context or error. Research on appeal mechanisms has found that when users' accounts are penalised, they often are not served a clear notice of violation. Appeals are frequently time-consuming, glitching, and ineffective.

The DSA attempted to address this by mandating multiple levels of recourse. Article 21 established out of court dispute settlement bodies, third party organisations certified by national regulators to resolve content moderation disputes. These bodies can review platform decisions about content takedowns, demonetisation, account suspensions, and even decisions to leave flagged content online. Users may select any certified body in the EU for their dispute type, with settlement usually available free of charge. If the body settles in favour of the user, the platform bears all fees.

By mid 2024, the first such bodies were certified. Appeals Centre Europe, established with a grant from the Oversight Board Trust, revealed something striking in its first transparency report: out of 1,500 disputes it ruled on, over three quarters of platform decisions were overturned either because they were wrong or because the platform failed to provide necessary content for review.

TikTok's data tells a similar story. During the second half of 2024, the platform received 173 appeals against content moderation decisions under Article 21 in the EU. Of 59 cases closed by dispute settlement bodies, 17 saw the body disagree with TikTok's decision, 13 confirmed TikTok was correct, and 29 were resolved without a formal decision. Platforms were getting it wrong roughly as often as they were getting it right.

The Oversight Board's track record is even more damning. Of the more than 100 decisions the Board has issued, 80 per cent overturned Meta's original ruling. The percentage of overturned decisions has been increasing. Since January 2021, the Board has made more than 300 recommendations to Meta, with implementation or progress on 74 per cent resulting in greater transparency and improved fairness for users.

When Privacy and Transparency Pull in Opposite Directions

Every content moderation decision involves personal data: the content itself, the identity of the creator, the context in which it was shared, the metadata revealing when and where it was posted. Publishing detailed information about moderation decisions, as transparency requires, necessarily involves processing this data in ways that raise profound privacy concerns.

The UK Information Commissioner's Office recognised this tension when it published guidance on content moderation and data protection in February 2024, complementing the Online Safety Act. The ICO emphasised that organisations carrying out content moderation involving personal information must comply with data protection law. They must design moderation systems with fairness in mind, ensuring unbiased and consistent outputs. They must inform users upfront about any content identification technology used.

But the DSA's transparency requirements and GDPR's data protection principles exist in tension. Platforms must describe their content moderation practices, including any algorithmic decision making, in their terms of use. They must also describe data processing undertaken to detect illegal content in their privacy notices. The overlap creates compliance complexity and strategic ambiguity. Although rules concerning provision of information about digital services can be found in EU consumer and data protection laws, the DSA further expands the information provision list.

Research examining how platforms use GDPR transparency rights highlighted deliberate attempts by online service providers to curtail the scope and meaning of access rights. Platforms have become adept at satisfying the letter of transparency requirements whilst frustrating their spirit. Content moderation processes frequently involve third party moderation services or automated tools, raising concerns about unauthorised access and processing of user data.

The privacy constraints cut both ways. Platforms cannot publish detailed information about specific moderation decisions without potentially exposing user data. But aggregated statistics obscure precisely the granular details that would reveal whether moderation is fair. The result is transparency that protects user privacy whilst also protecting platforms from meaningful scrutiny.

Crafting Explanations Users Can Actually Understand

When users receive a notification that their content has been removed, what they get typically ranges from unhelpful to incomprehensible. A generic message citing community guidelines, perhaps with a link to the full policy document. No specific explanation of what triggered the violation. No guidance on how to avoid similar problems in future. No meaningful pathway to contest the decision.

Research has consistently shown that transparency matters enormously to people who experience moderation. Studies involving content creators identified four primary dimensions users desire: the system should present moderation decisions saliently, explain decisions profoundly, afford communication effectively, and offer repair and learning opportunities. Much research has viewed offering explanations as one of the primary solutions to enhance moderation transparency.

These findings suggest current explanation practices fail users on multiple dimensions. Explanations are often buried rather than presented prominently. They describe which rule was violated without explaining why the content triggered that rule. They offer appeals pathways that lead to automated responses. They provide no guidance on creating compliant content.

The potential of large language models to generate contextual explanations offers one promising avenue. Research suggests that adding potential social impact to the meaning of content would make moderation explanations more persuasive. Such explanations could be dynamic and interactive, including not only reasons for violating rules but recommendations for modification. Studies found that even when LLMs may not accurately understand contextual content directly, they can generate good explanations after being provided with moderation outcomes by humans.

But LLM generated explanations face challenges. Even when these systems cannot accurately understand contextual content directly, they can generate plausible sounding explanations after being provided with moderation outcomes. This creates a risk of explanatory theatre: explanations that sound reasonable whilst obscuring the actual basis for decisions. Some studies imply that users who received explanations for their removals are often more accepting of moderation practices.

The accessibility dimension adds another layer of complexity. Research examining Facebook and X moderation tools found that individuals with vision impairments who use screen readers face significant challenges. The functional accessibility of moderation tools is a prerequisite for equitable participation in platform governance, yet remains under addressed.

Effective explanations must accomplish multiple goals simultaneously: inform users about what happened, help them understand why, guide them toward compliant behaviour, and preserve their ability to contest unfair decisions. Best practices suggest starting with policies written in plain language that communicate not only what is expected but why.

Education Over Punishment Shows Promise

In January 2025, Meta launched a programme based on an Oversight Board recommendation. When users committed their first violation of an eligible policy, they received an eligible violation notice with details about the policy they breached. Instead of immediately receiving a strike, users could choose to complete an educational exercise, learning about the rule they violated and committing to follow it in future.

The results were remarkable. In just three months, more than 7.1 million Facebook users and 730,000 Instagram users opted to view these notices. By offering education as an alternative to punishment for first time offenders, Meta created a pathway that might actually reduce repeat violations rather than simply punishing them. This reflects a recommendation made in the Board's first policy advisory opinion.

This approach aligns with research on responsive regulation, which advocates using the least interventionist punishments for first time or potentially redeemable offenders, with sanctions escalating for repeat violators until reaching total incapacitation through permanent bans. The finding that 12 people were responsible for 73 per cent of COVID-19 misinformation on social media platforms suggests this graduated approach could effectively deter superspreaders and serial offenders.

Research on educational interventions shows promising results. A study using a randomised control design with 750 participants in urban Pakistan found that educational approaches can enable information discernment, though effectiveness depends on customisation for the target population. A PNAS study found that digital media literacy interventions improved discernment between mainstream and false news by 26.5 per cent in the United States and 17.5 per cent in India, with effects persisting for weeks.

Platforms have begun experimenting with different approaches. Facebook and Instagram reduce distribution of content from users who have repeatedly shared misleading content, creating consequences visible to violators without full removal. X describes a philosophy of freedom of speech rather than freedom of reach, where posts with restricted reach experience an 82 to 85.6 per cent reduction in impressions. These soft measures may be more effective than hard removals for deterring future violations whilst preserving some speech.

But educational interventions work only if users engage. Meta's 7 million users who viewed violation notices represent a subset of total violators. Those who did not engage may be precisely the bad actors these programmes aim to reach. And educational exercises assume good faith: users who genuinely misunderstood the rules.

Platforms face an impossible optimisation problem. They must moderate content quickly enough to prevent harm, accurately enough to avoid silencing legitimate speech, and opaquely enough to prevent bad actors from gaming the system. Any two can be achieved; all three together remain elusive.

Speed matters because harmful content spreads exponentially. TikTok reports that in the first three months of 2025, over 99 per cent of violating content was removed before anyone reported it, over 90 per cent was removed before gaining any views, and 94 per cent was removed within 24 hours. These statistics represent genuine achievements in preventing harm. But speed requires automation, and automation sacrifices accuracy.

Research on content moderation by large language models found that GPT-3.5 was much more likely to create false negatives (86.9 per cent of all errors) than false positives (13.1 per cent). Including more context in prompts corrected 35 per cent of errors, improving false positives by 40 per cent and false negatives by 6 per cent. An analysis of 200 error cases from GPT-4 found most erroneous flags were due to poor language use even when used neutrally.

The false positive problem is particularly acute for marginalised communities. Research consistently shows that automated systems disproportionately silence groups who are already disproportionately targeted by violative content. They cannot distinguish between hate speech and counter speech. They flag discussions of marginalised identities even when those discussions are supportive.

Gaming presents an even thornier challenge. If platforms publish too much detail about how their moderation systems work, bad actors will engineer content to evade detection. The DSA's requirement for transparency about automated systems directly conflicts with the operational need for security through obscurity. AI generated content designed to evade moderation can hide manipulated visuals in what appear to be harmless images.

Delayed moderation compounds these problems. Studies have shown that action effect delay diminishes an individual's sense of agency, which may cause users to disassociate their disruptive behaviour from delayed punishment. Immediate consequences are more effective deterrents, but immediate moderation requires automation, which introduces errors.

Defining Meaningful Metrics for Accountability

If current transparency practices amount to theatre, what would genuine accountability look like? Researchers have proposed metrics that would provide meaningful insight into moderation effectiveness.

First, error rates must be published, broken down by content type, user demographics, and language. Platforms should reveal not just how much content they remove but how often they remove content incorrectly. False positive rates matter as much as false negative rates. The choice between false positives and false negatives is a value choice of whether to assign more importance to combating harmful speech or promoting free expression.

Second, appeal outcomes should be reported in detail. What percentage of appeals are upheld? How long do they take? Are certain types more likely to succeed? Current reports provide aggregate numbers; meaningful accountability requires granular breakdown.

Third, human review rates should be disclosed honestly. What percentage of initial moderation decisions involve human review? Platforms claiming human review should document how many reviewers they employ and how many decisions each processes.

Fourth, disparate impact analyses should be mandatory. Do moderation systems affect different communities differently? Platforms have access to data that could answer this but rarely publish it.

Fifth, operational constraints that shape moderation should be acknowledged. Response time targets, accuracy benchmarks, reviewer workload limits: these parameters determine how moderation actually works. Publishing them would allow assessment of whether platforms are resourced adequately. The DSA moves toward some of these requirements, with Very Large Online Platforms facing fines up to 6 per cent of worldwide turnover for non compliance.

Rebuilding Trust That Numbers Alone Cannot Restore

The fundamental challenge facing platform moderation is not technical but relational. Users do not trust platforms to moderate fairly, and transparency reports have done little to change this.

Research found that 45 per cent of Americans quickly lose trust in a brand if exposed to toxic or fake user generated content on its channels. More than 40 per cent would disengage from a brand's community after as little as one exposure. A survey found that more than half of consumers, creators, and marketers agreed that generative AI decreased consumer trust in creator content.

These trust deficits reflect accumulated experience. Creators have watched channels with hundreds of thousands of subscribers vanish without warning or meaningful explanation. Users have had legitimate content removed for violations they do not understand. Appeals have disappeared into automated systems that produce identical rejections regardless of circumstance.

The Oversight Board's 80 per cent overturn rate demonstrates something profound: when independent adjudicators review platform decisions carefully, they frequently disagree. This is not an edge case phenomenon. It reflects systematic error in first line moderation, errors that transparency reports either obscure or fail to capture.

Rebuilding trust requires more than publishing numbers. It requires demonstrating that platforms take accuracy seriously, that errors have consequences for platform systems rather than just users, and that appeals pathways lead to genuine reconsideration. The content moderation market was valued at over 8 billion dollars in 2024, with projections reaching nearly 30 billion dollars by 2034. But money spent on moderation infrastructure means little if the outputs remain opaque and the error rates remain high.

Constructing Transparency That Actually Illuminates

The metaphor of the glass house suggests a false binary: visibility versus opacity. But the real challenge is more nuanced. Some aspects of moderation should be visible: outcomes, error rates, appeal success rates, disparate impacts. Others require protection: specific mechanisms that bad actors could exploit, personal data of users involved in moderation decisions.

The path forward requires several shifts. First, platforms must move from compliance driven transparency to accountability driven transparency. The question should not be what information regulators require but what information users need to assess whether moderation is fair.

Second, appeals systems must be resourced adequately. If the Oversight Board can review only 30 cases per year whilst receiving over half a million appeals, the system is designed to fail.

Third, out of court dispute settlement must scale. The Appeals Centre Europe's 75 per cent overturn rate suggests enormous demand for independent review. But with only eight certified bodies across the entire EU, capacity remains far below need.

Fourth, educational interventions should become the default response to first time violations. Meta's 7 million users engaging with violation notices suggests appetite for learning.

Fifth, researcher access to moderation data must be preserved. Knowledge of disinformation tactics was partly built on social media transparency that no longer exists. X ceased offering free access to researchers in 2023, now charging 42,000 dollars monthly. Meta replaced CrowdTangle, its platform for monitoring trends, with a replacement that is reportedly less transparent.

The content moderation challenge will not be solved by transparency alone. Transparency is necessary but insufficient. It must be accompanied by genuine accountability: consequences for platforms when moderation fails, resources for users to seek meaningful recourse, and structural changes that shift incentives from speed and cost toward accuracy and fairness.

The glass house was always an illusion. What platforms have built is more like a funhouse mirror: distorting, reflecting selectively, designed to create impressions rather than reveal truth. Building genuine transparency requires dismantling these mirrors and constructing something new: systems that reveal not just what platforms want to show but what users and regulators need to see.

The billions of content moderation decisions that platforms make daily shape public discourse, determine whose speech is heard, and define the boundaries of acceptable expression. These decisions are too consequential to hide behind statistics designed more to satisfy compliance requirements than to enable genuine accountability. The glass house must become transparent in fact, not just in name.


References and Sources

Appeals Centre Europe. (2024). Transparency Report on Out-of-Court Dispute Settlements. Available at: https://www.user-rights.org

Center for Democracy and Technology. (2024). Annual Report: Investigating Content Moderation in the Global South. Available at: https://cdt.org

Digital Services Act Transparency Database. (2025). European Commission. Available at: https://transparency.dsa.ec.europa.eu

European Commission. (2024). Implementing Regulation laying down templates concerning the transparency reporting obligations of providers of online platforms. Available at: https://digital-strategy.ec.europa.eu

European Commission. (2025). Harmonised transparency reporting rules under the Digital Services Act now in effect. Available at: https://digital-strategy.ec.europa.eu

Google Transparency Report. (2025). YouTube Community Guidelines Enforcement. Available at: https://transparencyreport.google.com/youtube-policy

Harvard Kennedy School Misinformation Review. (2021). Examining how various social media platforms have responded to COVID-19 misinformation. Available at: https://misinforeview.hks.harvard.edu

Information Commissioner's Office. (2024). Guidance on content moderation and data protection. Available at: https://ico.org.uk

Meta Transparency Center. (2024). Integrity Reports, Fourth Quarter 2024. Available at: https://transparency.meta.com/integrity-reports-q4-2024

Meta Transparency Center. (2025). Integrity Reports, Third Quarter 2025. Available at: https://transparency.meta.com/reports/integrity-reports-q3-2025

Oversight Board. (2025). 2024 Annual Report: Improving How Meta Treats People. Available at: https://www.oversightboard.com/news/2024-annual-report-highlights-boards-impact-in-the-year-of-elections

PNAS. (2020). A digital media literacy intervention increases discernment between mainstream and false news in the United States and India. Available at: https://www.pnas.org/doi/10.1073/pnas.1920498117

RAND Corporation. (2024). Disinformation May Thrive as Transparency Deteriorates Across Social Media. Available at: https://www.rand.org/pubs/commentary/2024/09

TikTok Transparency Center. (2025). Community Guidelines Enforcement Report. Available at: https://www.tiktok.com/transparency/en/community-guidelines-enforcement-2025-1

TikTok Newsroom. (2024). Digital Services Act: Our fourth transparency report on content moderation in Europe. Available at: https://newsroom.tiktok.com/en-eu

X Global Transparency Report. (2024). H2 2024. Available at: https://transparency.x.com

Yale Law School. (2021). Reimagining Social Media Governance: Harm, Accountability, and Repair. Available at: https://law.yale.edu


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

In July 2024, African Union ministers gathered in Accra, Ghana for the 45th Ordinary Session of the Executive Council. Their agenda included a document that had been two years in the making: the Continental Artificial Intelligence Strategy. When they endorsed it, something remarkable happened. Africa had, for the first time, articulated a collective vision for artificial intelligence governance that explicitly rejected the one-size-fits-all approach emanating from Brussels and Washington. The strategy called for “adapting AI to African realities,” with systems that “reflect our diversity, languages, culture, history, and geographical contexts.”

Commissioner Amani Abou-Zeid, who leads the African Union's infrastructure and energy portfolio, framed the endorsement as both timely and strategic. The document represented years of expert consultations, technical committee reviews, and ministerial negotiations. It positioned Africa not as a passive recipient of global technology standards but as a continent capable of authoring its own governance vision.

Yet the celebration was tempered by a sobering reality. Even as African nations crafted their own vision, the European Union's AI Act had already entered into force on 1 August 2024, establishing what many expect to become the de facto global standard. Companies doing business with European markets must comply regardless of where they are headquartered. The compliance costs alone, estimated at approximately 52,000 euros annually per high-risk AI model according to a 2021 EU study, represent a significant barrier for technology firms in developing economies. This figure comprises roughly 29,000 euros for internal compliance requirements such as documentation and human oversight, plus 23,000 euros for external auditing costs related to mandatory conformity assessments. The penalties for non-compliance are even more daunting: fines up to 35 million euros or 7 per cent of annual turnover for the most serious violations.

This is the new architecture of power in the age of artificial intelligence. And for nations across the Global South, it poses a question that cuts to the heart of sovereignty itself: when wealthy nations establish regulatory frameworks that claim universal applicability while embedding distinctly Western assumptions about privacy, individual autonomy, and acceptable risk, does adoption by developing countries constitute genuine choice or something more coercive?

The Mechanics of Regulatory Hegemony

The phenomenon has a name: the Brussels Effect. Coined by Anu Bradford, the Henry L. Moses Professor of Law and International Organization at Columbia Law School, the term describes the European Union's extraordinary ability to shape global markets through unilateral regulation. Bradford, who also serves as Director of the European Legal Studies Center at Columbia and a senior scholar at the Columbia Business School's Chazen Institute for Global Business, published her foundational research on this topic in 2012. Her 2020 book expanding the concept was recognised by Foreign Affairs as one of that year's most important works, with reviewer Andrew Moravcsik calling it “the single most important book on Europe's influence to appear in a decade.”

Bradford's research demonstrates how EU standards become entrenched in legal frameworks across both developed and developing markets, leading to what she calls a “Europeanization” of global commerce. The Brussels Effect manifests in two forms: de facto, when companies universally follow EU rules to standardise products across markets, and de jure, when formal legislation is passed in other countries aligning with EU law. Both dynamics serve to expand the reach of European regulatory philosophy far beyond the continent's borders.

The mechanism is deceptively simple. The EU represents approximately 450 million consumers with significant purchasing power. Companies seeking access to this market must comply with EU regulations. Rather than maintaining separate product lines for different jurisdictions, multinational corporations typically adopt EU standards globally. It proves more economical to build one product that meets the strictest requirements than to maintain parallel systems for different regulatory environments. Local firms in developing countries that wish to participate in supply chains or partnerships with these multinationals then find themselves adopting the same standards by necessity rather than choice.

The General Data Protection Regulation offers a preview of how this dynamic unfolds. Since its implementation in 2018, GDPR-style data protection laws have proliferated worldwide. Brazil enacted its Lei Geral de Protecao de Dados. India has implemented personal data protection legislation. South Africa, Kenya, and dozens of other nations have followed suit with laws that closely mirror European frameworks. Within two years of GDPR's enactment, major technology companies including Meta and Microsoft had updated their global services to comply, making European privacy standards the effective baseline for much of the digital world.

The question of whether these adoptions represented genuine policy preferences or structural compulsion remains contested. Supporters point to the genuine harms of unregulated data collection and the value of strong privacy protections. Critics note that the costs and administrative requirements embedded in these frameworks often exceed the capacity of smaller nations and companies to implement, effectively forcing adoption of Brussels-designed solutions rather than enabling indigenous alternatives.

The AI Act appears positioned to follow a similar trajectory. Countries including Canada, Brazil, and South Korea are already developing AI governance frameworks that borrow heavily from the EU's risk-based classification system. Canada's proposed Artificial Intelligence and Data Act, in development since 2022, mirrors Europe's approach. Brazil's AI bill, approved by the Senate in late 2024, classifies systems as excessive, high, or lower risk in direct parallel to the EU model. South Korea's AI Basic Act, passed in December 2024, borrows the EU's language of “risk” and “transparency,” though it stops short of mandating third-party audits. The Atlantic Council has noted that the Act “sets the stage for global AI governance,” while researchers at Brookings observe that its influence extends far beyond formal adoption, shaping how companies worldwide develop and deploy artificial intelligence systems.

The Values Embedded in Code and Compliance

To understand why this matters, one must examine what precisely gets encoded in these regulatory frameworks. The EU AI Act is not simply a neutral set of technical standards. It embodies specific philosophical commitments about the relationship between individuals, technology, and the state.

At its foundation lies an emphasis on individual rights, transparency, and human oversight. These principles emerge from a distinctly Western liberal tradition that prioritises personal autonomy and treats privacy as an individual entitlement rather than a collective concern. The Act's risk classification system divides AI applications into four tiers: unacceptable risk, high risk, limited risk, and minimal risk. This categorisation reflects assumptions shaped by European historical experiences, particularly around surveillance, discrimination, and the protection of fundamental rights as articulated in the EU Charter.

Practices deemed unacceptable and therefore prohibited include AI systems designed for subliminal manipulation, those exploiting vulnerabilities of specific groups, social scoring by public authorities, and certain forms of biometric identification. High-risk applications, subject to extensive compliance requirements, include AI in critical infrastructure, education, employment, law enforcement, and migration management. These categories reflect European priorities: the continent's twentieth-century experiences with totalitarianism and state surveillance have shaped particular sensitivity to government overreach and discriminatory classification systems.

But these categories may not map neatly onto the priorities and experiences of other societies. Research published in AI and Society in 2025, examining perspectives from practitioners in both Global North and Global South contexts, found that “global debates on artificial intelligence ethics and governance remain dominated by high-income, AI-intensive nations, marginalizing perspectives from low- and middle-income countries and minoritized practitioners.” The study documented how power asymmetries shape not only who participates in governance discussions but what counts as legitimate ethical concern in the first place.

Scholars at Chatham House have been more direct. In a 2024 analysis of AI governance and colonialism, researchers argued that “while not all European values are bad per se, the imposition of the values of individualism that accompany Western-developed AI and its regulations may not be suitable in communities that value communal approaches.” The report noted that the regulatory power asymmetry between Europe and Africa “that is partly a historical legacy may come into play again where AI regulation is concerned.”

Consider how different cultural frameworks might approach AI governance. The African concept of Ubuntu, increasingly discussed in technology ethics circles, offers a fundamentally different starting point. Ubuntu, a word meaning “human-ness” or “being human” in Zulu and Xhosa languages, emphasises that personhood is attained through interpersonal and communal relations rather than individualist, rational, and atomistic endeavours.

As Sabelo Mhlambi, a Fellow at Harvard's Berkman Klein Center for Technology and the Carr Center for Human Rights Policy, has argued, Ubuntu's relational framework suggests that personhood is constituted through interconnection with others rather than through individual rational autonomy. Mhlambi, a computer scientist whose research examines the ethical implications of technology in the developing world, uses this framework to argue that the harms caused by artificial intelligence are in essence violations of Ubuntu's relational model. His work proposes shifting the focus of AI governance from protecting individual rationality to maintaining the relationality between humans.

The implications for AI governance are significant. Where European frameworks emphasise protecting individual users from algorithmic harm, a Ubuntu-informed approach might prioritise how AI systems affect community bonds and collective wellbeing. Where GDPR treats data as individual property requiring consent for use, communitarian perspectives might view certain data as belonging to communities or future generations. These are not merely academic distinctions. They represent fundamentally different visions of what technology governance should accomplish.

The African Commission on Human and Peoples' Rights, in a 2021 Resolution, called upon State Parties to give serious consideration to African “values, norms and ethics” in the formulation of AI governance frameworks, explicitly identifying Ubuntu and communitarian ethos as components of such indigenous values. The UNESCO Recommendation on the Ethics of Artificial Intelligence, adopted by 193 member states in November 2021, includes what scholars have termed an “Ubuntu paragraph” acknowledging these alternative frameworks. But acknowledgment is not the same as incorporation into binding regulatory standards.

The Infrastructure of Dependency

The challenge facing developing nations extends beyond philosophical differences. The material requirements of AI governance create their own forms of dependency.

Consider the compliance infrastructure that the EU AI Act demands. High-risk AI systems must undergo conformity assessments, maintain extensive documentation, implement human oversight mechanisms, and submit to regulatory review. Providers must establish risk management systems, maintain detailed technical documentation, keep comprehensive logs of system operation, and ensure accuracy, robustness, and cybersecurity. They must register in an EU-wide database and submit to post-market monitoring requirements. The European Commission's own impact assessment estimated that compliance would add approximately 17 per cent overhead to AI development costs. For well-resourced technology companies in California or London, these requirements represent a manageable expense. For startups in Nairobi or Mumbai, they may prove prohibitive.

The numbers tell a stark story of global AI inequality. According to analysis from the Tony Blair Institute for Global Change, developing countries account for less than 10 per cent of global AI patents as of 2024. The projected 15.7 trillion dollar contribution of AI to the global economy by 2030, a figure widely cited from PwC analysis, is expected to flow disproportionately to nations that already dominate the technology sector. Without sufficient capacity to participate in AI development and governance, many Global South countries may find themselves relegated to the role of rule-takers rather than rule-makers.

Infrastructure gaps compound the challenge. India, despite generating roughly one-fifth of the world's data according to estimates from the Center for Strategic and International Studies, holds only about 3 per cent of global data centre capacity. The nation is, in the language of one CSIS analysis, “data rich but infrastructure poor.” Sub-Saharan Africa faces even more severe constraints. Only one quarter of the population has access to reliable internet, and a 29 per cent gender gap exists in mobile phone usage.

The energy requirements of AI infrastructure often exceed what fragile power grids can support. The International Energy Agency estimates that global data centre electricity consumption reached 415 terawatt-hours in 2024, approximately 1.5 per cent of worldwide electricity demand, with this figure expected to triple by 2035. To put that in perspective, the total energy consumption of households in sub-Saharan Africa is expected to reach between 430 and 500 terawatt-hours by 2030. Training a single frontier-scale AI model can consume thousands of megawatt-hours, a burden many power grids in developing nations simply cannot support.

Investment is beginning to flow. AWS opened a cloud region in Cape Town in 2020, adding approximately 673 million dollars to South Africa's GDP according to company estimates. Google launched a Johannesburg cloud region in early 2024. Microsoft and Abu Dhabi-based G42 are investing 1 billion dollars in a geothermal-powered data campus in Kenya. Yet these investments remain concentrated in a handful of countries, leaving most of the continent dependent on foreign infrastructure.

Against this backdrop, the option to develop indigenous AI governance frameworks becomes not merely a regulatory choice but a question of resource allocation. Should developing nations invest limited technical and bureaucratic capacity in implementing frameworks designed in Brussels? Or should they pursue alternative approaches better suited to local conditions, knowing that divergence from EU standards may limit access to global markets and investment?

Historical Echoes and Structural Patterns

For scholars of development and international political economy, these dynamics have a familiar ring. The parallels to previous episodes of regulatory imposition are striking, if imperfect.

The TRIPS Agreement, concluded as part of the Uruguay Round of GATT negotiations in the early 1990s, offers a particularly instructive comparison. That agreement required all World Trade Organisation members to implement minimum standards for intellectual property protection, standards that largely reflected the interests of pharmaceutical and technology companies in wealthy nations. The Electronic Frontier Foundation has documented how campaigns of unilateral economic pressure under Section 301 of the US Trade Act played a role in defeating alternative policy positions favoured by developing countries including Brazil, India, and Caribbean Basin states.

Developing countries secured transition periods and promises of technical assistance, but the fundamental architecture of the agreement reflected power asymmetries that critics described as neo-colonial. The United Nations Conference on Trade and Development documented that implementing TRIPS required “significant improvements, adaptation and enlargement of legal, administrative and particularly enforcement frameworks, as well as human resource development.” The Doha Declaration of 2001, which clarified that TRIPS should not prevent states from addressing public health crises through compulsory licensing and other mechanisms, came only after intense developing country advocacy and a global campaign around access to medicines for HIV/AIDS.

Research from the Dharmashastra National Law University's Student Law Journal argues that “the adoption of AI laws by countries in the Global South perpetuates the idea of continuing colonial legacies. Such regulatory models adopted from the Global North are not reflective of the existing needs of native societies.” The analysis noted that while African states have not been formally coerced into adopting EU regulations, they may nonetheless choose to comply to access European markets, “in much the same way as some African states have already adopted European cyber governance standards.”

A 2024 analysis published in the National Institutes of Health database examining decolonised AI governance in Sub-Saharan Africa found that “the call for decolonial ethics arises from long-standing patterns of extractive practices and power consolidation of decision-making authority between the Global North and Global South.” The researchers documented how “the infrastructures and data economies underpinning AI often replicate earlier colonial patterns of resource and labor extraction, where regions in the Global South provide data, annotation work, and computational resources while deriving limited benefit.”

Abeba Birhane, an Ethiopian-born cognitive scientist now at Trinity College Dublin and a Senior Fellow in Trustworthy AI at the Mozilla Foundation, has developed the concept of “algorithmic colonisation” to describe how Western technology companies' expansion into developing markets shares characteristics with historical colonialism. Her research, which earned her recognition as one of TIME's 100 most influential persons in AI for 2023, documents how “traditional colonialism has been driven by political and government forces; algorithmic colonialism, on the other hand, is driven by corporate profits. While the former used brute force domination, colonialism in the age of AI takes the form of 'state-of-the-art algorithms' and 'AI solutions' to social problems.”

Competing Visions and Emerging Alternatives

Yet the story is not simply one of imposition and acquiescence. Across the Global South, alternative approaches to AI governance are taking shape, demonstrating that multiple regulatory paradigms are possible.

India offers perhaps the most developed alternative model. The India AI Governance Guidelines, developed under the IndiaAI Mission and released for public consultation in 2025, explicitly reject the need for comprehensive AI-specific legislation at this stage. Instead, they advocate a “techno-legal model” in which law and technology co-evolve, allowing compliance to be “verifiable by design rather than enforced ex post.” The guidelines note that existing laws on information technology, data protection, consumer protection, and statutory civil and criminal codes can address many AI-related risks. Rather than creating an entirely new regulatory apparatus, the framework proposes building on India's existing digital public infrastructure.

The approach reflects India's distinctive position. The nation hosts the world's largest digital identity system, Aadhaar, which has enrolled over 1.3 billion residents. It operates the biggest digital payments system by volume through the Unified Payments Interface. According to the Stanford Artificial Intelligence Index Report 2025, India ranks second globally in AI skill penetration from 2015 to 2024. Rather than importing the regulatory architecture of the EU, Indian policymakers are building on existing digital public infrastructure to create governance frameworks suited to local conditions. The framework establishes an AI Governance Group for overall policy formulation and coordination across agencies, while sector-specific regulators like the Reserve Bank of India handle domain-specific rules.

The Indian framework explicitly positions itself as an alternative model for the Global South. Through the G20 Digital Economy Working Group, India has proposed extending its digital public infrastructure model into an international partnership, a logic that could be applied to AI governance as well. India's leadership of the Global Partnership on AI, culminating in the 2024 New Delhi Summit, demonstrated that developing nations can shape global discussions when they participate from positions of technical and institutional strength.

Singapore has pursued yet another approach, prioritising innovation through voluntary frameworks rather than prescriptive mandates. Singapore's National Artificial Intelligence Strategy 2.0, launched in December 2023, commits over 1 billion Singapore dollars over five years to advance AI capabilities. The Model AI Governance Framework for Generative AI, developed in consultation with over 70 global organisations including Microsoft, OpenAI, and Google, establishes nine dimensions for responsible AI deployment without imposing mandatory compliance requirements.

This flexibility has enabled Singapore to position itself as a governance innovation hub. In February 2025, Singapore's Infocomm Media Development Authority and the AI Verify Foundation launched the Global AI Assurance Pilot to codify emerging norms for technical testing. In late 2024, Singapore conducted the world's first multilingual AI safety red-teaming exercise focused on the Asia-Pacific, bringing together over 350 participants from 9 countries to test large language models for cultural bias. Singapore is also working with Rwanda to develop a Digital Forum of Small States AI Governance Playbook, recognising that smaller nations face unique challenges in AI governance.

China, meanwhile, has developed its own comprehensive governance ecosystem that operates entirely outside the EU framework. The AI Safety Governance Framework, released in September 2024 by China's National Technical Committee 260 on Cybersecurity, takes a fundamentally different approach to risk classification. Rather than dividing AI systems into risk levels, it categorises the types of risks themselves, distinguishing between inherent risks from the technology and risks posed by its application. Beijing's approach combines tiered supervision, security assessments, regulatory sandboxes, and app-store enforcement.

These divergent approaches matter because they demonstrate that multiple regulatory paradigms are possible. The question is whether developing nations without China's market power or India's technical capacity will have the space to pursue alternatives, or whether market pressures and institutional constraints will channel them toward EU-style frameworks regardless of local preferences.

The Institutional Preconditions for Genuine Choice

What would it take for developing countries to exercise meaningful sovereignty over AI governance? The preconditions are formidable but not impossible.

First, and most fundamentally, developing nations require technical capacity. This means not only the engineering expertise to develop AI systems but the regulatory expertise to evaluate their risks and benefits. Currently, the knowledge needed to assess AI systems is concentrated overwhelmingly in wealthy nations. Building this capacity requires sustained investment in education, research institutions, and regulatory bodies, investments that compete with other urgent development priorities including healthcare, infrastructure, and climate adaptation.

The African Union's Continental AI Strategy recognises this challenge. Its implementation timeline extends from 2025 to 2030, with the first phase focused on “establishing governance structures, creating national AI strategies, and mobilizing resources.” UNESCO has provided technical and financial support for the strategy's development and implementation planning. Yet even with this assistance, the strategy faces significant obstacles. Analysis of 18-month implementation data reveals stark geographic concentration, with 83 per cent of funding concentrated in four countries: Kenya, Nigeria, South Africa, and Egypt.

Total tech funding for Africa reached 2.21 billion dollars in 2024, down 22 per cent from the previous year according to industry tracking. Of this, AI-specific startups received approximately 400 to 500 million dollars. These figures, while growing, remain a fraction of the investment flowing to AI development in North America, Europe, and China. Local initiatives are emerging: Johannesburg-based Lelapa AI launched InkubaLM in September 2024, a small language model focused on five African languages including Swahili, Hausa, Yoruba, isiZulu, and isiXhosa. With only 0.4 billion parameters, it performs comparably to much larger models, demonstrating that efficient, locally-relevant AI development is possible.

Second, developing nations need platforms for collective action. Individual countries lack the market power to resist regulatory convergence toward EU standards, but regional blocs potentially offer countervailing force. The African Union, ASEAN, and South American regional organisations could theoretically develop common frameworks that provide alternatives to Brussels-designed governance.

Some movement in this direction is visible. ASEAN countries have been developing AI guidelines that, while borrowing elements from the EU approach, also reflect regional priorities around national development and ecosystem building. Southeast Asian nations have generally adopted a wait-and-see approach toward global regulatory trends, observing international developments before crafting their own frameworks. The African Union's strategy explicitly calls for unified national approaches among member states and encourages cross-border data sharing to support AI development. Yet these regional initiatives remain in early stages, lacking the enforcement mechanisms and market leverage that give EU regulations their global reach.

Third, and perhaps most controversially, developing nations may need to resist the framing of alternative regulatory approaches as “races to the bottom” or “regulatory arbitrage.” The discourse surrounding AI governance often assumes that weaker regulation necessarily means exploitation and harm. This framing can delegitimise genuine attempts to develop governance frameworks suited to different conditions and priorities.

There is a legitimate debate about whether communitarian approaches to data governance, or more permissive frameworks for AI experimentation, or different balances between innovation and precaution, represent valid alternative visions or merely excuses for corporate exploitation. But foreclosing this debate by treating EU standards as the benchmark of responsible governance effectively denies developing nations the agency to make their own assessments.

The Question of Epistemology

At the deepest level, the challenge facing the Global South is epistemological. Whose knowledge counts in defining what responsible AI looks like?

Current governance frameworks draw primarily on Western philosophical traditions, Western academic research, and Western institutional expertise. The major AI ethics guidelines, the prominent research institutions, the influential think tanks and policy organisations, these are concentrated overwhelmingly in North America and Western Europe. When developing countries adopt frameworks designed in these contexts, they are not simply accepting regulatory requirements. They are accepting particular ways of understanding technology, society, and the relationship between them.

The concept of Ubuntu challenges the assumption that ethical frameworks should centre on individual rights and protections. As scholars in Ethics and Information Technology have argued, “under the African ethics of Ubuntu, for an individual to fully become a person, her positive relations with others are fundamental. Personhood is attained through interpersonal and communal relations, rather than individualist, rational and atomistic endeavours.” This stands in stark contrast with Western philosophy, where individual autonomy, rationality, and prudence are considered crucial for personhood.

Governance in liberal democracies of the Global North focuses primarily on protecting autonomy within the individual private sphere. Ubuntu-informed governance would take a different starting point, focusing on how systems affect relational bonds and collective flourishing. The implications extend beyond abstract ethics to practical questions of AI design, deployment, and oversight.

Similar challenges come from other philosophical traditions. Indigenous knowledge systems, religious frameworks, and non-Western philosophical schools offer distinct perspectives on questions of agency, responsibility, and collective action that current AI governance frameworks largely ignore. Safiya Umoja Noble, the David O. Sears Presidential Endowed Chair of Social Sciences at UCLA and a 2021 MacArthur Fellow, has documented how search algorithms and AI systems embed particular cultural assumptions that disadvantage marginalised communities. Her research challenges the idea that technology platforms offer neutral playing fields.

The Distributed AI Research Institute, founded by Timnit Gebru in 2021 with 3.7 million dollars in foundation funding from the Ford Foundation, MacArthur Foundation, Kapor Center, and Open Society Foundation, represents one effort to create space for alternative perspectives. DAIR prioritises work that benefits Black people in Africa and the diaspora, documents the effects of AI on marginalised groups, and operates explicitly outside the influence of major technology companies. One of the institute's initial projects analyses satellite imagery of townships in South Africa using AI to better understand legacies of apartheid.

The question is whether global AI governance can genuinely pluralise or whether structural pressures will continue to centre Western perspectives while marginalising alternatives. The experience of previous regulatory regimes, from intellectual property to data protection, suggests that dominant frameworks tend to reproduce themselves even as they claim universal applicability.

The Stakes of the Present Moment

The decisions made in the next few years will shape global AI governance for decades. The EU AI Act implementation timeline extends through 2027, with major provisions taking effect incrementally. Prohibited AI practices became applicable in February 2025. Governance rules for general-purpose AI models took effect in August 2025. Rules for high-risk AI systems have an extended transition period until August 2027. The African Union's strategy runs to 2030. India's guidelines are just beginning their implementation journey. These overlapping timelines create a critical window in which the architecture of global AI governance will solidify.

For developing nations, the stakes extend beyond technology policy. The question of whether they can exercise genuine sovereignty over AI governance is ultimately a question about the structure of the global order itself. If the answer is no, if structural pressures channel developing countries toward Western regulatory frameworks regardless of local preferences, then the promise of a multipolar world in which diverse societies chart their own paths will have proven hollow in the very domain most likely to shape the coming century.

The alternative is not isolation or rejection of global standards. It is the creation of governance architectures that genuinely accommodate plurality, that treat different societies' preferences as legitimate rather than deviant, and that build capacity for developing nations to participate as authors rather than merely adopters of global norms. The Global Partnership on AI, now hosting 44 member countries across six continents, represents one forum where such pluralism might develop. The partnership explicitly aims to welcome developing and emerging economies committed to responsible AI principles.

Whether such alternatives can emerge remains uncertain. The forces favouring convergence toward EU-style frameworks are powerful: market pressures from companies standardising on EU-compliant products, institutional constraints from international organisations dominated by wealthy nations, capacity asymmetries that make it easier to adopt existing frameworks than develop new ones, and the sheer momentum of existing regulatory trajectories. But the growing articulation of alternative visions, from the African Union's Continental Strategy to India's techno-legal model to academic frameworks grounded in Ubuntu and other non-Western traditions, suggests that the debate is far from settled.

The Global South's response to Western AI governance frameworks will not be uniform. Some nations will embrace EU standards as pathways to global market access and signals of regulatory credibility. Others will resist, developing indigenous approaches better suited to local conditions and philosophical traditions. Most will pursue hybrid strategies, adopting elements of Western frameworks while attempting to preserve space for alternative approaches.

What is certain is that the framing of these choices matters. If developing nations are seen as simply choosing between responsible regulation and regulatory arbitrage, the outcome is predetermined. If, instead, they are recognised as legitimate participants in a global conversation about how societies should govern artificial intelligence, the possibilities expand. The architecture of AI governance can either reproduce historical patterns of dependency or open space for genuine pluralism. The choices made now will determine which future emerges.


References and Sources

African Union. “Continental Artificial Intelligence Strategy.” African Union, August 2024. https://au.int/en/documents/20240809/continental-artificial-intelligence-strategy

African Union. “African Ministers Adopt Landmark Continental Artificial Intelligence Strategy.” African Union Press Release, June 2024. https://au.int/en/pressreleases/20240617/african-ministers-adopt-landmark-continental-artificial-intelligence-strategy

Birhane, Abeba. “Algorithmic Colonization of Africa.” Oxford Academic, 2020. https://academic.oup.com/book/46567/chapter/408130272

Bradford, Anu. “The Brussels Effect: How the European Union Rules the World.” Oxford University Press, 2020. Columbia Law School Faculty Profile: https://www.law.columbia.edu/faculty/anu-bradford

Brookings Institution. “The EU AI Act will have global impact, but a limited Brussels Effect.” Brookings, 2024. https://www.brookings.edu/articles/the-eu-ai-act-will-have-global-impact-but-a-limited-brussels-effect/

Centre for European Policy Studies. “Clarifying the costs for the EU's AI Act.” CEPS, 2024. https://www.ceps.eu/clarifying-the-costs-for-the-eus-ai-act/

Chatham House. “Artificial intelligence and the challenge for global governance: Resisting colonialism.” Chatham House, 2024. https://www.chathamhouse.org/2024/06/artificial-intelligence-and-challenge-global-governance/06-resisting-colonialism-why-ai

CSIS. “From Divide to Delivery: How AI Can Serve the Global South.” Center for Strategic and International Studies, 2025. https://www.csis.org/analysis/divide-delivery-how-ai-can-serve-global-south

Dharmashastra National Law University. “Challenging the Coloniality in Global AI Regulation Frameworks.” Student Law Journal, 2024. https://dnluslj.in/challenging-the-coloniality-in-global-ai-regulation-frameworks/

European Commission. “AI Act: Shaping Europe's Digital Future.” European Commission, 2024. https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai

Government of India. “India AI Governance Guidelines.” Ministry of Electronics and IT, 2025. https://indiaai.gov.in/article/india-ai-governance-guidelines-empowering-ethical-and-responsible-ai

Harvard Kennedy School. “From Rationality to Relationality: Ubuntu as an Ethical and Human Rights Framework for Artificial Intelligence Governance.” Carr Center for Human Rights Policy, 2020. https://carrcenter.hks.harvard.edu/publications/rationality-relationality-ubuntu-ethical-and-human-rights-framework-artificial

IAPP. “Global AI Governance Law and Policy: Singapore.” International Association of Privacy Professionals, 2025. https://iapp.org/resources/article/global-ai-governance-singapore

IMDA Singapore. “Model AI Governance Framework 2024.” Infocomm Media Development Authority, 2024. https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2024/public-consult-model-ai-governance-framework-genai

Mhlambi, Sabelo. Harvard Berkman Klein Center Profile. https://cyber.harvard.edu/people/sabelo-mhlambi

Noble, Safiya Umoja. UCLA Faculty Profile. https://seis.ucla.edu/faculty/safiya-umoja-noble/

OECD. “Global Partnership on Artificial Intelligence.” OECD, 2024. https://www.oecd.org/en/about/programmes/global-partnership-on-artificial-intelligence.html

PMC. “Decolonizing global AI governance: assessment of the state of decolonized AI governance in Sub-Saharan Africa.” National Institutes of Health, 2024. https://pmc.ncbi.nlm.nih.gov/articles/PMC11303018/

PMC. “The role of the African value of Ubuntu in global AI inclusion discourse.” National Institutes of Health, 2022. https://pmc.ncbi.nlm.nih.gov/articles/PMC9023883/

Springer. “Ethics of AI in Africa: Interrogating the role of Ubuntu and AI governance initiatives.” Ethics and Information Technology, 2025. https://link.springer.com/article/10.1007/s10676-025-09834-5

Springer. “Understanding AI and power: situated perspectives from Global North and South practitioners.” AI and Society, 2025. https://link.springer.com/article/10.1007/s00146-025-02731-x

Stanford University. “Human-Centered Artificial Intelligence Index Report.” Stanford HAI, 2025. https://hai.stanford.edu/

Tony Blair Institute for Global Change. “How Leaders in the Global South Can Devise AI Regulation That Enables Innovation.” Institute for Global Change, 2024. https://institute.global/insights/tech-and-digitalisation/how-leaders-in-the-global-south-can-devise-ai-regulation-that-enables-innovation

UNCTAD. “The TRIPS Agreement.” United Nations Conference on Trade and Development. https://unctad.org/system/files/official-document/ite1_en.pdf

UNESCO. “Recommendation on the Ethics of Artificial Intelligence.” UNESCO, 2021. https://www.unesco.org/en/articles/recommendation-ethics-artificial-intelligence

Washington Post. “Timnit Gebru launches DAIR, her new AI ethics research institute.” Washington Post, December 2021. https://www.washingtonpost.com/technology/2021/12/02/timnit-gebru-dair/

White and Case. “AI Watch: Global regulatory tracker – China.” White and Case LLP, 2024. https://www.whitecase.com/insight-our-thinking/ai-watch-global-regulatory-tracker-china


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

The human brain runs on roughly 20 watts. That is less power than the light bulb illuminating your desk, yet it orchestrates consciousness, creativity, memory, and the ability to read these very words. Within that modest thermal envelope, approximately 100 billion neurons fire in orchestrated cascades, connected by an estimated 100 trillion synapses, each consuming roughly 10 femtojoules per synaptic event. To put that in perspective: the energy powering a single thought could not warm a thimble of water by a measurable fraction of a degree.

Meanwhile, the graphics processing units training today's large language models consume megawatts and require industrial cooling systems. Training a single frontier AI model can cost millions in electricity alone. The disparity is so stark, so seemingly absurd, that it has launched an entire field of engineering dedicated to a single question: can we build computers that think like brains?

The answer, it turns out, is far more complicated than the question implies.

The Efficiency Enigma

The numbers sound almost fictional. According to research published in the Proceedings of the National Academy of Sciences, communication in the human cortex consumes approximately 35 times more energy than computation itself, yet the total computational budget amounts to merely 0.2 watts of ATP. The remaining energy expenditure of the brain, around 3.5 watts, goes toward long-distance neural communication. This audit reveals something profound: biological computation is not merely efficient; it is efficient in ways that conventional computing architectures cannot easily replicate.

Dig deeper into the cellular machinery, and the efficiency story becomes even more remarkable. Research published in the Journal of Cerebral Blood Flow and Metabolism has mapped the energy budget of neural computation with extraordinary precision. In the cerebral cortex, resting potentials account for approximately 20% of total energy use, action potentials consume 21%, and synaptic processes dominate at 59%. The brain has evolved an intricate accounting system for every molecule of ATP.

The reason for this efficiency lies in the fundamental architecture of biological neural networks. Unlike the von Neumann machines that power our laptops and data centres, where processors and memory exist as separate entities connected by data buses, biological neurons are both processor and memory simultaneously. Each synapse stores information in its connection strength while also performing the computation that determines whether to pass a signal forward. There is no memory bottleneck because there is no separate memory.

This architectural insight drove Carver Mead, the Caltech professor who coined the term “neuromorphic” in the mid-1980s, to propose a radical alternative to conventional computing. Observing that charges moving through MOS transistors operated in weak inversion bear striking parallels to charges flowing across neuronal membranes, Mead envisioned silicon systems that would exploit the physics of transistors rather than fighting against it. His 1989 book, Analog VLSI and Neural Systems, became the foundational text for an entire field. Working with Nobel laureates John Hopfield and Richard Feynman, Mead helped create three new fields: neural networks, neuromorphic engineering, and the physics of computation.

The practical fruits of Mead's vision arrived early. In 1986, he co-founded Synaptics with Federico Faggin to develop analog circuits based on neural networking theories. The company's first commercial product, a pressure-sensitive computer touchpad, eventually captured 70% of the touchpad market, a curious reminder that brain-inspired computing first succeeded not through cognition but through touch.

Three and a half decades later, that field has produced remarkable achievements. Intel's Loihi 2 chip, fabricated on a 14-nanometre process, integrates 128 neuromorphic cores capable of simulating up to 130,000 synthetic neurons and 130 million synapses. A unique feature of Loihi's architecture is its integrated learning engine, enabling full on-chip learning via programmable microcode learning rules. IBM's TrueNorth, unveiled in 2014, packs one million neurons and 256 million synapses onto a chip consuming just 70 milliwatts, with a power density one ten-thousandth that of conventional microprocessors. The SpiNNaker system at the University of Manchester, conceived by Steve Furber (one of the original designers of the ARM microprocessor), contains over one million ARM processors capable of simulating a billion neurons in biological real-time.

These are genuine engineering marvels. But are they faithful translations of biological principles, or are they something else entirely?

The Translation Problem

The challenge of neuromorphic computing is fundamentally one of translation. Biological neurons operate through a bewildering array of mechanisms: ion channels opening and closing across cell membranes, neurotransmitters diffusing across synaptic clefts, calcium cascades triggering long-term changes in synaptic strength, dendritic trees performing complex nonlinear computations, glial cells modulating neural activity in ways we are only beginning to understand. The system is massively parallel, deeply interconnected, operating across multiple timescales from milliseconds to years, and shot through with stochasticity at every level.

Silicon, by contrast, prefers clean digital logic. Transistors want to be either fully on or fully off. The billions of switching events in a modern processor are choreographed with picosecond precision. Randomness is the enemy, meticulously engineered out through redundancy and error correction. The very physics that makes digital computing reliable makes biological fidelity difficult.

Consider spike-timing-dependent plasticity, or STDP, one of the fundamental learning mechanisms in biological neural networks. The principle is elegant: if a presynaptic neuron fires just before a postsynaptic neuron, the connection between them strengthens. If the timing is reversed, the connection weakens. This temporal precision, operating on timescales of milliseconds, allows networks to learn temporal patterns and causality.

Implementing STDP in silicon requires trade-offs. Digital implementations on platforms like SpiNNaker must maintain precise timing records for potentially millions of synapses, consuming memory and computational resources. Analog implementations face challenges with device variability and noise. Memristor-based approaches, which exploit the physics of resistive switching to store synaptic weights, offer elegant solutions for weight storage but struggle with the temporal dynamics. Each implementation captures some aspects of biological STDP while necessarily abandoning others.

The BrainScaleS system at Heidelberg University takes perhaps the most radical approach to biological fidelity. Unlike digital neuromorphic systems that simulate neural dynamics, BrainScaleS uses analog circuits to physically emulate them. The silicon neurons and synapses implement the underlying differential equations through the physics of the circuits themselves. No equation gets explicitly solved; instead, the solution emerges from the natural evolution of voltages and currents. The system runs up to ten thousand times faster than biological real-time, offering both a research tool and a demonstration that analog approaches can work.

Yet even BrainScaleS makes profound simplifications. Its 512 neuron circuits and 131,000 synapses per chip are a far cry from the billions of neurons in a human cortex. The neuron model it implements, while sophisticated, omits countless biological details. The dendrites are simplified. The glial cells are absent. The stochasticity is controlled rather than embraced.

The Stochasticity Question

Here is where neuromorphic computing confronts one of its deepest challenges. Biological neural networks are noisy. Synaptic vesicle release is probabilistic, with transmission rates measured in vivo ranging from as low as 10% to as high as 50% at different synapses. Ion channel opening is stochastic. Spontaneous firing occurs. The system is bathed in noise at every level. It is one of nature's great mysteries how such a noisy computing system can perform computation reliably.

For decades, this noise was viewed as a bug, a constraint that biological systems had to work around. But emerging research suggests it may be a feature. According to work published in Nature Communications, synaptic noise has the distinguishing characteristic of being multiplicative, and this multiplicative noise plays a key role in learning and probabilistic inference. The brain may be implementing a form of Bayesian computation, sampling from probability distributions to represent uncertainty and make decisions under incomplete information.

The highly irregular spiking activity of cortical neurons and behavioural variability suggest that the brain could operate in a fundamentally probabilistic way. One prominent idea in neuroscience is that neural computing is inherently stochastic and that noise is an integral part of the computational process rather than an undesirable side effect. Mimicking how the brain implements and learns probabilistic computation could be key to developing machine intelligence that can think more like humans.

This insight has spawned a new field: probabilistic or stochastic computing. Artificial neuron devices based on memristors and ferroelectric field-effect transistors can produce uncertain, nonlinear output spikes that may be key to bringing machine learning closer to human cognition.

But here lies a paradox. Traditional silicon fabrication spends enormous effort eliminating variability and noise. Device-to-device variation is a manufacturing defect to be minimised. Thermal noise is interference to be filtered. The entire thrust of semiconductor engineering for seventy years has been toward determinism and precision. Now neuromorphic engineers are asking: what if we need to engineer the noise back in?

Some researchers are taking this challenge head-on. Work on exploiting noise as a resource for computation demonstrates that the inherent noise and variation in memristor nanodevices can be harnessed as features for energy-efficient on-chip learning rather than fought as bugs. The stochastic behaviour that conventional computing spends energy suppressing becomes, in this framework, a computational asset.

The Memristor Revolution

The memristor, theorised by Leon Chua in 1971 and first physically realised by HP Labs in 2008, has become central to the neuromorphic vision. Unlike conventional transistors that forget their state when power is removed, memristors remember. Their resistance depends on the history of current that has flowed through them, a property that maps naturally onto synaptic weight storage.

Moreover, memristors can be programmed with multiple resistance levels, enhancing information density within a single cell. This technology truly shines when memristors are organised into crossbar arrays, performing analog computing that leverages physical laws to accelerate matrix operations. The physics of Ohm's law and Kirchhoff's current law perform the multiplication and addition operations that form the backbone of neural network computation.

Recent progress has been substantial. In February 2024, researchers demonstrated a circuit architecture that enables low-precision analog devices to perform high-precision computing tasks. The secret lies in using a weighted sum of multiple devices to represent one number, with subsequently programmed devices compensating for preceding programming errors. This breakthrough was achieved not just in academic settings but in cutting-edge System-on-Chip designs, with memristor-based neural processing units fabricated in standard commercial foundries.

In 2025, researchers presented a memristor-based analog-to-digital converter featuring adaptive quantisation for diverse output distributions. Compared to state-of-the-art designs, this converter achieved a 15-fold improvement in energy efficiency and nearly 13-fold reduction in area. The trajectory is clear: memristor technology is maturing from laboratory curiosity to commercial viability.

Yet challenges remain. Current research highlights key issues including device variation, the need for efficient peripheral circuitry, and systematic co-design and optimisation. By integrating advances in flexible electronics, AI hardware, and three-dimensional packaging, memristor logic gates are expected to support scalable, reconfigurable computing in edge intelligence and in-memory processing systems.

The Economics of Imitation

Even if neuromorphic systems could perfectly replicate biological neural function, the economics of silicon manufacturing impose their own constraints. The global neuromorphic computing market was valued at approximately 28.5 million US dollars in 2024, projected to grow to over 1.3 billion by 2030. These numbers, while impressive in growth rate, remain tiny compared to the hundreds of billions spent annually on conventional semiconductor manufacturing.

Scale matters in chip production. The fabs that produce cutting-edge processors cost tens of billions of dollars to build and require continuous high-volume production to amortise those costs. Neuromorphic chips, with their specialised architectures and limited production volumes, cannot access the same economies of scale. The manufacturing processes are not yet optimised for large-scale production, resulting in high costs per chip.

This creates a chicken-and-egg problem. Without high-volume applications, neuromorphic chips remain expensive. Without affordable chips, applications remain limited. The industry is searching for what some call a “killer app,” the breakthrough use case that would justify the investment needed to scale production.

Energy costs may provide that driver. Training a single large language model can consume electricity worth millions of dollars. Data centres worldwide consume over one percent of global electricity, and that fraction is rising. If neuromorphic systems can deliver on their promise of dramatically reduced power consumption, the economic equation shifts.

In April 2025, during the annual International Conference on Learning Representations, researchers demonstrated the first large language model adapted to run on Intel's Loihi 2 chip. It achieved accuracy comparable to GPU-based models while using half the energy. This milestone represents meaningful progress, but “half the energy” is still a long way from the femtojoule-per-operation regime of biological synapses. The gap between silicon neuromorphic systems and biological brains remains measured in orders of magnitude.

Beyond the Brain Metaphor

And this raises a disquieting question: what if the biological metaphor is itself a constraint?

The brain evolved under pressures that have nothing to do with the tasks we ask of artificial intelligence. It had to fit inside a skull. It had to run on the chemical energy of glucose. It had to develop through embryogenesis and remain plastic throughout a lifetime. It had to support consciousness, emotion, social cognition, and motor control simultaneously. These constraints shaped its architecture in ways that may be irrelevant or even counterproductive for artificial systems.

Consider memory. Biological memory is reconstructive rather than reproductive. We do not store experiences like files on a hard drive; we reassemble them from distributed traces each time we remember, which is why memories are fallible and malleable. This is fine for biological organisms, where perfect recall is less important than pattern recognition and generalisation. But for many computing tasks, we want precise storage and retrieval. The biological approach is a constraint imposed by wet chemistry, not an optimal solution we should necessarily imitate.

Or consider the brain's operating frequency. Neurons fire at roughly 10 hertz, while transistors switch at gigahertz, a factor of one hundred million faster. IBM researchers realised that event-driven spikes use silicon-based transistors inefficiently. If synapses in the human brain operated at the same rate as a laptop, as one researcher noted, “our brain would explode.” The slow speed of biological neurons is an artefact of electrochemical signalling, not a design choice. Forcing silicon to mimic this slowness wastes most of its speed advantage.

These observations suggest that the most energy-efficient computing paradigm for silicon may have no biological analogue at all.

Alternative Paradigms Without Biological Parents

Thermodynamic computing represents perhaps the most radical departure from both conventional and neuromorphic approaches. Instead of fighting thermal noise, it harnesses it. The approach exploits the natural stochastic behaviour of physical systems, treating heat and electrical noise not as interference but as computational resources.

The startup Extropic has developed what they call a thermodynamic sampling unit, or TSU. Unlike CPUs and GPUs that perform deterministic computations, TSUs produce samples from programmable probability distributions. The fundamental insight is that the random behaviour of “leaky” transistors, the very randomness that conventional computing engineering tries to eliminate, is itself a powerful computational resource. Simulations suggest that running denoising thermodynamic models on TSUs could be 10,000 times more energy-efficient than equivalent algorithms on GPUs.

Crucially, thermodynamic computing sidesteps the scaling challenges that plague quantum computing. While quantum computers require cryogenic temperatures, isolation from environmental noise, and exotic fabrication processes, thermodynamic computers can potentially be built using standard CMOS manufacturing. They embrace the thermal environment that quantum computers must escape.

Optical computing offers another path forward. Researchers at MIT demonstrated in December 2024 a fully integrated photonic processor that performs all key computations of a deep neural network optically on-chip. The device completed machine-learning classification tasks in less than half a nanosecond while achieving over 92% accuracy. Crucially, the chip was fabricated using commercial foundry processes, suggesting a path to scalable production.

The advantages of photonics are fundamental. Light travels at the speed of light. Photons do not interact with each other, enabling massive parallelism without interference. Heat dissipation is minimal. Bandwidth is essentially unlimited. Work at the quantum limit has demonstrated optical neural networks operating at just 0.038 photons per multiply-accumulate operation, approaching fundamental physical limits of energy efficiency.

Yet photonic computing faces its own challenges. Implementing nonlinear functions, essential for neural network computation, is difficult in optics precisely because photons do not interact easily. The MIT team's solution was to create nonlinear optical function units that combine electronics and optics, a hybrid approach that sacrifices some of the purity of all-optical computing for practical functionality.

Hyperdimensional computing takes inspiration from the brain but in a radically simplified form. Instead of modelling individual neurons and synapses, it represents concepts as very high-dimensional vectors, typically with thousands of dimensions. These vectors can be combined using simple operations like addition and multiplication, with the peculiar properties of high-dimensional spaces ensuring that similar concepts remain similar and different concepts remain distinguishable.

The approach is inherently robust to noise and errors, properties that emerge from the mathematics of high-dimensional spaces rather than from any biological mechanism. Because the operations are simple, implementations can be extremely efficient, and the paradigm maps well onto both conventional digital hardware and novel analog substrates.

Reservoir computing exploits the dynamics of fixed nonlinear systems to perform computation. The “reservoir” can be almost anything: a recurrent neural network, a bucket of water, a beam of light, or even a cellular automaton. Input signals perturb the reservoir, and a simple readout mechanism learns to extract useful information from the reservoir's state. Training occurs only at the readout stage; the reservoir itself remains fixed.

This approach has several advantages. By treating the reservoir as a “black box,” it can exploit naturally available physical systems for computation, reducing the engineering burden. Classical and quantum mechanical systems alike can serve as reservoirs. The computational power of the physical world is pressed into service directly, rather than laboriously simulated in silicon.

The Fidelity Paradox

So we return to the question posed at the outset: to what extent do current neuromorphic and in-memory computing approaches represent faithful translations of biological principles versus engineering approximations constrained by silicon physics and manufacturing economics?

The honest answer is: mostly the latter. Current neuromorphic systems capture certain aspects of biological neural computation, principally the co-location of memory and processing, the use of spikes as information carriers, and some forms of synaptic plasticity, while necessarily abandoning others. The stochasticity, the temporal dynamics, the dendritic computation, the neuromodulation, the glial involvement, and countless other biological mechanisms are simplified, approximated, or omitted entirely.

This is not necessarily a criticism. Engineering always involves abstraction and simplification. The question is whether the aspects retained are the ones that matter for efficiency, and whether the aspects abandoned would matter if they could be practically implemented.

Here the evidence is mixed. Neuromorphic systems do demonstrate meaningful energy efficiency gains for certain tasks. Intel's Loihi achieves performance improvements of 100 to 10,000 times in energy efficiency for specific workloads compared to conventional approaches. IBM's TrueNorth can perform 46 billion synaptic operations per second per watt. These are substantial achievements.

But they remain far from biological efficiency. The brain achieves femtojoule-per-operation efficiency; current neuromorphic hardware typically operates in the picojoule range or above, a gap of three to six orders of magnitude. Researchers have achieved artificial synapses operating at approximately 1.23 femtojoules per synaptic event, rivalling biological efficiency, but scaling these laboratory demonstrations to practical systems remains a formidable challenge.

The SpiNNaker 2 system under construction at TU Dresden, projected to incorporate 5.2 million ARM cores distributed across 70,000 chips in 10 server racks, represents the largest neuromorphic system yet attempted. One SpiNNaker2 chip contains 152,000 neurons and 152 million synapses across its 152 cores. It targets applications in neuroscience simulation and event-based AI, but widespread commercial deployment remains on the horizon rather than in the present.

Manufacturing Meets Biology

The constraints of silicon manufacturing interact with biological metaphors in complex ways. Neuromorphic chips require novel architectures that depart from the highly optimised logic and memory designs that dominate conventional fabrication. This means they cannot fully leverage the massive investments that have driven conventional chip performance forward for decades.

The BrainScaleS-2 system uses a mixed-signal design that combines analog neural circuits with digital control logic. This approach captures more biological fidelity than purely digital implementations but requires specialised fabrication and struggles with device-to-device variation. Memristor-based approaches offer elegant physics but face reliability and manufacturing challenges that CMOS transistors solved decades ago.

Some researchers are looking to materials beyond silicon entirely. Two-dimensional materials like graphene and transition metal dichalcogenides offer unique electronic properties that could enable new computational paradigms. By virtue of their atomic thickness, 2D materials represent the ultimate limit for downscaling. Spintronics exploits electron spin rather than charge for computation, with device architectures achieving approximately 0.14 femtojoules per operation. Organic electronics promise flexible, biocompatible substrates. Each of these approaches trades the mature manufacturing ecosystem of silicon for potentially transformative new capabilities.

The Deeper Question

Perhaps the deepest question is whether we should expect biological and silicon-based computing to converge at all. The brain and the processor evolved under completely different constraints. The brain is an electrochemical system that developed over billions of years of evolution, optimised for survival in unpredictable environments with limited and unreliable energy supplies. The processor is an electronic system engineered over decades, optimised for precise, repeatable operations in controlled environments with reliable power.

The brain's efficiency arises from its physics: the slow propagation of electrochemical signals, the massive parallelism of synaptic computation, the integration of memory and processing at the level of individual connections, the exploitation of stochasticity for probabilistic inference. These characteristics are not arbitrary design choices but emergent properties of wet, carbon-based, ion-channel-mediated computation. The brain's cognitive power emerges from a collective form of computation extending over very large ensembles of sluggish, imprecise, and unreliable components.

Silicon's strengths are different: speed, precision, reliability, manufacturability, and the ability to perform billions of identical operations per second with deterministic outcomes. These characteristics emerge from the physics of electron transport in crystalline semiconductors and the engineering sophistication of nanoscale fabrication.

Forcing biological metaphors onto silicon may obscure computational paradigms that exploit silicon's native strengths rather than fighting against them. Thermodynamic computing, which embraces thermal noise as a resource, may be one such paradigm. Photonic computing, which exploits the speed and parallelism of light, may be another. Hyperdimensional computing, which relies on mathematical rather than biological principles, may be a third.

None of these paradigms is necessarily “better” than neuromorphic computing. Each offers different trade-offs, different strengths, different suitabilities for different applications. The landscape of post-von Neumann computing is not a single path but a branching tree of possibilities, some inspired by biology and others inspired by physics, mathematics, or pure engineering intuition.

Where We Are, and Where We Might Go

The current state of neuromorphic computing is one of tremendous promise constrained by practical limitations. The theoretical advantages are clear: co-located memory and processing, event-driven operation, native support for temporal dynamics, and potential for dramatic energy efficiency improvements. The practical achievements are real but modest: chips that demonstrate order-of-magnitude improvements for specific workloads but remain far from the efficiency of biological systems and face significant scaling challenges.

The field is at an inflection point. The projected 45-fold growth in the neuromorphic computing market by 2030 reflects genuine excitement about the potential of these technologies. The demonstration of large language models on neuromorphic hardware in 2025 suggests that even general-purpose AI applications may become accessible. The continued investment by major companies like Intel, IBM, Sony, and Samsung, alongside innovative startups, ensures that development will continue.

But the honest assessment is that we do not yet know whether neuromorphic computing will deliver on its most ambitious promises. The biological brain remains, for now, in a category of its own when it comes to energy-efficient general intelligence. Whether silicon can ever reach biological efficiency, and whether it should try to or instead pursue alternative paradigms that play to its own strengths, remain open questions.

What is becoming clear is that the future of computing will not look like the past. The von Neumann architecture that has dominated for seventy years is encountering fundamental limits. The separation of memory and processing, which made early computers tractable, has become a bottleneck that consumes energy and limits performance. In-memory computing is an emerging non-von Neumann computational paradigm that keeps alive the promise of achieving energy efficiencies on the order of one femtojoule per operation. Something different is needed.

That something may be neuromorphic computing. Or thermodynamic computing. Or photonic computing. Or hyperdimensional computing. Or reservoir computing. Or some hybrid not yet imagined. More likely, it will be all of these and more, a diverse ecosystem of computational paradigms each suited to different applications, coexisting rather than competing.

The brain, after all, is just one solution to the problem of efficient computation, shaped by the particular constraints of carbon-based life on a pale blue dot orbiting an unremarkable star. Silicon, and the minds that shape it, may yet find others.


References and Sources

  1. “Communication consumes 35 times more energy than computation in the human cortex, but both costs are needed to predict synapse number.” Proceedings of the National Academy of Sciences (PNAS). https://www.pnas.org/doi/10.1073/pnas.2008173118

  2. “Can neuromorphic computing help reduce AI's high energy cost?” PNAS, 2025. https://www.pnas.org/doi/10.1073/pnas.2528654122

  3. “Organic core-sheath nanowire artificial synapses with femtojoule energy consumption.” Science Advances. https://www.science.org/doi/10.1126/sciadv.1501326

  4. Intel Loihi Architecture and Specifications. Open Neuromorphic. https://open-neuromorphic.org/neuromorphic-computing/hardware/loihi-intel/

  5. Intel Loihi 2 Specifications. Open Neuromorphic. https://open-neuromorphic.org/neuromorphic-computing/hardware/loihi-2-intel/

  6. SpiNNaker Project, University of Manchester. https://apt.cs.manchester.ac.uk/projects/SpiNNaker/

  7. SpiNNaker 2 Specifications. Open Neuromorphic. https://open-neuromorphic.org/neuromorphic-computing/hardware/spinnaker-2-university-of-dresden/

  8. BrainScaleS-2 System Documentation. Heidelberg University. https://electronicvisions.github.io/documentation-brainscales2/latest/brainscales2-demos/fp_brainscales.html

  9. “Emerging Artificial Neuron Devices for Probabilistic Computing.” Frontiers in Neuroscience, 2021. https://www.frontiersin.org/journals/neuroscience/articles/10.3389/fnins.2021.717947/full

  10. “Exploiting noise as a resource for computation and learning in spiking neural networks.” Cell Patterns, 2023. https://www.sciencedirect.com/science/article/pii/S2666389923002003

  11. “Thermodynamic Computing: From Zero to One.” Extropic. https://extropic.ai/writing/thermodynamic-computing-from-zero-to-one

  12. “Thermodynamic computing system for AI applications.” Nature Communications, 2025. https://www.nature.com/articles/s41467-025-59011-x

  13. “Photonic processor could enable ultrafast AI computations with extreme energy efficiency.” MIT News, December 2024. https://news.mit.edu/2024/photonic-processor-could-enable-ultrafast-ai-computations-1202

  14. “Quantum-limited stochastic optical neural networks operating at a few quanta per activation.” PMC, 2025. https://pmc.ncbi.nlm.nih.gov/articles/PMC11698857/

  15. “2025 IEEE Study Leverages Silicon Photonics for Scalable and Sustainable AI Hardware.” IEEE Photonics Society. https://ieeephotonics.org/announcements/2025ieee-study-leverages-silicon-photonics-for-scalable-and-sustainable-ai-hardwareapril-3-2025/

  16. “Recent advances in physical reservoir computing: A review.” Neural Networks, 2019. https://www.sciencedirect.com/science/article/pii/S0893608019300784

  17. “Brain-inspired computing systems: a systematic literature review.” The European Physical Journal B, 2024. https://link.springer.com/article/10.1140/epjb/s10051-024-00703-6

  18. “Current opinions on memristor-accelerated machine learning hardware.” Solid-State Electronics, 2025. https://www.sciencedirect.com/science/article/pii/S1359028625000130

  19. “A neuromorphic implementation of multiple spike-timing synaptic plasticity rules for large-scale neural networks.” PMC, 2015. https://pmc.ncbi.nlm.nih.gov/articles/PMC4438254/

  20. “Updated energy budgets for neural computation in the neocortex and cerebellum.” Journal of Cerebral Blood Flow & Metabolism, 2012. https://pmc.ncbi.nlm.nih.gov/articles/PMC3390818/

  21. “Stochasticity from function – Why the Bayesian brain may need no noise.” Neural Networks, 2019. https://www.sciencedirect.com/science/article/pii/S0893608019302199

  22. “Deterministic networks for probabilistic computing.” PMC, 2019. https://ncbi.nlm.nih.gov/pmc/articles/PMC6893033

  23. “Programming memristor arrays with arbitrarily high precision for analog computing.” USC Viterbi, 2024. https://viterbischool.usc.edu/news/2024/02/new-chip-design-to-enable-arbitrarily-high-precision-with-analog-memories/

  24. “Advances of Emerging Memristors for In-Memory Computing Applications.” PMC, 2025. https://pmc.ncbi.nlm.nih.gov/articles/PMC12508526/


Tim Green

Tim Green UK-based Systems Theorist & Independent Technology Writer

Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.

His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.

ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk

Discuss...

Enter your email to subscribe to updates.