References and Sources
This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European legislation, frameworks, threat assessments, operations and practitioner literature quickly.
The bibliography was assembled from the seed of AI Purple (Book 9) and the sources added while this book was drafted; every entry was opened and checked against the primary text or a bibliographic record before release, and sources no chapter cites were removed.
Numbered source index
European legislation and policy
-
Source [1]: European Parliament and Council of the European Union. Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, 12 July 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 31: Conclusions: Operations with AI.
-
Source [2]: European Parliament and Council of the European Union. Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI, Glossary, Appendix B: Templates and Tools.
-
Source [3]: European Parliament and Council of the European Union. Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/dir/2022/2555/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI, Appendix B: Templates and Tools.
-
Source [4]: European Commission. Commission Implementing Regulation (EU) 2024/2690 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures and further specification of the cases in which an incident is considered to be significant with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers. Official Journal of the European Union, L, 18 October 2024. Available at: https://eur-lex.europa.eu/eli/reg_impl/2024/2690/oj (accessed 2026-11-02). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [5]: European Parliament and Council of the European Union. Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act). Official Journal of the European Union, 20 November 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/2847/oj (accessed 2026-10-31). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [6]: European Parliament and Council of the European Union. Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, 4 May 2016. Available at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual.
-
Source [7]: European Banking Authority, European Insurance and Occupational Pensions Authority and European Securities and Markets Authority (2025). European Supervisory Authorities designate critical ICT third-party providers under the Digital Operational Resilience Act. Joint press release, 18 November 2025. Available at: https://www.esma.europa.eu/press-news/esma-news/european-supervisory-authorities-designate-critical-ict-third-party-providers (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Glossary.
-
Source [8]: European Commission. Commission Delegated Regulation (EU) 2024/1774 of 13 March 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework. Official Journal of the European Union, L, 25 June 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1774/oj (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
-
Source [9]: European Parliament and Council of the European Union. Directive (EU) 2023/1791 of 13 September 2023 on energy efficiency and amending Regulation (EU) 2023/955 (recast). Official Journal of the European Union, 20 September 2023. Available at: https://eur-lex.europa.eu/eli/dir/2023/1791/oj (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [10]: European Commission. Commission Delegated Regulation (EU) 2024/1364 of 14 March 2024 on the first phase of the establishment of a common Union rating scheme for data centres. Official Journal of the European Union, 17 May 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1364/oj (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [11]: European Parliament and Council of the European Union. Regulation (EU) 2026/1744 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI). Regulation of 8 July 2026, Official Journal of the European Union, 24 July 2026. Available at: https://eur-lex.europa.eu/eli/reg/2026/1744/oj (accessed 2026-11-10). Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?.
-
Source [12]: European Commission. Commission Delegated Regulation (EU) 2025/301 of 23 October 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats. Official Journal of the European Union, 20 February 2025. Available at: https://eur-lex.europa.eu/eli/reg_del/2025/301/oj (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Appendix A: Code Examples: Service, Runbook, Mandate, Observer and Restore Artefacts.
-
Source [13]: European Commission (2025). AI Act: Commission issues draft guidance and reporting template on serious AI incidents, and seeks stakeholders' feedback. Consultation page, Shaping Europe's digital future, published 26 September 2025, updated 4 November 2025; consultation closed 7 November 2025. Draft guidance on Article 73 of Regulation (EU) 2024/1689 and draft report template. Available at: https://digital-strategy.ec.europa.eu/en/consultations/ai-act-commission-issues-draft-guidance-and-reporting-template-serious-ai-incidents-and-seeks (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [14]: European Commission. Commission Delegated Regulation (EU) 2025/1190 of 13 February 2025 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria used for identifying financial entities required to perform threat-led penetration testing, the requirements and standards governing the use of internal testers, the requirements in relation to the scope, testing methodology and approach for each phase of the testing, results, closure and remediation stages and the type of supervisory and other relevant cooperation needed for the implementation of TLPT and for the facilitation of mutual recognition. Official Journal of the European Union, L, 18 June 2025. Available at: https://eur-lex.europa.eu/eli/reg_del/2025/1190/oj (accessed 2026-11-10). Referenced in: Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [15]: European Commission (2024). Commission Delegated Regulation (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents. Official Journal of the European Union, L, 25 June 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [16]: European Parliament and Council of the European Union. Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act). Official Journal of the European Union, L, 22 December 2023. Available at: https://eur-lex.europa.eu/eli/reg/2023/2854/oj (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [17]: European Parliament and Council of the European Union. Directive (EU) 2022/2557 on the resilience of critical entities and repealing Council Directive 2008/114/EC (CER Directive). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/dir/2022/2557/oj (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [18]: European Parliament and Council of the European Union. Directive 2003/88/EC concerning certain aspects of the organisation of working time (Working Time Directive). Official Journal of the European Union L 299, 18 November 2003. Available at: https://eur-lex.europa.eu/eli/dir/2003/88/oj (accessed 2026-11-10). Referenced in: Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [19]: Court of Justice of the European Union (2018). Judgment of 21 February 2018, Ville de Nivelles v Rudy Matzak, Case C-518/15. Fifth Chamber. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62015CJ0518 (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual.
-
Source [20]: European Commission. Commission Implementing Regulation (EU) 2024/2956 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 with regard to standard templates for the register of information. Official Journal of the European Union, 2 December 2024. Available at: https://eur-lex.europa.eu/eli/reg_impl/2024/2956/oj (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [21]: European Commission (2024). Commission Delegated Regulation (EU) 2024/1773 of 13 March 2024 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the detailed content of the policy regarding contractual arrangements on the use of ICT services supporting critical or important functions provided by ICT third-party service providers. Official Journal of the European Union, 25 June 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1773/oj (accessed 2026-11-10). Referenced in: Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [22]: European Commission (2025). Commission Delegated Regulation (EU) 2025/532 of 24 March 2025 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions. Official Journal of the European Union, 2 July 2025. Available at: https://eur-lex.europa.eu/eli/reg_del/2025/532/oj (accessed 2026-11-10). Referenced in: Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [23]: European Commission (2025). Cloud Sovereignty Framework, Version 1.2.1. Directorate-General for Digital Services, October 2025; defines sovereignty objectives and assurance levels for a Commission cloud procurement procedure, not a legal requirement. Available at: https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en?filename=Cloud-Sovereignty-Framework.pdf (accessed 2026-11-10). Referenced in: Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [24]: Court of Justice of the European Union (2003). Judgment of 9 September 2003 in Case C-151/02, Landeshauptstadt Kiel v Norbert Jaeger. ECLI:EU:C:2003:437. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62002CJ0151 (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [25]: Court of Justice of the European Union (2021). Judgment of 9 March 2021 (Grand Chamber) in Case C-580/19, RJ v Stadt Offenbach am Main. ECLI:EU:C:2021:183. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62019CJ0580 (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [26]: Federal Republic of Germany. Betriebsverfassungsgesetz (BetrVG), section 87 (Mitbestimmungsrechte). Federal Ministry of Justice, gesetze-im-internet.de. Available at: https://www.gesetze-im-internet.de/betrvg/__87.html (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Glossary.
-
Source [27]: Swedish Parliament (Sveriges riksdag). Lag (1976:580) om medbestämmande i arbetslivet (Co-determination in the Workplace Act), sections 10 to 12. Svensk författningssamling 1976:580. Available at: https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/lag-1976580-om-medbestammande-i_sfs-1976-580/ (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [28]: Swedish Parliament (Sveriges riksdag). Arbetstidslag (1982:673) (Working Hours Act), section 13. Svensk författningssamling 1982:673. Available at: https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/arbetstidslag-1982673_sfs-1982-673/ (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [29]: Sveriges riksdag, Regeringskansliet. Cybersäkerhetslag (2025:1506). Svensk författningssamling, issued 11 December 2025, in force 15 January 2026; implements Directive (EU) 2022/2555 in part. Available at: https://data.riksdagen.se/dokument/sfs-2025-1506.html (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [30]: Sveriges riksdag, Regeringskansliet. Cybersäkerhetsförordning (2025:1507). Svensk författningssamling, issued 11 December 2025, in force 15 January 2026, as amended up to SFS 2026:623. Available at: https://data.riksdagen.se/dokument/sfs-2025-1507.html (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [31]: Bundesrepublik Deutschland (2025). Gesetz zur Umsetzung der NIS-2-Richtlinie und zur Regelung wesentlicher Grundzüge des Informationssicherheitsmanagements in der Bundesverwaltung, vom 2. Dezember 2025. Bundesgesetzblatt Teil I 2025 Nr. 301, ausgegeben zu Bonn am 5. Dezember 2025; Article 1 contains the BSI-Gesetz (BSIG); Article 30: in force on the day after promulgation. Available at: https://www.recht.bund.de/eli/bund/bgbl-1/2025/301 (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [32]: Sveriges riksdag, Regeringskansliet. Lag (1976:580) om medbestämmande i arbetslivet (MBL), 10 to 12 §§. Svensk författningssamling. Available at: https://data.riksdagen.se/dokument/sfs-1976-580.html (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
Frameworks, standards and taxonomies
-
Source [33]: MITRE Corporation. MITRE ATT&CK: Adversarial Tactics, Techniques, and Common Knowledge. Available at: https://attack.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [34]: MITRE Corporation. MITRE ATLAS: Adversarial Threat Landscape for AI Systems. Available at: https://atlas.mitre.org/ (accessed 2026-10-31). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [35]: European Central Bank. TIBER-EU: Threat Intelligence-Based Ethical Red Teaming framework. ECB, framework document dated January 2025. Available at: https://www.ecb.europa.eu/paym/cyber-resilience/tiber-eu/html/index.en.html (accessed 2026-11-02). Referenced in: Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit.
-
Source [36]: OWASP Foundation. OWASP Top 10 for Large Language Model Applications, 2025 edition. OWASP GenAI Security Project. Available at: https://genai.owasp.org/llm-top-10/ (accessed 2026-10-31). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [37]: OWASP Foundation (2025). OWASP Top 10 for Agentic Applications for 2026. OWASP GenAI Security Project, 9 December 2025. Available at: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ (accessed 2026-11-01). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
-
Source [38]: National Institute of Standards and Technology. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile. NIST AI 600-1, July 2024. Available at: https://doi.org/10.6028/NIST.AI.600-1 (accessed 2026-10-31). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [39]: Vassilev, A., Oprea, A., Fordyce, A., Anderson, H., Davies, X. & Hamin, M. (2025). Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations. NIST AI 100-2 E2025. National Institute of Standards and Technology, 24 March 2025. Available at: https://doi.org/10.6028/NIST.AI.100-2e2025 (accessed 2026-11-01). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [40]: NIST. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29, 26 February 2024. Available at: https://doi.org/10.6028/NIST.CSWP.29 (accessed 2026-10-30). Referenced in: Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [41]: National Institute of Standards and Technology. Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile. NIST SP 800-61 Rev. 3, April 2025. Available at: https://csrc.nist.gov/pubs/sp/800/61/r3/final (accessed 2026-11-02). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge.
-
Source [42]: Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G. & Scarfone, K. (2016). Guide for Cybersecurity Event Recovery. NIST SP 800-184. National Institute of Standards and Technology, December 2016. Available at: https://doi.org/10.6028/NIST.SP.800-184 (accessed 2026-11-02). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [43]: Rose, S., Borchert, O., Mitchell, S. & Connelly, S. Zero Trust Architecture. NIST Special Publication 800-207, August 2020. Available at: https://doi.org/10.6028/NIST.SP.800-207 (accessed 2026-10-30). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [44]: Forum of Incident Response and Security Teams. Exploit Prediction Scoring System (EPSS). FIRST; academic basis Jacobs, J. et al. (2021), Digital Threats: Research and Practice 2(3), https://doi.org/10.1145/3436242. Available at: https://www.first.org/epss/ (accessed 2026-11-01). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [45]: Cybersecurity and Infrastructure Security Agency. Known Exploited Vulnerabilities Catalog. CISA. Available at: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (accessed 2026-11-01). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [46]: European Union Agency for Cybersecurity (2025). European Vulnerability Database (EUVD). Launched 13 May 2025 under the NIS 2 Directive. Available at: https://euvd.enisa.europa.eu/ (accessed 2026-11-01). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [47]: Souppaya, M. & Scarfone, K. (2022). Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology. NIST SP 800-40 Rev. 4. Available at: https://doi.org/10.6028/NIST.SP.800-40r4 (accessed 2026-11-01). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [48]: ISO/IEC (2018). ISO/IEC 20000-1:2018 Information technology - Service management - Part 1: Service management system requirements. Edition 3, published 14 September 2018. Available at: https://www.iso.org/standard/70636.html (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
-
Source [49]: OpenTelemetry. Signals. OpenTelemetry documentation, Concepts. Available at: https://opentelemetry.io/docs/concepts/signals/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Appendix B: Templates and Tools.
-
Source [50]: OpenTelemetry. Sampling. OpenTelemetry documentation, Concepts. Available at: https://opentelemetry.io/docs/concepts/sampling/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Appendix B: Templates and Tools.
-
Source [51]: OpenTelemetry. Handling sensitive data. OpenTelemetry documentation, Security. Available at: https://opentelemetry.io/docs/security/handling-sensitive-data/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Appendix A: Code Examples: Service, Runbook, Mandate, Observer and Restore Artefacts, Appendix B: Templates and Tools.
-
Source [52]: OpenSLO. OpenSLO: an open specification for defining service level objectives. OpenSLO organisation on GitHub, Apache-2.0 licence. Available at: https://github.com/OpenSLO/OpenSLO (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives.
-
Source [53]: National Institute of Standards and Technology. Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800-53 Revision 5, Joint Task Force, September 2020 (release 5.2.0, 2025). Available at: https://doi.org/10.6028/NIST.SP.800-53r5 (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [54]: SLSA. Supply-chain Levels for Software Artifacts (SLSA) specification, version 1.2: Build requirements for producing artifacts, and Build provenance. Available at: https://slsa.dev/spec/v1.2/build-requirements and https://slsa.dev/spec/v1.2/build-provenance (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [55]: OpenGitOps. GitOps Principles, version 1.0.0. Published by the OpenGitOps GitOps Working Group. Available at: https://opengitops.dev/ (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [56]: Open Policy Agent. Terraform. Open Policy Agent documentation. Available at: https://www.openpolicyagent.org/docs/terraform (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
-
Source [57]: The Kubernetes Authors. Kubernetes API Concepts. Kubernetes documentation. Available at: https://kubernetes.io/docs/reference/using-api/api-concepts/ (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
-
Source [58]: CA/Browser Forum (2025). Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods. CA/Browser Forum, vote closed 11 April 2025. Available at: https://cabforum.org/2025/04/11/ballot-sc081v3-introduce-schedule-of-reducing-validity-and-data-reuse-periods/ (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [59]: FinOps Foundation. FinOps Framework. FinOps Foundation, a project of LF Projects, LLC. Practitioner standard. Available at: https://www.finops.org/framework/ (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Glossary.
-
Source [60]: Cybersecurity and Infrastructure Security Agency (2026). Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk. CISA, issued 10 June 2026; applies to US federal civilian agencies. Available at: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [61]: OpenTelemetry. Semantic Conventions for Generative AI (GenAI). OpenTelemetry semantic conventions for spans, metrics and events of generative AI clients, MCP and provider-specific conventions; repository open-telemetry/semantic-conventions-genai. Available at: https://github.com/open-telemetry/semantic-conventions-genai (accessed 2026-11-10). Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Appendix B: Templates and Tools.
-
Source [62]: Organisation for Economic Co-operation and Development (2024). Defining AI incidents and related terms. OECD Artificial Intelligence Papers, No. 16, OECD Publishing, 6 May 2024. DOI: 10.1787/d1a8d965-en. Definitions as quoted by the OECD.AI Policy Observatory at https://oecd.ai/en/wonk/defining-ai-incidents-and-hazards (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [63]: Organisation for Economic Co-operation and Development (2025). Towards a common reporting framework for AI incidents. OECD Artificial Intelligence Papers, No. 34, OECD Publishing, 28 February 2025. DOI: 10.1787/f326d4ac-en (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [64]: MITRE Corporation. CWE-117: Improper Output Neutralization for Logs. Common Weakness Enumeration, CWE version 5.0 (page dated 2026-10-28). Available at: https://cwe.mitre.org/data/definitions/117.html (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [65]: Open Policy Agent. Policy Language. Open Policy Agent documentation (Rego). Available at: https://www.openpolicyagent.org/docs/policy-language (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Appendix B: Templates and Tools.
-
Source [66]: SLSA. SLSA specification, version 1.2 (Build: Provenance and Build: Verifying artifacts). Linux Foundation. Available at: https://slsa.dev/spec/v1.2/ (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [67]: European Committee for Standardization (CEN) (2019). EN 16234-1:2019 e-Competence Framework (e-CF): A common European framework for ICT professionals in all sectors, Part 1: Framework. CEN/TC 428, published 17 December 2019; five areas (PLAN, BUILD, RUN, ENABLE, MANAGE), 41 competences and five proficiency levels (e-1 to e-5). Catalogue entry: https://standards.iteh.ai/catalog/standards/cen/7e895d4e-0eb0-49b4-972f-1f6b202ea400/en-16234-1-2019 (accessed 2026-11-10; read from the catalogue entry, the standard itself is paywalled). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft.
Threat assessments, agency guidance and incident reports
-
Source [68]: National Cyber Security Centre (2026). Preparing for a 'vulnerability patch wave'. NCSC blog, 1 May 2026. Available at: https://www.ncsc.gov.uk/blogs/prepare-for-vulnerability-patch-wave (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [69]: Five Eyes cyber security agencies: ASD's ACSC, CISA, NSA, Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK (2026). Careful adoption of agentic AI services. Joint guidance, 1 May 2026. Available at: https://www.ncsc.govt.nz/assets/guidance/Documents/Careful-adoption-of-agentic-AI-services_FINAL.pdf (accessed 2026-11-01). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 31: Conclusions: Operations with AI.
-
Source [70]: AI Security Institute (2026). Incident Report: unsanctioned agent behaviour during cyber testing. UK AISI, 4 August 2026. Available at: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing (accessed 2026-11-01). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [71]: National Cyber Security Centre (2019). Offline backups in an online world. NCSC blog, 13 August 2019. Available at: https://www.ncsc.gov.uk/blog-post/offline-backups-in-an-online-world (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [72]: Charrier, C. & Weiner, R. (2024). How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends. Mandiant, Google Cloud Blog, 15 October 2024. Available at: https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023 (accessed 2026-11-01). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [73]: Grunewald, R., Mazumdar, S. & Vanderlee, K. (2026). Vulnerability Discovery and Exploitation Trends in the AI Era. Google Threat Intelligence Group, Google Cloud Blog, 30 September 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era (accessed 2026-11-01). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [74]: Uptime Institute (2025). Uptime Announces Annual Outage Analysis Report 2025. Uptime Institute press release on the 7th Annual Outage Analysis, May 2025. Available at: https://uptimeinstitute.com/about-ui/press-releases/uptime-announces-annual-outage-analysis-report-2025 (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change.
-
Source [75]: Amazon Web Services (2025). Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region. AWS post-event summary, 19-20 October 2025. Available at: https://aws.amazon.com/message/101925/ (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [76]: Google Cloud (2025). Multiple GCP products are experiencing Service issues (incident of 12 June 2025). Google Cloud Service Health incident report. Available at: https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [77]: Prince, M. (2025). Cloudflare outage on November 18, 2025. Cloudflare Blog, 18 November 2025. Available at: https://blog.cloudflare.com/18-november-2025-outage/ (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [78]: CrowdStrike (2024). External Technical Root Cause Analysis: Channel File 291, 6 August 2024; and Falcon Content Update Preliminary Post Incident Review, 24 July 2024 (updated 25 July 2024). Available at: https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf and https://www.crowdstrike.com/en-us/blog/falcon-content-update-preliminary-post-incident-report/ (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [79]: Janardhan, S. (2021). More details about the October 4 outage. Engineering at Meta, 5 October 2021. Available at: https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/ (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [80]: U.S. Securities and Exchange Commission (2013). In the Matter of Knight Capital Americas LLC. Order Instituting Administrative and Cease-and-Desist Proceedings, Release No. 34-70694, File No. 3-15570, 16 October 2013. Available at: https://www.sec.gov/files/litigation/admin/2013/34-70694.pdf (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [81]: OVHcloud (2021). Strasbourg datacentre: latest information. OVHcloud corporate newsroom, page dated 18 March 2021 and updated to 23 April 2021. Operator's own account of the fire of 10 March 2021 and of the recovery. Available at: https://corporate.ovhcloud.com/en/newsroom/news/informations-site-strasbourg/ (accessed 2026-11-10). Referenced in: Chapter 28: Case Studies and Anti-Patterns.
-
Source [82]: Claburn, T. (2022). OVHcloud datacenter 'lacked' automatic fire extinguishers, electrical cutoff. The Register, 22 March 2022. News report of a report by the Bas-Rhin fire service as obtained by Journal du Net; secondary source. Available at: https://www.theregister.com/2022/03/22/ovhcloud_fire_datacenter_report/ (accessed 2026-11-10). Referenced in: Chapter 28: Case Studies and Anti-Patterns.
-
Source [83]: Clark, L. (2021). OVH outlines three-point 'hyper resilience' plan after Strasbourg fire. The Register, 6 May 2021. News report; secondary source. Available at: https://www.theregister.com/2021/05/06/ovh_outlines_threepoint_hyper_resiliance/ (accessed 2026-11-10). Referenced in: Chapter 28: Case Studies and Anti-Patterns.
- Source [84]: Google, OSV. GHSA-3v3m-wc6v-x4x3: ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction. Open Source Vulnerabilities, published 7 May 2026. Available at: https://osv.dev/vulnerability/GHSA-3v3m-wc6v-x4x3 (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [85]: Google, OSV. GHSA-jjrm-hr5f-673x: Source controller: Improper path handling allows traversal. Open Source Vulnerabilities, published 5 June 2026. Available at: https://osv.dev/vulnerability/GHSA-jjrm-hr5f-673x (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
Agents, containment and AI incidents
-
Source [86]: OpenAI (2026). OpenAI – Hugging Face Incident Technical Report. 26 August 2026. Available at: https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf (accessed 2026-11-01). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [87]: Larcher, H., Carreira, A. et al. (2026). Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident. Hugging Face blog, 27 July 2026. Available at: https://huggingface.co/blog/agent-intrusion-technical-timeline (accessed 2026-11-01). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [88]: Greenblatt, R., Cotra, A. & Wijk, H. (2026). Brief independent investigation of agents' behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident. METR, 26 August 2026; Greenblatt of Redwood Research contracted with METR. Available at: https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/; PDF https://metr.org/hugging-face-incident-report-aug-2026.pdf (accessed 2026-11-01). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [89]: GitLab (2017). Postmortem of database outage of January 31. GitLab blog, 10 February 2017. Available at: https://about.gitlab.com/blog/postmortem-of-database-outage-of-january-31/ (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 28: Case Studies and Anti-Patterns, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI.
-
Source [90]: Sharwood, S. (2025). Replit makes vibe-y promise to stop its AI agents making vibe coding disasters. The Register, 22 July 2025. News report of a customer's account and the vendor's response; the account of the deletion is the customer's and was not independently verified by the report. Available at: https://www.theregister.com/2025/07/22/replit_saastr_response/ (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
-
Source [91]: McGregor, S. (2021). Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. Proceedings of the AAAI Conference on Artificial Intelligence 35(17), 15458-15463; preprint arXiv:2011.08512, 17 November 2020. Available at: https://arxiv.org/abs/2011.08512 (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [92]: AI Incident Database (2025). Incident 1152: LLM-Driven Replit Agent Reportedly Executed Unauthorized Destructive Commands During Code Freeze, Leading to Loss of Production Data. Incident date 18 July 2025; a catalogue record that lists five press reports and no primary post-incident report. Available at: https://incidentdatabase.ai/cite/1152/ (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [93]: Model Context Protocol (2025). Security Best Practices. Model Context Protocol specification, version 2025-11-25. Available at: https://modelcontextprotocol.io/specification/2025-11-25/basic/security_best_practices (accessed 2026-11-10). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [94]: SPIFFE project. SPIFFE Concepts. SPIFFE documentation. Available at: https://spiffe.io/docs/latest/spiffe-about/spiffe-concepts/ (accessed 2026-11-10). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [95]: Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T. & Fritz, M. (2023). Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. arXiv:2302.12173, 23 February 2023 (revised 5 May 2023). Available at: https://arxiv.org/abs/2302.12173 (accessed 2026-11-10). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 31: Conclusions: Operations with AI.
-
Source [96]: Anthropic. Agent Skills. Claude Platform documentation. Available at: https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview (accessed 2026-11-10). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [97]: Havaei, R., Liu, R. & Li, M. (2025). Supabase MCP can leak your entire SQL database. General Analysis blog, 8 July 2025. Proof-of-concept demonstration by a security vendor, not an incident report. Available at: https://generalanalysis.com/blog/supabase-mcp-blog (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [98]: Beurer-Kellner, L., Kudrinskii, A., Milanta, M., Nielsen, K. B., Sarkar, H. & Tal, L. (2026). Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise. Snyk, 5 February 2026. Vendor study, not peer reviewed; the page is inconsistent about whether the 3,984 skills came from one registry or two. Available at: https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [99]: Holzbauer, F., Schmidt, D., Gegenhuber, G., Schrittwieser, S. & Ullrich, J. (2026). Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem. arXiv:2603.16572, submitted 17 March 2026 (v2, 1 June 2026). Preprint. Available at: https://arxiv.org/abs/2603.16572 (accessed 2026-11-10). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [100]: Kon, P. T. J., Liu, J., Qiu, Y., Fan, W., He, T., Lin, L., Zhang, H., Park, O. M., Elengikal, G. S., Kang, Y., Chen, A., Chowdhury, M., Lee, M. & Wang, X. (2024). IaC-Eval: A Code Generation Benchmark for Cloud Infrastructure-as-Code Programs. Advances in Neural Information Processing Systems 37 (NeurIPS 2024), Datasets and Benchmarks Track. Available at: https://proceedings.neurips.cc/paper_files/paper/2024/hash/f26b29298ae8acd94bd7e839688e329b-Abstract.html (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [101]: Perry, N., Srivastava, M., Kumar, D. & Boneh, D. (2023). Do Users Write More Insecure Code with AI Assistants? Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS '23); arXiv:2211.03622. Available at: https://arxiv.org/abs/2211.03622 (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [102]: Spracklen, J., Wijewickrama, R., Sakib, A. H. M. N., Maiti, A., Viswanath, B. & Jadliwala, M. (2025). We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs. arXiv:2406.10279, version 3, 2 March 2025; 2025 USENIX Security Symposium. Available at: https://arxiv.org/abs/2406.10279 (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [103]: Kim, E., Garg, A., Peng, K. & Garg, N. (2025). Correlated Errors in Large Language Models. ICML 2025; arXiv:2506.07962. Available at: https://arxiv.org/abs/2506.07962 (accessed 2026-11-10). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI.
-
Source [104]: Panickssery, A., Bowman, S. R. & Feng, S. (2024). LLM Evaluators Recognize and Favor Their Own Generations. arXiv:2404.13076. Available at: https://arxiv.org/abs/2404.13076 (accessed 2026-11-10). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 31: Conclusions: Operations with AI.
-
Source [105]: Needham, J., Edkins, G., Pimpale, G., Bartsch, H. & Hobbhahn, M. (2025). Large Language Models Often Know When They Are Being Evaluated. arXiv:2505.23836. Available at: https://arxiv.org/abs/2505.23836 (accessed 2026-11-10). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?.
- Source [106]: argoproj-labs. MCP server for Argo CD (README). GitHub repository argoproj-labs/mcp-for-argocd, main branch. Available at: https://raw.githubusercontent.com/argoproj-labs/mcp-for-argocd/main/README.md (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [107]: containers. Kubernetes MCP server (README). GitHub repository containers/kubernetes-mcp-server, main branch. Available at: https://raw.githubusercontent.com/containers/kubernetes-mcp-server/main/README.md (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [108]: controlplaneio-fluxcd. Flux MCP Server (README). GitHub repository controlplaneio-fluxcd/flux-operator, directory cmd/mcp, main branch. Available at: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/main/cmd/mcp/README.md (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [109]: Temporal Technologies. Human-in-the-loop AI agent. Temporal AI Cookbook, vendor documentation of its own product. Available at: https://docs.temporal.io/ai-cookbook/human-in-the-loop-python (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [110]: Argo Project Labs. Argo CD MCP Server (mcp-for-argocd): README. Available at: https://github.com/argoproj-labs/mcp-for-argocd (accessed 2026-11-11; text read from the main branch README). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [111]: Prodan, S. (2025). AI-Assisted GitOps with Flux Operator MCP Server. Flux blog, 14 May 2025. Available at: https://fluxcd.io/blog/2025/05/ai-assisted-gitops/ (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
Operations, reliability and AIOps research
-
Source [112]: Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds.) (2016). Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Chapters cited: Treynor Sloss, B., "Introduction"; Alvidrez, M., "Embracing Risk"; Rau, V., "Eliminating Toil"; Ewaschuk, R., "Monitoring Distributed Systems"; Lunney, J. & Lueder, S., "Postmortem Culture: Learning from Failure". Available at: https://sre.google/sre-book/table-of-contents/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
-
Source [113]: Forsgren, N., Smith, D., Humble, J. & Frazelle, J. (2019). Accelerate: State of DevOps 2019. DevOps Research and Assessment programme and Google Cloud; survey of over 31,000 professionals over six years. Industry survey research. Available at: https://dora.dev/research/2019/dora-report/ (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 31: Conclusions: Operations with AI.
-
Source [114]: Dang, Y., Lin, Q. & Huang, P. (2019). AIOps: Real-World Challenges and Research Innovations. 41st International Conference on Software Engineering (ICSE 2019), Companion Proceedings, technical briefing, pp. 4-5. DOI: 10.1109/ICSE-Companion.2019.00023 (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
-
Source [115]: Notaro, P., Cardoso, J. & Gerndt, M. (2021). A Survey of AIOps Methods for Failure Management. ACM Transactions on Intelligent Systems and Technology 12(6), Article 81. DOI: 10.1145/3483424 (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [116]: Skelton, M. & Pais, M. (2025). Team Topologies: Organizing Business and Technology for Fast Flow of Value, 2nd edition. IT Revolution Press, 23 September 2025. Key concepts (four team types and three interaction modes) available at: https://www.teamtopologies.com/key-concepts (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
-
Source [117]: Harvey, N. & DeBellis, D. (2025). Announcing the 2025 DORA report: State of AI-assisted Software Development. Google Cloud Blog, 23 September 2025. Available at: https://cloud.google.com/blog/products/ai-machine-learning/announcing-the-2025-dora-report (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?.
-
Source [118]: Spadaccini, A. (2016). Being On-Call. In Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/being-on-call/ (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [119]: Grafana Labs (2025). Observability Survey Report 2025. Vendor-run survey of 1,255 responses, 18 September 2024 to 2 January 2025. Available at: https://grafana.com/observability-survey/2025/ (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change.
-
Source [120]: International Energy Agency (2025). Energy and AI. World Energy Outlook Special Report, April 2025. Available at: https://www.iea.org/reports/energy-and-ai (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?.
-
Source [121]: PeopleCert (2023). ITIL 4 Management Practices 2023 – a new level of service management capability. PeopleCert, news and announcements. Available at: https://www.peoplecert.org/news-and-announcements/itil-4-management-practices-2023 (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle.
-
Source [122]: PeopleCert. ITIL 4 practices. PeopleCert, certification and practice pages. Available at: https://peoplecert.org/ITIL4-practices (accessed 2026-11-10). Referenced in: Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle.
-
Source [123]: Wu, R. & Keogh, E. J. (2021). Current Time Series Anomaly Detection Benchmarks are Flawed and are Creating the Illusion of Progress. IEEE Transactions on Knowledge and Data Engineering. DOI: 10.1109/TKDE.2021.3112126; arXiv:2009.13807. Available at: https://arxiv.org/abs/2009.13807 (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [124]: Kim, S., Choi, K., Choi, H.-S., Lee, B. & Yoon, S. (2022). Towards a Rigorous Evaluation of Time-Series Anomaly Detection. Proceedings of the AAAI Conference on Artificial Intelligence 36(7), pp. 7194-7201. DOI: 10.1609/aaai.v36i7.20680; arXiv:2109.05257. Available at: https://arxiv.org/abs/2109.05257 (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [125]: Lavin, A. & Ahmad, S. (2015). Evaluating Real-time Anomaly Detection Algorithms: the Numenta Anomaly Benchmark. 14th IEEE International Conference on Machine Learning and Applications (ICMLA 2015); arXiv:1510.03336. Available at: https://arxiv.org/abs/1510.03336 (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [126]: Hochenbaum, J., Vallis, O. S. & Kejariwal, A. (2017). Automatic Anomaly Detection in the Cloud Via Statistical Learning. arXiv:1704.07706, 24 April 2017. Available at: https://arxiv.org/abs/1704.07706 (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [127]: Zhao, N., Chen, J., Peng, X., Wang, H., Wu, X., Zhang, Y., Chen, Z., Zheng, X., Nie, X., Wang, G., Wu, Y., Zhou, F., Zhang, W., Sui, K. & Pei, D. (2020). Understanding and Handling Alert Storm for Online Service Systems. 42nd International Conference on Software Engineering, Software Engineering in Practice track (ICSE-SEIP 2020), pp. 162-171. Available at: https://2020.icse-conferences.org/details/icse-2020-Software-Engineering-in-Practice/24/Understanding-and-Handling-Alert-Storm-for-Online-Service-Systems (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [128]: Xu, J., Zhang, Q., Zhong, Z., He, S., Zhang, C., Lin, Q., Pei, D., He, P., Zhang, D. & Zhang, Q. (2025). OpenRCA: Can Large Language Models Locate the Root Cause of Software Failures? International Conference on Learning Representations (ICLR 2025); benchmark of 335 failures and over 68 GB of telemetry from three enterprise software systems. Available at: https://iclr.cc/virtual/2025/poster/32093 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
-
Source [129]: Pham, L., Zhang, H., Ha, H., Salim, F. & Zhang, X. (2025). RCAEval: A Benchmark for Root Cause Analysis of Microservice Systems with Telemetry Data. arXiv:2412.17015; Companion Proceedings of the ACM Web Conference 2025 (WWW '25). Available at: https://arxiv.org/abs/2412.17015 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [130]: Chen, Y., Xie, H., Ma, M., Kang, Y., Gao, X., Shi, L., Cao, Y., Gao, X., Fan, H., Wen, M., Zeng, J., Ghosh, S., Zhang, X., Zhang, C., Lin, Q., Rajmohan, S., Zhang, D. & Xu, T. (2023). Automatic Root Cause Analysis via Large Language Models for Cloud Incidents. arXiv:2305.15778 (preprint, revised 13 November 2023). Available at: https://arxiv.org/abs/2305.15778 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [131]: Jones, C. (2017). Effective Troubleshooting. In Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems. Google and O'Reilly Media; web edition copyright 2017. Available at: https://sre.google/sre-book/effective-troubleshooting/ (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [132]: Stribblehill, A. (2017). Managing Incidents. In Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems. Google and O'Reilly Media; web edition copyright 2017. Available at: https://sre.google/sre-book/managing-incidents/ (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [133]: Mace, J., Oertel, J., Thorne, S. & Chakrabarti, A. (2018). Incident Response. Chapter 9 of Beyer, B., Murphy, N. R., Rensin, D. K., Kawahara, K. & Thorne, S. (eds), The Site Reliability Workbook. Google and O'Reilly Media, 2018. Available at: https://sre.google/workbook/incident-response/ (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [134]: Goddard, K., Roudsari, A. & Wyatt, J. C. (2012). Automation bias: a systematic review of frequency, effect mediators, and mitigators. Journal of the American Medical Informatics Association 19(1), 121-127. DOI: 10.1136/amiajnl-2011-000089 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [135]: Bansal, G., Wu, T., Zhou, J., Fok, R., Nushi, B., Kamar, E., Ribeiro, M. T. & Weld, D. S. (2021). Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performance. ACM CHI Conference on Human Factors in Computing Systems (CHI 2021); arXiv:2006.14779. Available at: https://arxiv.org/abs/2006.14779 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [136]: Buçinca, Z., Malaya, M. B. & Gajos, K. Z. (2021). To Trust or to Think: Cognitive Forcing Functions Can Reduce Overreliance on AI in AI-assisted Decision-making. Proceedings of the ACM on Human-Computer Interaction 5(CSCW1); arXiv:2102.09692. DOI: 10.1145/3449287 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [137]: Tversky, A. & Kahneman, D. (1974). Judgment under Uncertainty: Heuristics and Biases. Science 185(4157), 1124-1131. DOI: 10.1126/science.185.4157.1124 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
-
Source [138]: Salva, R. J. (2025). How are developers using AI? Inside our 2025 DORA report. Google, 23 September 2025. Available at: https://blog.google/technology/developers/dora-report-2025/ (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [139]: Google Cloud. Capabilities: Streamlining change approval. DevOps Research and Assessment programme. Available at: https://dora.dev/capabilities/streamlining-change-approval/ (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [140]: Pichai, S. (2024). Q3 earnings call: CEO's remarks. Google, 29 October 2024. Available at: https://blog.google/inside-google/message-ceo/alphabet-earnings-q3-2024/ (accessed 2026-11-10). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
-
Source [141]: Chen, L., Zaharia, M. & Zou, J. (2023). How is ChatGPT's behavior changing over time? arXiv:2307.09009, submitted 18 July 2023, version 3 of 31 October 2023. Preprint. Available at: https://arxiv.org/abs/2307.09009 (accessed 2026-11-10). Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [142]: Sculley, D., Holt, G., Golovin, D., Davydov, E., Phillips, T., Ebner, D., Chaudhary, V., Young, M., Crespo, J.-F. & Dennison, D. (2015). Hidden Technical Debt in Machine Learning Systems. Advances in Neural Information Processing Systems 28 (NIPS 2015). Available at: https://papers.nips.cc/paper_files/paper/2015/hash/86df7dcfd896fcaf2674f757a2463eba-Abstract.html (accessed 2026-11-10). Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [143]: Gama, J., Žliobaitė, I., Bifet, A., Pechenizkiy, M. & Bouchachia, A. (2014). A survey on concept drift adaptation. ACM Computing Surveys 46(4), 1-37. DOI: 10.1145/2523813 (accessed 2026-11-10). Bibliographic record verified through Crossref; the chapter cites it only for the term and the survey's subject. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [144]: McAllister, S. (2025). A postmortem of three recent issues. Anthropic Engineering, 17 September 2025. Available at: https://www.anthropic.com/engineering/a-postmortem-of-three-recent-issues (accessed 2026-11-10). Provider's own post-incident report. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [145]: Microsoft. Foundry Models lifecycle and support policy. Microsoft Learn, Microsoft Foundry, page dated 24 July 2026. Available at: https://learn.microsoft.com/en-us/azure/foundry/openai/concepts/model-retirements (accessed 2026-11-10). Provider documentation. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [146]: Microsoft. Model versions in Microsoft Foundry Models (classic). Microsoft Learn, updated 18 May 2026. Available at: https://learn.microsoft.com/en-us/azure/foundry-classic/foundry-models/concepts/model-versions (accessed 2026-11-10). Provider documentation. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [147]: Anthropic. Model deprecations. Claude Platform documentation. Available at: https://platform.claude.com/docs/en/about-claude/model-deprecations (accessed 2026-11-10). Provider documentation. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [148]: He, H. and Thinking Machines Lab (2025). Defeating Nondeterminism in LLM Inference. Thinking Machines Lab, Connectionism blog, 10 September 2025. Available at: https://thinkingmachines.ai/blog/defeating-nondeterminism-in-llm-inference/ (accessed 2026-11-10). Practitioner research report, not peer reviewed. Referenced in: Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [149]: Elish, M. C. (2019). Moral Crumple Zones: Cautionary Tales in Human-Robot Interaction. Engaging Science, Technology, and Society 5, 40-60. DOI: 10.17351/ests2019.260 (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [150]: Dettmers, J., Vahle-Hinz, T., Bamberg, E., Friedrich, N. & Keller, M. (2016). Extended work availability and its relation with start-of-day mood and cortisol. Journal of Occupational Health Psychology 21(1), 105-118. DOI: 10.1037/a0039602 (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [151]: Barteneva, D. (2021). Improving On-call Fatigue. USENIX ;login: Online, 6 September 2021, updated 8 February 2023. Practitioner report, not peer reviewed. Available at: https://www.usenix.org/publications/loginonline/improving-call-fatigue (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [152]: Edmondson, A. (1999). Psychological Safety and Learning Behavior in Work Teams. Administrative Science Quarterly 44(2), 350-383. DOI: 10.2307/2666999 (accessed 2026-11-10). Referenced in: Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
- Source [153]: The Kubernetes Authors. Controllers. Kubernetes documentation. Available at: https://kubernetes.io/docs/concepts/architecture/controller/ (accessed 2026-11-11). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher, Appendix B: Templates and Tools.
- Source [154]: Argo Project. Automated Sync Policy. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Appendix B: Templates and Tools.
- Source [155]: Argo Project. Sync Windows. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/sync_windows/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
- Source [156]: Argo Project. Sync Phases and Waves. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/sync-waves/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [157]: Argo Project. Security. Argo CD operator manual, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/operator-manual/security/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [158]: Argo Project. Sync Options. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [159]: Argo Project. Diffing Customization. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [160]: Flux project. Kustomization. Flux documentation. Available at: https://fluxcd.io/flux/components/kustomize/kustomizations/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 17: The Observer Principle: Who Watches the Watcher, Appendix B: Templates and Tools.
- Source [161]: Flux project. Flux multi-tenancy. Flux documentation. Available at: https://fluxcd.io/flux/installation/configuration/multitenancy/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Appendix B: Templates and Tools.
- Source [162]: HashiCorp. State. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/language/state (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Appendix B: Templates and Tools.
- Source [163]: HashiCorp. terraform plan command reference. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/cli/commands/plan (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [164]: OpenTofu. Frequently asked questions. OpenTofu documentation. Available at: https://opentofu.org/faq/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
- Source [165]: Crossplane Authors. What's Crossplane? Crossplane documentation. Available at: https://docs.crossplane.io/latest/whats-crossplane/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
- Source [166]: Google Cloud. Config Connector overview. Google Cloud documentation. Available at: https://docs.cloud.google.com/config-connector/docs/overview (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [167]: Cloud Native Computing Foundation. Argo. CNCF project page. Available at: https://www.cncf.io/projects/argo/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [168]: Cloud Native Computing Foundation. Flux. CNCF project page. Available at: https://www.cncf.io/projects/flux/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [169]: Argo Project. Argo Rollouts: Analysis & Progressive Delivery. Argo Rollouts documentation, stable branch. Available at: https://argo-rollouts.readthedocs.io/en/stable/features/analysis/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Appendix A: Code Examples: Service, Runbook, Mandate, Observer and Restore Artefacts, Appendix B: Templates and Tools.
- Source [170]: Argo Project. Argo Rollouts: Web Metrics. Argo Rollouts documentation, stable branch. Available at: https://argo-rollouts.readthedocs.io/en/stable/analysis/web/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
- Source [171]: Flagger project. Flagger: Progressive Delivery Operator for Kubernetes. Available at: https://flagger.app/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Appendix B: Templates and Tools.
- Source [172]: Akuity. Kargo's Core Concepts. Kargo documentation. Available at: https://docs.kargo.io/user-guide/core-concepts/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Appendix B: Templates and Tools.
- Source [173]: Akuity. Working with Stages. Kargo documentation. Available at: https://docs.kargo.io/user-guide/how-to-guides/working-with-stages/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
- Source [174]: Akuity. Verification. Kargo documentation. Available at: https://docs.kargo.io/user-guide/how-to-guides/verification/ (accessed 2026-11-11). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
- Source [175]: Kubernetes SIG Architecture. API Conventions. Kubernetes community repository. Available at: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md (accessed 2026-11-11). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
- Source [176]: The Kubernetes Authors. Pod Lifecycle. Kubernetes documentation. Available at: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [177]: The Kubernetes Authors. Horizontal Pod Autoscaling. Kubernetes documentation. Available at: https://kubernetes.io/docs/concepts/workloads/autoscaling/horizontal-pod-autoscale/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [178]: KEDA Authors. KEDA Concepts. KEDA documentation. Available at: https://keda.sh/docs/latest/concepts/ (accessed 2026-11-11). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [179]: Argo Project. Core Concepts. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/core_concepts/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [180]: Argo Project. Resource Health. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/operator-manual/health/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [181]: Argo Project. Metrics. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/operator-manual/metrics/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [182]: Argo Project. Projects. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/projects/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [183]: Argo Project. Source Integrity Verification. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/user-guide/source-integrity/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [184]: Argo Project. Disaster Recovery. Argo CD documentation, stable branch. Available at: https://argo-cd.readthedocs.io/en/stable/operator-manual/disaster_recovery/ (accessed 2026-11-11; text read from the stable branch of the argoproj/argo-cd repository). Referenced in: Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
- Source [185]: Flux project. Flux Prometheus metrics. Flux documentation (v2.10). Available at: https://fluxcd.io/flux/monitoring/metrics/ (accessed 2026-11-11). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [186]: Flux project. GitRepository. Flux documentation (v2.10). Available at: https://fluxcd.io/flux/components/source/gitrepositories/ (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [187]: HashiCorp. Manage sensitive data in your configuration. Terraform documentation. Available at: https://developer.hashicorp.com/terraform/language/manage-sensitive-data (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [188]: OpenTofu. State and Plan Encryption. OpenTofu documentation. Available at: https://opentofu.org/docs/language/state/encryption/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
- Source [189]: The Kubernetes Authors. Validating Admission Policy. Kubernetes documentation. Available at: https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ (accessed 2026-11-11). Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [190]: Argo Project (2026). VERSION file, stable branch. Argo CD repository. Available at: https://raw.githubusercontent.com/argoproj/argo-cd/stable/VERSION (accessed 2026-11-11; the file reads 3.6.1). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [191]: Argo Project (2026). Upgrading from 3.5 to 3.6. Argo CD operator manual, stable branch. Available at: https://raw.githubusercontent.com/argoproj/argo-cd/stable/docs/operator-manual/upgrading/3.5-3.6.md (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [192]: Argo Project (2026). Source Hydrator. Argo CD documentation, stable branch. Available at: https://raw.githubusercontent.com/argoproj/argo-cd/stable/docs/user-guide/source-hydrator.md (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [193]: Capili, L. (2026). Announcing Flux 2.10 GA. Flux blog, 26 October 2026. Available at: https://fluxcd.io/blog/2026/10/flux-v2.10.0/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [194]: Flux project. Flux releases. Flux documentation. Available at: https://fluxcd.io/flux/releases/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [195]: The Kubernetes Authors (2026). Releases. Kubernetes documentation. Available at: https://kubernetes.io/releases/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [196]: Crossplane Authors (2026). Crossplane documentation (latest). Available at: https://docs.crossplane.io/latest/ (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [197]: OpenTofu (2026). OpenTofu releases. GitHub. Available at: https://github.com/opentofu/opentofu/releases (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [198]: HashiCorp (2026). Terraform releases. GitHub. Available at: https://github.com/hashicorp/terraform/releases (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [199]: Temporal Technologies. Why Temporal? Temporal documentation. Available at: https://docs.temporal.io/evaluate/why-temporal (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
- Source [200]: Temporal Technologies (2026). LICENSE. Temporal server repository. Available at: https://raw.githubusercontent.com/temporalio/temporal/main/LICENSE (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [201]: Argo Project (2026). Argo Workflows releases. GitHub. Available at: https://github.com/argoproj/argo-workflows/releases (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Appendix B: Templates and Tools.
- Source [202]: Argo Project (2026). Argo Rollouts releases. GitHub. Available at: https://github.com/argoproj/argo-rollouts/releases (accessed 2026-11-11). Referenced in: Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change.
- Source [203]: Bronson, N., Aghayev, A., Charapko, A. & Zhu, T. (2021). Metastable Failures in Distributed Systems. Proceedings of the Workshop on Hot Topics in Operating Systems (HotOS '21), Ann Arbor, MI, 31 May-2 June 2021. DOI 10.1145/3458336.3465286. Available at: https://doi.org/10.1145/3458336.3465286 (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [204]: Huang, L., Magnusson, M., Muralikrishna, A. B., Estyak, S., Isaacs, R., Aghayev, A., Zhu, T. & Charapko, A. (2022). Metastable Failures in the Wild. 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI '22), Carlsbad, CA, 11-13 July 2022. Available at: https://www.usenix.org/conference/osdi22/presentation/huang-lexiang (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [205]: Brooker, M. (2019). Timeouts, retries and backoff with jitter. Amazon Builders' Library, 5 December 2019. Available at: https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/ (accessed 2026-11-11; the English page now redirects to builder.aws.com and shows the by-line "Marc" only; the author is named as Marc Brooker, Senior Principal Engineer at Amazon Web Services, in the author biography on the German, French and Spanish editions of the same page). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [206]: controlplaneio-fluxcd. Flux MCP Server command (main.go). Go source of the flux-operator-mcp command, repository controlplaneio-fluxcd/flux-operator, directory cmd/mcp, main branch. Available at: https://raw.githubusercontent.com/controlplaneio-fluxcd/flux-operator/main/cmd/mcp/main.go (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [207]: ControlPlane. Flux MCP Server Configuration. Flux Operator documentation. Available at: https://fluxoperator.dev/docs/mcp/config/ (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
- Source [208]: ControlPlane. Flux MCP Server Tools. Flux Operator documentation. Available at: https://fluxoperator.dev/docs/mcp/tools/ (accessed 2026-11-11). Referenced in: Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [209]: ServiceNow (2026). Incident state model. ServiceNow product documentation, Zurich release, IT Service Management, Incident Management. Available at: https://www.servicenow.com/docs/r/zurich/it-service-management/incident-management/c_IncidentManagementStateModel.html (accessed 2026-11-11). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
- Source [210]: Martinez, D. (2026). Understanding State Models and Transitions. ServiceNow Community blog, 23 February 2026. Vendor community article, not product documentation. Available at: https://www.servicenow.com/community/in-other-news/understanding-state-models-and-transitions/ba-p/3494789 (accessed 2026-11-11). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
- Source [211]: Atlassian (2026). Issue statuses, priorities, and resolutions. Jira Service Management Cloud documentation. Available at: https://confluence.atlassian.com/servicedeskcloud/issue-statuses-priorities-and-resolutions-1097176114.html (accessed 2026-11-11). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
- Source [212]: World Wide Web Consortium (2015). State Chart XML (SCXML): State Machine Notation for Control Abstraction. W3C Recommendation, 1 September 2015. Available at: https://www.w3.org/TR/scxml/ (accessed 2026-11-11). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant.
Security operations, workforce and automation research
-
Source [213]: Alahmadi, B. A., Axon, L. & Martinovic, I. (2022). 99% False Positives: A Qualitative Study of SOC Analysts' Perspectives on Security Alarms. 31st USENIX Security Symposium, pp. 2783-2800. Available at: https://www.usenix.org/conference/usenixsecurity22/presentation/alahmadi (accessed 2026-11-10). Referenced in: Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [214]: Sundaramurthy, S. C., Bardas, A. G., Case, J., Ou, X., Wesch, M., McHugh, J. & Rajagopalan, S. R. (2015). A Human Capital Model for Mitigating Security Analyst Burnout. Eleventh Symposium On Usable Privacy and Security (SOUPS 2015), pp. 347-359. Available at: https://www.usenix.org/conference/soups2015/proceedings/presentation/sundaramurthy (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [215]: Tariq, S., Baruwal Chhetri, M., Nepal, S. & Paris, C. (2025). Alert Fatigue in Security Operations Centres: Research Challenges and Opportunities. ACM Computing Surveys 57(9). DOI: 10.1145/3723158 (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [216]: ISC2 (2025). 2025 Cybersecurity Workforce Study. Announced 4 December 2025; online survey of 16,029 practitioners and decision-makers, May-June 2025. Available at: https://www.isc2.org/Insights/2025/12/ISC2-publishes-2025-cybersecurity-workforce-study (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [217]: Bainbridge, L. (1983). Ironies of Automation. Automatica 19(6), 775-779. DOI: 10.1016/0005-1098(83)90046-8 (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI.
-
Source [218]: Parasuraman, R. & Manzey, D. H. (2010). Complacency and Bias in Human Use of Automation: An Attentional Integration. Human Factors 52(3), 381-410. DOI: 10.1177/0018720810376055 (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI.
-
Source [219]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF) Role Profiles. ENISA, 19 September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-role-profiles (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft.
-
Source [220]: SFIA Foundation (2024). SFIA 9: the global skills and competency framework for the digital world. Released October 2024. Available at: https://sfia-online.org/en/sfia-9 (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft.
-
Source [221]: European Data Protection Board (2023). Guidelines 9/2022 on personal data breach notification under GDPR, version 2.0. EDPB, 4 April 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-92022-personal-data-breach-notification-under_en (accessed 2026-11-10). Referenced in: Chapter 14: Incidents Involving AI: Detection, Triage and Reporting.
-
Source [222]: European Parliament and Council of the European Union. Regulation (EU) 2025/38 of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act). Official Journal of the European Union, L, 15 January 2025. Available at: https://eur-lex.europa.eu/eli/reg/2025/38/oj (accessed 2026-11-10). Referenced in: Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act.
-
Source [223]: Parasuraman, R., Sheridan, T. B. & Wickens, C. D. (2000). A model for types and levels of human interaction with automation. IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans 30(3), 286-297. DOI: 10.1109/3468.844354 (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [224]: Chen, Y., Shetty, M., Somashekar, G., Ma, M., Simmhan, Y., Mace, J., Bansal, C., Wang, R. & Rajmohan, S. (2025). AIOpsLab: A Holistic Framework to Evaluate AI Agents for Enabling Autonomous Clouds. arXiv:2501.06706, 12 January 2025 (preprint). Available at: https://arxiv.org/abs/2501.06706 (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
-
Source [225]: Jha, S. et al. (2025). ITBench: Evaluating AI Agents across Diverse Real-World IT Automation Tasks. Proceedings of the 42nd International Conference on Machine Learning, Proceedings of Machine Learning Research 267, pp. 27134-27197 (figures as in the ICML version: 102 scenarios; the arXiv v1 reported 94); arXiv:2502.05352. Available at: https://proceedings.mlr.press/v267/jha25a.html (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
-
Source [226]: Fischhoff, B. (1975). Hindsight is not equal to foresight: The effect of outcome knowledge on judgment under uncertainty. Journal of Experimental Psychology: Human Perception and Performance 1(3), 288-299. DOI: 10.1037/0096-1523.1.3.288 (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge.
-
Source [227]: Ahmed, T., Ghosh, S., Bansal, C., Zimmermann, T., Zhang, X. & Rajmohan, S. (2023). Recommending Root-Cause and Mitigation Steps for Cloud Incidents using Large Language Models. 45th International Conference on Software Engineering (ICSE 2023); arXiv:2301.03797. Available at: https://arxiv.org/abs/2301.03797 (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge.
-
Source [228]: Maynez, J., Narayan, S., Bohnet, B. & McDonald, R. (2020). On Faithfulness and Factuality in Abstractive Summarization. Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics, pp. 1906-1919. Available at: https://aclanthology.org/2020.acl-main.173/ (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge.
-
Source [229]: Manheim, D. & Garrabrant, S. (2019). Categorizing Variants of Goodhart's Law. arXiv:1803.04585, first submitted 13 March 2018, version 4 of 24 February 2019. Available at: https://arxiv.org/abs/1803.04585 (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [230]: Forsgren, N., Storey, M.-A., Maddila, C., Zimmermann, T., Houck, B. & Butler, J. (2021). The SPACE of Developer Productivity: There's more to it than you think. ACM Queue 19(1), 20-48. Available at: https://queue.acm.org/detail.cfm?id=3454124 (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing.
-
Source [231]: Becker, J., Rush, N., Barnes, E. & Rein, D. (2025). Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity. arXiv:2507.09089, submitted 12 July 2025, revised 25 July 2025. Available at: https://arxiv.org/abs/2507.09089 (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
-
Source [232]: Widdowson, A. (2017). Accelerating SREs to On-Call and Beyond. Chapter 28 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media; online edition, edited by S. Nukala. Available at: https://sre.google/sre-book/accelerating-sre-on-call/ (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft.
-
Source [233]: Casner, S. M., Geven, R. W., Recker, M. P. & Schooler, J. W. (2014). The Retention of Manual Flying Skills in the Automated Cockpit. Human Factors 56(8), 1506-1516. DOI: 10.1177/0018720814535628 (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual.
-
Source [234]: Budzyń, K., Romańczyk, M. et al. (2025). Endoscopist deskilling risk after exposure to artificial intelligence in colonoscopy: a multicentre, observational study. The Lancet Gastroenterology & Hepatology 10, 896-903. DOI: 10.1016/S2468-1253(25)00133-5 (accessed 2026-11-10; figures read from a secondary report of the paper, the publisher page was not reachable). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft, Chapter 31: Conclusions: Operations with AI.
-
Source [235]: Bastani, H., Bastani, O., Sungu, A., Ge, H., Kabakcı, Ö. & Mariman, R. (2025). Generative AI without guardrails can harm learning: Evidence from high school mathematics. Proceedings of the National Academy of Sciences 122(26), e2422633122. DOI: 10.1073/pnas.2422633122 (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft, Chapter 31: Conclusions: Operations with AI.
-
Source [236]: Shen, J. H. & Tamkin, A. (2026). How AI Impacts Skill Formation. arXiv:2601.20245, submitted 28 January 2026, revised 1 February 2026 (preprint, not peer reviewed). Available at: https://arxiv.org/abs/2601.20245 (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft, Chapter 31: Conclusions: Operations with AI.
-
Source [237]: Brynjolfsson, E., Li, D. & Raymond, L. R. (2025). Generative AI at Work. The Quarterly Journal of Economics 140(2), 889-942. DOI: 10.1093/qje/qjae044; working-paper version NBER Working Paper 31161, https://www.nber.org/papers/w31161 (accessed 2026-11-10). Referenced in: Chapter 26: Competences and Keeping the Operator's Craft.
Books and practitioner literature
-
Source [238]: Shortridge, K. & Rinehart, A. Security Chaos Engineering: Sustaining Resilience in Software and Systems. O'Reilly Media, 2023 (some sellers list the subtitle as Developing Resilience and Safety at Speed and Scale). ISBN 978-1-098-11382-7. Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher.
-
Source [239]: Basiri, A., Behnam, N., de Rooij, R., Hochstein, L., Kosewski, L., Reynolds, J. & Rosenthal, C. (2016). Chaos Engineering. IEEE Software 33(3), 35–41. Available at: https://doi.org/10.1109/MS.2016.60 (accessed 2026-11-02). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [240]: Principles of Chaos Engineering community. Principles of Chaos Engineering. Available at: https://principlesofchaos.org/ (accessed 2026-11-02). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [241]: Jones, C., Wilkes, J. & Murphy, N., with Smith, C. (2017). Service Level Objectives. Chapter 4 in Beyer, B. (ed.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/service-level-objectives/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 26: Competences and Keeping the Operator's Craft, Appendix B: Templates and Tools.
-
Source [242]: Ewaschuk, R. (2017). Monitoring Distributed Systems. Chapter 6 in Beyer, B. (ed.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/monitoring-distributed-systems/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise.
-
Source [243]: Thurgood, S. & Ferguson, D., with Hidalgo, A. & Beyer, B. (2018). Implementing SLOs. Chapter 2 in The Site Reliability Workbook: Practical Ways to Implement SRE. O'Reilly Media. Available at: https://sre.google/workbook/implementing-slos/ (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 31: Conclusions: Operations with AI.
-
Source [244]: Thurgood, S., with Frame, J., Lenton, A., Quinito, C., Tolchanov, A. & Trdin, N. (2018). Alerting on SLOs. Chapter 5 in The Site Reliability Workbook: Practical Ways to Implement SRE. O'Reilly Media. Available at: https://sre.google/workbook/alerting-on-slos/ (accessed 2026-11-10). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [245]: Treynor Sloss, B. (2017). Introduction, Chapter 1 of Site Reliability Engineering: How Google Runs Production Systems, edited by Betsy Beyer. O'Reilly Media. Available at: https://sre.google/sre-book/introduction/ (accessed 2026-11-10). Referenced in: Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [246]: Warner, A. & Davidovič, Š., with Hidalgo, A., Beyer, B., Smith, K. & Duftler, M. (2018). Canarying Releases, Chapter 16 of The Site Reliability Workbook. O'Reilly Media. Available at: https://sre.google/workbook/canarying-releases/ (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change.
-
Source [247]: Liguori, C. (2020). Automating safe, hands-off deployments. Amazon Builders' Library, 18 June 2020. Available at: https://aws.amazon.com/builders-library/automating-safe-hands-off-deployments/ (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
-
Source [248]: Pokkunuri, S. (2019). Ensuring rollback safety during deployments. Amazon Builders' Library, 5 December 2019. Available at: https://aws.amazon.com/builders-library/ensuring-rollback-safety-during-deployments/ (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
-
Source [249]: Amazon Web Services (2023). Reducing the Scope of Impact with Cell-Based Architecture. AWS Well-Architected guidance, 20 September 2023. Available at: https://docs.aws.amazon.com/wellarchitected/latest/reducing-scope-of-impact-with-cell-based-architecture/reducing-scope-of-impact-with-cell-based-architecture.html (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
-
Source [250]: Hodgson, P. (2017). Feature Toggles (aka Feature Flags). martinfowler.com, 9 October 2017. Practitioner article. Available at: https://martinfowler.com/articles/feature-toggles.html (accessed 2026-11-10). Referenced in: Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius.
-
Source [251]: Harvey, N. & DeBellis, D. (2024). Highlights from the 10th DORA report (the DevOps Research and Assessment programme's 2024 report; not Regulation (EU) 2022/2554). Google Cloud Blog, 22 October 2024. Available at: https://cloud.google.com/blog/products/devops-sre/announcing-the-2024-dora-report (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 9: Change Safely: Progressive Delivery, Freezes and Blast Radius, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [252]: Murphy, N. R., Looney, J. & Kacirek, M. (2017). The Evolution of Automation at Google. Chapter 7 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/automation-at-google/ (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
-
Source [253]: Rau, V. (2017). Eliminating Toil. Chapter 5 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/eliminating-toil/ (accessed 2026-11-10). Referenced in: Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 31: Conclusions: Operations with AI.
-
Source [254]: Veeam (2024). What is the 3-2-1 Backup Rule? Veeam Software, 5 February 2024, updated 3 July 2026. Vendor documentation, cited as a statement of the vendor's own formulation and not as independent evidence. Available at: https://www.veeam.com/blog/321-backup-rule.html (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
-
Source [255]: Featonby, M. Making retries safe with idempotent APIs. Amazon Builders' Library, Amazon Web Services. Available at: https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/ (accessed 2026-11-10). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
-
Source [256]: Rzadca, K., Findeisen, P., Swiderski, J., Zych, P., Broniek, P., Kusmierek, J., Nowak, P. K., Strack, B., Witusowski, P., Hand, S. & Wilkes, J. (2020). Autopilot: Workload Autoscaling at Google Scale. Proceedings of the Fifteenth European Conference on Computer Systems (EuroSys 2020), ACM. DOI: 10.1145/3342195.3387524. Available at: https://research.google/pubs/autopilot-workload-autoscaling-at-google-scale/ (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [257]: Hyndman, R. J. & Athanasopoulos, G. Forecasting: Principles and Practice (3rd edition). OTexts, online edition. Available at: https://otexts.com/fpp3/ (accessed 2026-11-10). Referenced in: Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle.
-
Source [258]: Alvidrez, M. (2017). Embracing Risk. Chapter 3 of Site Reliability Engineering, O'Reilly Media, online edition (copyright Google, Inc.). Available at: https://sre.google/sre-book/embracing-risk/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual.
-
Source [259]: Lunney, J. & Lueder, S. (2017). Postmortem Culture: Learning from Failure. Chapter 15 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems; edited by G. O'Connor. O'Reilly Media and Google, online edition. Available at: https://sre.google/sre-book/postmortem-culture/ (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI.
-
Source [260]: Cook, R. I. (2000). How Complex Systems Fail. Cognitive Technologies Laboratory, University of Chicago (copyright 1998-2000). Available at: https://how.complexsystems.fail/ (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns.
-
Source [261]: Consortium for Service Innovation. KCS v6 Practices Guide: The Evolve Loop. Knowledge-Centered Service, version 6. Available at: https://library.serviceinnovation.org/KCS/KCS_v6/KCS_v6_Practices_Guide/030/040 (accessed 2026-11-10). Referenced in: Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge.
-
Source [262]: Weiss, B. & Furr, M. (2019). Static stability using Availability Zones. Amazon Builders' Library, 5 December 2019. Available at: https://aws.amazon.com/builders-library/static-stability-using-availability-zones/ (accessed 2026-11-11; the English page shows the by-line "Furr, Mike" only; both authors, Becky Weiss and Mike Furr, are named in the author biographies on the German edition of the page). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 28: Case Studies and Anti-Patterns.
-
Source [263]: Prometheus Operator. Watchdog. kube-prometheus runbooks (practitioner documentation). Available at: https://runbooks.prometheus-operator.dev/runbooks/general/watchdog/ (accessed 2026-11-10). Referenced in: Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Appendix B: Templates and Tools.
-
Source [264]: Hardy, N. (1988). The Confused Deputy (or why capabilities might have been invented). ACM SIGOPS Operating Systems Review 22(4), 36-38. DOI: 10.1145/54289.871709 (accessed 2026-11-10). Text read in the author's mirror at http://cap-lore.com/CapTheory/ConfusedDeputy.html; bibliographic record verified through Crossref. Referenced in: Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0.
-
Source [265]: Blum, R. & Singh, R. (2017). Data Integrity: What You Read Is What You Wrote. Chapter 26 in Beyer, B. (ed.), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/data-integrity/ (accessed 2026-11-10). Referenced in: Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age.
-
Source [266]: Atlassian (2022). Post-Incident Review on the Atlassian April 2022 outage. Atlassian Engineering, How We Build, 29 April 2022. Primary post-incident report by the operator of the affected service. Available at: https://www.atlassian.com/blog/how-we-build/post-incident-review-april-2022-outage (accessed 2026-11-10). Referenced in: Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 28: Case Studies and Anti-Patterns, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI.
-
Source [267]: Forsgren, N., Humble, J. & Kim, G. (2018). Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations. IT Revolution, 27 March 2018. ISBN 978-1-942788-33-1. Available at: https://itrevolution.com/product/accelerate/ (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [268]: DevOps Research and Assessment programme. DORA's software delivery performance metrics. dora.dev, a programme run by Google Cloud. Available at: https://dora.dev/guides/dora-metrics/ (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Glossary.
-
Source [269]: Davidovič, Š. (2021). Incident Metrics in SRE. Google SRE report, O'Reilly Media. Available at: https://sre.google/resources/practices-and-processes/incident-metrics-in-sre/ (accessed 2026-11-10). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead.
-
Source [270]: Skelton, M. & Pais, M. (2025). Team Topologies, 2nd Edition: Organizing Business and Technology for Fast Flow of Value. IT Revolution, 23 September 2025. ISBN 978-1-966280-00-2. Available at: https://teamtopologies.com/book (accessed 2026-11-10). Referenced in: Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [271]: Conway, M. E. (1968). How Do Committees Invent? Datamation, April 1968. Available at: https://www.melconway.com/Home/Committees_Paper.html (accessed 2026-11-10). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [272]: Beyer, B., Murphy, N. R., Rensin, D. K., Kawahara, K. & Thorne, S. (eds) (2018). The Site Reliability Workbook: Practical Ways to Implement SRE. O'Reilly Media. Chapter 18, SRE Engagement Model, and Chapter 20, SRE Team Lifecycles (Ferguson, D. & Labhane, P., with Nukala, S.). Available at: https://sre.google/workbook/team-lifecycles/ and https://sre.google/workbook/engagement-model/ (accessed 2026-11-10). Referenced in: Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [273]: CNCF TAG App Delivery, Platforms Working Group. CNCF Platforms White Paper. Cloud Native Computing Foundation. Available at: https://tag-app-delivery.cncf.io/whitepapers/platforms/ (accessed 2026-11-10). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [274]: Google Cloud (2024). Accelerate State of DevOps Report 2024. DevOps Research and Assessment programme, Google Cloud. Available at: https://dora.dev/research/2024/dora-report/ (accessed 2026-11-10). Referenced in: Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations.
-
Source [275]: PagerDuty (2026). Incident Commander. PagerDuty Docs, Incident Response guide (practitioner documentation of the roles of an incident response process; no publication date shown on the page). Available at: https://docs.pagerduty.com/ops-guides/incident-response-guide/incident-commander (accessed 2026-11-10). Referenced in: Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [276]: Federal Emergency Management Agency, U.S. Department of Homeland Security (2017). National Incident Management System, third edition, October 2017. Available at: https://training.fema.gov/EMIWeb/IS/IS700b/Handouts/National_Incident_Management%20System_Third%20Edition_October_2017.pdf (accessed 2026-11-10). Referenced in: Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [277]: Weill, P. & Ross, J. W. (2004). IT Governance: How Top Performers Manage IT Decision Rights for Superior Results. Harvard Business School Press, 24 June 2004. ISBN 978-1-59139-253-8. Available at: https://store.hbr.org/product/it-governance-how-top-performers-manage-it-decision-rights-for-superior-results/2535 (accessed 2026-11-10). Referenced in: Chapter 22: Decision Rights, Change Authority and the Incident Commander.
-
Source [278]: Elsworth, C., Huang, K., Patterson, D., Schneider, I., Sedivy, R., Goodman, S., Townsend, B., Ranganathan, P., Dean, J., Vahdat, A., Gomes, B. & Manyika, J. (2025). Measuring the environmental impact of delivering AI at Google Scale. arXiv:2508.15734, submitted 21 August 2025. Available at: https://arxiv.org/abs/2508.15734 (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [279]: Luccioni, A. S., Jernite, Y. & Strubell, E. (2024). Power Hungry Processing: Watts Driving the Cost of AI Deployment? ACM Conference on Fairness, Accountability, and Transparency (FAccT '24), Rio de Janeiro, 3-6 June 2024; arXiv:2311.16863. Available at: https://arxiv.org/abs/2311.16863 (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [280]: Chen, L., Zaharia, M. & Zou, J. (2023). FrugalGPT: How to Use Large Language Models While Reducing Cost and Improving Performance. arXiv:2305.05176, submitted 9 May 2023. Available at: https://arxiv.org/abs/2305.05176 (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [281]: Kwon, W., Li, Z., Zhuang, S., Sheng, Y., Zheng, L., Yu, C. H., Gonzalez, J. E., Zhang, H. & Stoica, I. (2023). Efficient Memory Management for Large Language Model Serving with PagedAttention. 29th ACM Symposium on Operating Systems Principles (SOSP 2023); arXiv:2309.06180. Available at: https://arxiv.org/abs/2309.06180 (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [282]: Cottier, B., Snodin, B., Owen, D. & Adamczewski, T. (2025). LLM inference prices have fallen rapidly but unequally across tasks. Epoch AI, Data Insight, 12 March 2025. Available at: https://epoch.ai/data-insights/llm-inference-price-trends (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [283]: FinOps Foundation (2026). FinOps for AI Overview. FinOps Foundation working group paper, page last updated 28 October 2026. Practitioner guidance, not peer reviewed. Available at: https://www.finops.org/wg/finops-for-ai-overview/ (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [284]: Mistral AI (2025). Our contribution to a global environmental standard for AI. Mistral AI, 22 July 2025; lifecycle analysis of Mistral Large 2 carried out with Carbone 4 and ADEME. Provider's own report. Available at: https://mistral.ai/news/our-contribution-to-a-global-environmental-standard-for-ai (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [285]: Cuervo, A. F. (2017). Handling Overload. Chapter 21 in Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (eds), Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/handling-overload/ (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [286]: Dean, J. & Barroso, L. A. (2013). The Tail at Scale. Communications of the ACM 56(2), 74-80. Available at: https://research.google/pubs/pub40801/ (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [287]: Green Software Foundation (2024). Software Carbon Intensity (SCI) specification, adopted as ISO/IEC 21031:2024. Available at: https://greensoftware.foundation/standards/sci/ (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [288]: Anthropic. Pricing. Claude Platform Docs, provider list prices, which change; figures in this book are those of the page on the access date. Available at: https://platform.claude.com/docs/en/about-claude/pricing (accessed 2026-11-10). Referenced in: Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy.
-
Source [289]: Kwa, T., West, B., Becker, J., Deng, A., Garcia, K., Hasin, M., Jawhar, S., Kinniment, M., Rush, N., Von Arx, S., Bloom, R., Broadley, T., Du, H., Goodrich, B., Jurkovic, N., Miles, L. H., Nix, S., Lin, T., Painter, C., Parikh, N., Rein, D., Sato, L. J. K., Wijk, H., Ziegler, D. M., Barnes, E. & Chan, L. (2025). Measuring AI Ability to Complete Long Tasks (arXiv title in current version: Measuring AI Ability to Complete Long Software Tasks). METR; arXiv:2503.14499, first submitted 18 March 2025; NeurIPS 2025. Available at: https://arxiv.org/abs/2503.14499 (accessed 2026-11-10). Referenced in: Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
-
Source [290]: Tetlock, P. E. (2005). Expert Political Judgment: How Good Is It? How Can We Know? Princeton University Press, 2005; ISBN 978-0-691-12302-8. Available at: https://muse.jhu.edu/book/29991 (accessed 2026-11-10). Referenced in: Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?.
-
Source [291]: Amazon Web Services (2026). AWS DevOps Agent is now generally available. AWS What's New, 31 March 2026. Vendor announcement of its own product. Available at: https://aws.amazon.com/about-aws/whats-new/2026/03/aws-devops-agent-generally-available (accessed 2026-11-10). Referenced in: Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI.
- Source [292]: Ulrich, M. (2017). Addressing Cascading Failures. Chapter 22 in Site Reliability Engineering: How Google Runs Production Systems. O'Reilly Media. Available at: https://sre.google/sre-book/addressing-cascading-failures/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 17: The Observer Principle: Who Watches the Watcher.
- Source [293]: Burns, B., Grant, B., Oppenheimer, D., Brewer, E. & Wilkes, J. (2016). Borg, Omega, and Kubernetes. ACM Queue 14(1), pp. 70-93. Available at: https://doi.org/10.1145/2898442.2898444 (accessed 2026-11-11; bibliographic record confirmed from Crossref and the full text of the Google Research copy opened). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
- Source [294]: Ansible project. Glossary. Ansible Community Documentation. Available at: https://docs.ansible.com/ansible/latest/reference_appendices/glossary.html (accessed 2026-11-11). Referenced in: Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps.
The Transformed Architecture and the author
-
Source [295]: Nordqvist, G. (2025). Architecture as Code. The Transformed Architecture, Book 1, published at aac.geon.se. Available at: https://aac.geon.se/ (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 26: Competences and Keeping the Operator's Craft, About the Author.
-
Source [296]: Nordqvist, G. (2026). AI Governance: Governing Artificial Intelligence in European Enterprises and Public Authorities. The Transformed Architecture, Book 2, published at aig.geon.se. Available at: https://aig.geon.se/ (accessed 2026-11-01). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI, About the Author.
-
Source [297]: Nordqvist, G. (2026). AI Platform and Security: Building and Securing AI Platforms in European Enterprises and Public Authorities. The Transformed Architecture, Book 3. Available at: https://aips.geon.se (accessed 2026-11-01). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 13: Operating AI Systems: Drift, Model Updates and Provider Change, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, About the Author.
-
Source [298]: Nordqvist, G. (2026). AI Red Team: AI as an Active Part of Cyber Defence in European Enterprises and Public Authorities. The Transformed Architecture, Book 4, published at aired.geon.se. Available at: https://aired.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, About the Author.
-
Source [299]: Nordqvist, G. (2026). AI Threat: Are the Dystopias Coming True? Evidence, Risk and Response for European Enterprises and Public Authorities. The Transformed Architecture, Book 5, published at aithreat.geon.se. Available at: https://aithreat.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 2: What Operations Did Before: Runbooks, ITIL, DevOps, SRE and AIOps, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 11: Sustain: Capacity, Cost, Energy and Lifecycle, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 19: Resilience as a Claim: Restore Tests, Game Days and Evidence Age, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 28: Case Studies and Anti-Patterns, Chapter 31: Conclusions: Operations with AI, About the Author.
-
Source [300]: Nordqvist, G. (2026). The Transformed Security Architect: Role, Craft and Career in the Age of AI in European Enterprises and Public Authorities. The Transformed Architecture, Book 6, published at tsa.geon.se. Available at: https://tsa.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, About the Author.
-
Source [301]: Nordqvist, G. (2026). AI Boss: When Artificial Intelligence Manages People in European Enterprises and Public Authorities. The Transformed Architecture, Book 7, published at aiboss.geon.se. Available at: https://aiboss.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 31: Conclusions: Operations with AI, About the Author.
-
Source [302]: Nordqvist, G. (2026). AI Blue: How Artificial Intelligence Transforms the Blue Team in European Enterprises and Public Authorities. The Transformed Architecture, Book 8, published at aiblue.geon.se. Available at: https://aiblue.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 3: The Pressure on Operations: Complexity, Dependency, Cost and Machine-Speed Change, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 6: Observe with AI: Correlation, Anomaly Detection and Alert Noise, Chapter 7: Diagnose: Triage, Root-Cause Analysis and the Incident Assistant, Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 12: Sustain: Problem Management, Post-Incident Learning and Knowledge, Chapter 14: Incidents Involving AI: Detection, Triage and Reporting, Chapter 15: The Economics of AI Operations: Tokens, GPUs, Latency and Energy, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 18: Defending the Operator's AI: Agents, Credentials and the Control Plane as Tier 0, Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 21: Operating Models: Platform Teams, SRE, Managed Services and Sovereign Operations, Chapter 22: Decision Rights, Change Authority and the Incident Commander, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 31: Conclusions: Operations with AI, About the Author.
-
Source [303]: Kvadrat AB. Sveriges vassaste konsulter | Kvadrat. Available at: https://www.kvadrat.se/ (accessed 2026-10-31). Referenced in: About the Author.
-
Source [304]: Nordqvist, G. (2026). AI Purple: How Red and Blue Learn Together When AI Joins the Loop in European Enterprises and Public Authorities. The Transformed Architecture, Book 9, published at aipurple.geon.se. Available at: https://aipurple.geon.se/ (accessed 2026-11-10). Conceived and directed by Nordqvist; text written by AI agents. Referenced in: Chapter 1: Introduction: Operations with AI, Chapter 4: The Operations Loop Defined: Five Functions, Autonomy Budget and Observer Principle, Chapter 8: Change: Releases, Infrastructure as Code and AI-Authored Change, Chapter 17: The Observer Principle: Who Watches the Watcher, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 24: Across Boundaries: Cloud Providers, Managed Providers, Outages and Exit, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Chapter 26: Competences and Keeping the Operator's Craft, Chapter 27: The Future of Operations: Will Anyone Be on Call in 2036?, Chapter 28: Case Studies and Anti-Patterns, Chapter 29: A Year in Operations: Nordvik Region and Hansa Mutual, Chapter 30: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 31: Conclusions: Operations with AI, About the Author.
Operations tooling, state engines and platform documentation
- Source [305]: The Kubernetes Authors. Configure Liveness, Readiness and Startup Probes. Kubernetes documentation. Available at: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
- Source [306]: Temporal Technologies. Temporal Workflow Execution overview. Temporal documentation, vendor documentation of its own product. Available at: https://docs.temporal.io/workflow-execution (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
- Source [307]: Temporal Technologies. Activity Definition. Temporal documentation, vendor documentation of its own product. Available at: https://docs.temporal.io/activity-definition (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery, Chapter 16: An AI Agent Team for Operations: Skills, Mandates and Containment.
- Source [308]: Argo Workflows project. Argo Workflows: the workflow engine for Kubernetes. Argo Workflows documentation. Available at: https://argo-workflows.readthedocs.io/en/latest/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
- Source [309]: Camunda. Job workers. Camunda 8 documentation (version 8.10), vendor documentation of its own product. Available at: https://docs.camunda.io/docs/components/concepts/job-workers/ (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
- Source [310]: Ansible project. Conditions. Ansible Rulebook documentation. Available at: https://docs.ansible.com/projects/rulebook/en/latest/conditions.html (accessed 2026-11-11). Referenced in: Chapter 10: Restore: Runbooks, Auto-Remediation and Recovery.
- Source [311]: Bundesarbeitsgericht (2024). Beschluss vom 16. Juli 2024, 1 ABR 16/23: Technische Überwachungseinrichtung - Headset-System - betriebliche Mitbestimmung - Gesamtbetriebsrat. Federal Labour Court (Germany), First Senate. ECLI:DE:BAG:2024:160724.B.1ABR16.23.0. Available at: https://www.bundesarbeitsgericht.de/entscheidung/1-abr-16-23/ (accessed 2026-11-14). Referenced in: Chapter 20: Measuring Operations: The Four Key Metrics, SLOs, Toil and the Metrics That Mislead, Chapter 23: Regulation as Constraint: DORA, NIS 2, CER, the AI Act, the GDPR and the Data Act, Chapter 25: Operators as People: On-Call, Toil, Trust and Wellbeing, Glossary.
- Source [312]: OpenTelemetry. Filter Processor. README of the filterprocessor component, opentelemetry-collector-contrib repository, vendor documentation of its own product. Available at: https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/processor/filterprocessor (accessed 2026-11-14; text read from the repository's raw README file). Referenced in: Chapter 5: Observe: Telemetry, Observability and Service Level Objectives, Appendix A: Code Examples: Service, Runbook, Mandate, Observer and Restore Artefacts.
How to cite
Inline citations give the source number, the author or organisation, and the year, for example (9, MITRE, n.d.), and link to the entry here. Where an author is named in the sentence, the citation carries the year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; existing numbers are never reused.