The Ncast

The episode offers some useful framing - particularly the historical technology-neutral regulatory approach and 'rule by examination' as the practical source of AI guardrails - but is heavily padded with generic compliance advice ('have a checklist,' 'have conversations,' 'document things'). Novel claims per minute are low.

“it's not about the rule. Let's follow this rule. What ends up happening with this approach is that just like in you know the Nike case or all of these, you know notice to members, we started seeing sort um of rule by examination”

“what's their change management process, right? When they implement, they change things, right? They, they change how it, how it looks to a customer, how they process things, where they store their data”

The most original contribution is grounding AI regulation in a decade-long historical arc (1998 email confirmations, Knight Capital 2013) to argue that 'rule by examination' is the real enforcement mechanism - a genuine insight. Everything else recycles standard compliance tropes without a contrarian angle.

“if you go back to like for example like 1998 we had the. When everyone is sort of saying can you really send my statement via email? Can you really send my confirms via email?”

“we started seeing sort um of rule by examination and I know that there's been, that has also been a topic of conversation in other circles”

Holly Mason has authentic multi-sided practitioner credentials - FINRA senior enforcement counsel, FINRA arbitrator for over a decade, in-house counsel at major institutions, and COO of an RIA - giving her legitimate standing to speak across regulatory, litigation, and operational dimensions. Not a pure thought-leader.

“I did serve as chief um, operating officer for a smaller IRA which you know it had 12 to 15 investment advisors”

“she held uh, members accountable to finra. She's also a certified FINRA dispute resolutions arbitrator for more than a decade”

The episode has a handful of specific anchors - Knight Capital (2013), FINRA's 2026 oversight report, cases in New York/Delaware/Minnesota - but no dollar figures, no named enforcement actions beyond passing references, no rule numbers cited, and advice stays largely at the level of principles rather than concrete metrics or timelines.

“we had the Knight Capital case right with the SEC in 2013”

“FINRA's 2026 oversight report, they specifically call out hallucination bias and cybersecurity risk”

The host brings a useful practitioner framing (banking vendor management parallel, minimum viable oversight program question) and occasionally sets up good topics, but reflexively calls every answer 'a great question,' never pushes back on vague claims, and frequently pivots to sharing his own views rather than extracting more from the guest.

“That is a great question and I think it sort of starts in the Wayback Machine if you will”

“what is the minimum viable oversight program look like? And my theory is that this has really been shaped by a lot of class action lawsuits”