Brazil's AI Bill Clears Senate but Remains Far From Becoming Law

·1 views

Brazil's PL 2338/2023, a comprehensive AI regulation bill, was introduced in the Federal Senate in May 2023 and approved by the Senate plenary on 10 December 2024. The bill has since been sent to the Chamber of Deputies, where a special committee is examining it, meaning it has not yet been enacted into law. The legislation proposes a risk-tiered framework banning high-risk AI uses like social scoring and biometric manipulation, while imposing governance and oversight obligations on other high-risk applications. If the Chamber of Deputies amends the bill, it must return to the Senate before proceeding to the President for approval or veto. Widespread reporting has incorrectly treated the Senate's approval as final passage, but the bill's text and legal status remain subject to significant change.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How Enterprise AI Governance Turns Policy Decisions Into Runtime Enforcement Objects

Traditional API keys and credentials were designed to answer one question — who are you — but enterprise AI introduces governance questions they were never built to handle, such as which models are approved, which budgets apply, and which tools may be called. When multiple applications authenticate successfully but require different access rules, identity alone cannot carry those distinctions, leading to policy drift across codebases. Platforms like Bifrost address this by replacing simple identifiers with 'virtual keys' — structured objects that encode governance decisions made by finance, security, and business teams into a single runtime artifact. A virtual key can specify allowed models, spending limits, rate limits, tool access, and expiry dates, all without requiring individual applications to implement that logic themselves. Crucially, the key also shapes what an application can discover, not just what it can execute, meaning unapproved models or providers remain invisible at the API level.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer cuts test suite runtime from 96s to 41s by fixing three hidden bottlenecks

A developer working on a control-plane project traced a slow parallel test suite to three compounding issues: a database seeder running redundantly before every test, Xdebug silently applying coverage mode on all runs, and a test impact analysis tool repeatedly timing out before it could save a dependency graph. Fixes included moving the seeder to a per-process hook, pinning Xdebug to off mode via environment variables, and disabling Composer's process timeout while switching from Xdebug to pcov for coverage. Building pcov from source introduced an additional snag, as a static build produced a PHP extension with a missing symbol that mimicked an unrelated version-mismatch error. The changes brought the parallel suite from 96.2 seconds down to 41.1 seconds, with impact-analysis replays dropping to around 5 seconds, while all 1,451 tests continued to pass.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Open-Source C++ AI Runtime SNEPPX-Alg Seeks Contributors After 522 Commits

SNEPPX-Alg is an open-source C++ AI runtime project hosted on GitHub, currently at 522 commits, designed as a secure and composable AI framework with ten built-in security layers. The project supports multiple hardware backends including CUDA, ROCm, Vulkan, and Metal, and includes a model zoo with support for architectures like Transformer, Mamba-2, and Diffusion models. Core components such as CPU tensor operations, Dilithium cryptographic signing, and basic ONNX import are marked stable, while CUDA backends and several model stubs remain experimental. The maintainer has identified specific areas needing community help, including fixing safetensors support in Python bindings, optimizing CPU matrix multiplication, and improving API documentation. Contributors with Python/C++ interop experience are particularly encouraged to participate, with one key fix estimated at around 200 lines of code.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer logs five subtle failures after moving Discord bot from paid to free LLM API

A developer migrated a Discord bot — designed to explain stack traces in plain English — from a paid LLM API to a free alternative to cut costs on an irregularly used hobby project. The switch appeared to work initially, but over two weeks a series of silent failures emerged, including mismatched model name logging, unhandled rate limits, and a feedback loop where ignored requests caused users to repost. None of the failures were loud or immediate, making them harder to diagnose than outright crashes. The developer identified five distinct breakpoints and built a wrapper layer to abstract provider-specific behavior and prevent recurrence. The findings are presented as a general portability guide for OpenAI-compatible endpoints, with the author disclosing the target platform was MonkeyCode as part of a product outreach arrangement.

0 comments Read more at DEV Community