Insights

Notes from the work. Brand, technology and AI, written down.

Guides, points of view and case studies from the studio: how we build brand systems, agents and platforms, what the standards actually ask for, and how we measure the result. Every guide cites the sources behind it.

The Xterra Edze journalUpdated

Articles
08
Case studies
03
Minutes of reading
40

The standards ledger

What changed, and when. Every date, with its source.

The laws, standards and measures our guides track, in the order they took effect. Each line links to the guide that explains it and to the source that sets the date. Dates still to come are marked.

11 dates from 6 guides

2023

  1. NIST releases the AI Risk Management Framework (AI RMF 1.0)

    Explained inWhat an AI-native brand system is, and what it is not

    SourceNational Institute of Standards and Technology: Artificial Intelligence Risk Management Framework (AI RMF 1.0)

  2. The Digital Personal Data Protection Act, 2023 is enacted

    Consent must be free, specific, informed, unconditional and unambiguous.

    Explained inDPDP Act consent in practice: a field guide for marketing teamsReviewed 3 Oct 2026

    SourceMinistry of Electronics and Information Technology: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023)

  3. WCAG 2.2 becomes a W3C Recommendation

    Nine new success criteria; 4.1.1 Parsing is retired.

    Explained inWCAG 2.2 for marketing sites: the nine new criteria, in plain termsReviewed 29 Sep 2026

    SourceW3C: Web Content Accessibility Guidelines (WCAG) 2.2

2024

  1. INP replaces FID as a Core Web Vital

    Responsiveness is judged on the interactions in a visit, not only the first.

    Explained inCore Web Vitals for marketing sites: the three thresholds, and what moves themReviewed 28 Sep 2026

    Sourceweb.dev (Google): Interaction to Next Paint becomes a Core Web Vital on March 12

  2. Software Carbon Intensity is published as ISO/IEC 21031:2024

    SCI = ((E × I) + M) per R becomes an international standard.

    Explained inSoftware Carbon Intensity for web products: measure the rate, then lower it

    SourceGreen Software Foundation: SCI — Software Carbon Intensity (adopted as ISO/IEC 21031:2024)

  3. NIST publishes its Generative AI Profile (NIST AI 600-1)

    A companion to the AI Risk Management Framework, with actions for generative AI.

    Explained inDesigning agents people can trust: guardrails, approvals and a way back

    SourceNational Institute of Standards and Technology: Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1)

2025

  1. The European Accessibility Act applies in the EU

    Many consumer-facing products and services, e-commerce among them, must now be accessible.

    Explained inWCAG 2.2 for marketing sites: the nine new criteria, in plain termsReviewed 29 Sep 2026

    SourceAccessibleEU (European Commission): A new era for inclusion begins: the European Accessibility Act enters into force

  2. The Design Tokens Format Module reaches its first stable version

    Version 2025.10: one file format for tokens across design and code tools.

    Explained inWhat an AI-native brand system is, and what it is not

    SourceDesign Tokens Community Group (W3C): Design Tokens Format Module 2025.10

  3. The DPDP Rules, 2025 are published in the Official Gazette

    The rules on the Data Protection Board apply the same day.

    Explained inDPDP Act consent in practice: a field guide for marketing teamsReviewed 3 Oct 2026

    SourceMinistry of Electronics and Information Technology: Digital Personal Data Protection Rules, 2025

2026

  1. Today · 4 Oct 2026
  2. Next month

    The Consent Manager rule applies

    Rule 4, one year after the Rules were published.

    Explained inDPDP Act consent in practice: a field guide for marketing teamsReviewed 3 Oct 2026

    SourceMinistry of Electronics and Information Technology: Digital Personal Data Protection Rules, 2025

2027

  1. In 7 months

    Most obligations under the DPDP Rules apply

    Notices, security safeguards, breach intimation, retention and children’s data, eighteen months after publication.

    Explained inDPDP Act consent in practice: a field guide for marketing teamsReviewed 3 Oct 2026

    SourceMinistry of Electronics and Information Technology: Digital Personal Data Protection Rules, 2025

Dates are as the cited source gives them; a month or a year means the source is no more precise. Dates still to come follow the published timetable and can move. When one does, the guide is reviewed and its review log says so.

The archive

Everything we have written, filtered your way.

Search every article and case study, or narrow the list by format, discipline and topic. Results update as you type.

5 more pieces

The 6 on the front page above are left out here. List all 11

The newsletter · Proof

Like reading this? Get the next one by email.

Once a month, three to five things that changed in brand, technology and AI: what each one means for a programme you run, and the source behind it. Read in under five minutes, and never sent before you confirm.

Cadence
Monthly, first week
Length
3–5 stories, under 5 min
Format
Email, archived here
Leaving
In every email, no log-in
Read past issues

Let’s build what happens next.

Tell us what you’re building. We’ll answer straight.

Book a discovery call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a lead, not a sales queue

  2. 02About 8 minutesMost useful

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced