Jesus A McKinney
Templates & Workflows Desk
Jesus A McKinney is the byline of the templates and workflows desk at AI Policy Desk. The desk turns requirements into documents a small team can adapt the same day: acceptable-use policies, AI registers, vendor checklists, incident response plans and tool comparisons. A template under this name is built from the text it implements (a clause of the regulation, a control from a framework, a vendor's current terms), says which requirement each field answers, and notes what could not be verified. The desk says which option it would pick and why, and says so when a template is not worth a team's time.
- Fields mapped to the clause they answer
- Vendor terms read on the vendor's own pages
- Dated checks on each post
15 articles by Jesus A McKinney
Shadow AI Policy Template: Free and Ready to Copy
Fill it in one afternoon: a free shadow AI policy template with an approved-tool list, data rules, a request deadline and no-blame slip reports. Copy it.
AI Risk Register Template: Free, Scored and Pre-Filled
17 pre-filled AI risks with a 1-5 likelihood x impact score, a starting control and the rule behind it. Get the free AI risk register template in Excel.
AI Workforce Transition Plan: Retraining Before Layoffs
Build an AI workforce transition plan for a small team: map tasks, retrain or redeploy first, find WIOA training money, then check WARN notice rules.
NYC Chatbot Doom Loop Rule: Customer Service Checklist
NYC's DCWP wants every support chatbot to say it's a bot, offer a one-step route to a human and log each chat. The checklist, the fines and how to comment.
FCA AI Guidance: Good Practice Checklist for Smaller Firms
The FCA's new AI good and poor practice adds no rules, but names who answers when AI goes wrong. A checklist for smaller UK firms, mapped to each section.
OpenCode Security Breach: What to Do With Your API Keys
OpenCode says a Console breach may have exposed users' OpenAI, Anthropic and Google keys. A checklist to revoke, rotate, check billing and cap spend.
SPUR Coalition Adds NYT and Economist: What AI Builders Must Log
NYT, The Economist, AFP and 40+ publishers joined SPUR. We ran its Content Telemetry v1.0 tests and a sample RAG session. What small AI teams should log.
Colorado ADMT Comment Letter Template
Copy-paste comment letter and 3-minute hearing script for the proposed Colorado ADMT and chatbot rules. Comments close Oct 26, 2026 at 11:59 PM MT.
Claude Sonnet 5.5 vs Sonnet 5: Compliance Migration Guide
claude-sonnet-5-5: same $2/$10 price, 5 breaking API changes, 30% faster. Migration checklist for compliance workflows and regulated AI deployments.
NCSC's 7-Point Agentic AI Security Checklist for Teams
NCSC published 7 agentic AI safeguards on August 20, 2026. Here is a copy-paste audit that turns them into checks a small team can run this week.
LiteLLM supply chain attack: what to check and rotate
Poisoned LiteLLM 1.82.7 and 1.82.8 sat on PyPI for about 40 minutes in March. Find installs, check CI, rotate keys and pin what your AI gateway runs.
Reviewing AI-Generated Pull Requests: Policy and Checklist
Reviewing AI-generated pull requests? Follow this 9-point checklist for who signs off, what to require, and where AI code fails review.