References and Sources

This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can see at a glance which kind of source a claim rests on: the published volumes of The Transformed Architecture, which this book cites as external works by the same author; the books that inspired its method; the official statistics and datasets behind the charts and the test; the surveys and indices; incident and threat data; legal instruments and official documents; reports and articles; and the organisations and websites named in the text.

Every entry was verified against its live page or DOI before it was cited; entries that could be confirmed only in part are listed in REVIEW_SOURCES.md. Sources that no chapter cites are removed by scripts/renumber_sources.py --apply before release, and the bibliography is numbered 1..N without gaps.

Notes on verification

Every entry was opened live on the access date given, or resolved through its DOI, before it was cited. Where a publisher refuses automated clients (EUR-Lex, the OECD and Ipsos landing pages, the Eurobarometer application), the entry records the route by which the text was read (the Publications Office, the report PDF, the publisher's own data file), and REVIEW_SOURCES.md lists every entry that could be confirmed only in part. Entries 47 to 54 were added after the first pass and sit under their category headings; scripts/renumber_sources.py --apply renumbers the index in one series before release.

Numbered source index

Surveys and indices

Source [16]: Gapminder Foundation (2017). Gapminder Misconception Study 2017. Polls commissioned by Gapminder from Novus and Ipsos MORI in 14 countries, fieldwork April to October 2017; the page describes the method: 13 fact questions written by Gapminder in English and translated by the polling companies, three answer options per question, online panels weighted to each country's demographic composition. Available at: https://www.gapminder.org/ignorance/studies/gms/ (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Appendix C: Data Sources and Methods.
Source [17]: Maslej, N., Fattorini, L., Perrault, R., Gil, Y., Parli, V., Kariuki, N., Capstick, E., Reuel, A., Brynjolfsson, E., Etchemendy, J., Ligett, K., Lyons, T., Manyika, J., Niebles, J. C., Shoham, Y., Wald, R., Walsh, T., Hamrah, A., Santarlasci, L., Betts Lotufo, J., Rome, A., Shi, A. and Oak, S. (2025). The AI Index 2025 Annual Report. AI Index Steering Committee, Institute for Human-Centered AI, Stanford University, Stanford, CA, April 2025; licensed under Creative Commons Attribution-NoDerivatives 4.0 International (CC BY-ND 4.0); the report and its public data files are kept as the dataset data/stanford_ai_index_2025. DOI: https://doi.org/10.48550/arXiv.2504.07139. Available at: https://hai.stanford.edu/ai-index/2025-ai-index-report (accessed 2026-11-07). Referenced in: Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 8: The Straight-Line Instinct: Curves That Bend, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Chapter 19: The Rules of Thumb in Practice, Appendix C: Data Sources and Methods.
Source [18]: Sajadieh, S., Fattorini, L., Perrault, R., Gil, Y., Parli, V., Santarlasci, L., Pava, J., Maslej, N., Altman, R., Brynjolfsson, E., Brodley, C., Clark, J., Dignum, V., Kumar, V., Landay, J., Lyons, T., Manyika, J., Niebles, J. C., Shoham, Y., Tabassi, E., Wald, R., Walsh, T. and Weld, D. (2026). The AI Index 2026 Annual Report. AI Index Steering Committee, Institute for Human-Centered AI, Stanford University, Stanford, CA, April 2026; licensed under Creative Commons Attribution-NoDerivatives 4.0 International (CC BY-ND 4.0); the report is kept as the dataset data/stanford_ai_index_2026. DOI: https://doi.org/10.48550/arXiv.2606.15708. Available at: https://hai.stanford.edu/ai-index/2026-ai-index-report (accessed 2026-11-07). Referenced in: Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [19]: DeBellis, D., Storer, K. M., Lewis, A., Good, B., Villalba, D., Maxwell, E., Castillo, K., Irvine, M. and Harvey, N. (2024). Accelerate State of DevOps Report 2024. DORA, published by Google Cloud, document version 2024.3; the tenth DORA report, based on an annual worldwide survey of professionals in technical and adjacent roles (vendor-published survey); licensed under CC BY-NC-SA 4.0; the report is kept as the dataset data/dora_state_of_devops_2024. Available at: https://dora.dev/research/2024/dora-report/ (accessed 2026-11-07). Referenced in: Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Appendix C: Data Sources and Methods.
Source [20]: DeBellis, D., Harvey, N., Storer, K. M., Beane, M., Edwards, R., Fraser, E., Kalliamvakou, E., Kim, G., Good, B., Inman, S., Villalba, D., Maxwell, E., D'Angelo, S. and Murillo, A. (2025). State of AI-assisted Software Development. The 2025 DORA Report, published by Google Cloud, document version 2025.2 (file dated 15 October 2025); based on DORA's annual worldwide survey of software professionals (vendor-published survey); licensed under CC BY-NC-SA 4.0; the report is kept as the dataset data/dora_state_of_devops_2025. Available at: https://dora.dev/research/2025/dora-report/ (accessed 2026-11-07). Referenced in: Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Appendix C: Data Sources and Methods.
Source [21]: Silverthorne, V. & Hendrick, S. (2025). Cloud Native 2024: Approaching a Decade of Code, Cloud, and Change. CNCF Annual Cloud Native Survey 2024, The Linux Foundation, March 2025 (web release 1 April 2025); 750 respondents surveyed in the autumn of 2024; licensed under Creative Commons Attribution-NoDerivatives 4.0 International (CC BY-ND 4.0); the report is kept as the dataset data/cncf_annual_survey_2024. Available at: https://www.cncf.io/reports/cncf-annual-survey-2024/ (accessed 2026-11-07). Referenced in: Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Appendix C: Data Sources and Methods.
Source [22]: GitHub (2024). Octoverse: AI leads Python to top language as the number of global developers surges. The State of the Octoverse 2024, GitHub Blog, 29 October 2024 (platform data published by the vendor). Available at: https://github.blog/news-insights/octoverse/octoverse-2024/ (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [23]: GitHub (2025). Octoverse: A new developer joins GitHub every second as AI leads TypeScript to #1. The State of the Octoverse 2025, GitHub Blog, 28 October 2025 (platform data published by the vendor). Available at: https://github.blog/news-insights/octoverse/octoverse-a-new-developer-joins-github-every-second-as-ai-leads-typescript-to-1/ (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [24]: GitHub (2026). Octoverse: Commits, pushes, reach new highs in 2026 as developers build with agents. The State of the Octoverse 2026, GitHub Blog, 28 October 2026; Octoverse year 1 October 2025 to 30 September 2026 (platform data published by the vendor); kept with the 2024 and 2025 editions as the dataset data/github_octoverse_2025. Available at: https://github.blog/news-insights/octoverse/octoverse-commits-pushes-reach-new-highs-in-2026-as-developers-build-with-agents/ (accessed 2026-11-07). Referenced in: Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [25]: Microsoft (2025). 2025: The year the Frontier Firm is born. Work Trend Index Annual Report, Microsoft WorkLab, 23 April 2025; survey of 31,000 knowledge workers in 31 markets conducted by Edelman Data x Intelligence between 6 February and 24 March 2025 (vendor survey). Available at: https://www.microsoft.com/en-us/worklab/work-trend-index/2025-the-year-the-frontier-firm-is-born (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 19: The Rules of Thumb in Practice, Appendix C: Data Sources and Methods.
Source [26]: Microsoft (2026). 2026 Work Trend Index Annual Report: Agents, human agency, and the opportunity for every organization. Microsoft WorkLab, 5 May 2026; survey of 20,000 full-time knowledge workers who use AI at work in 10 markets, conducted by Edelman Data x Intelligence between 18 February and 7 April 2026 (vendor survey); kept with the 2025 edition as the dataset data/microsoft_work_trend_index_2025. Available at: https://www.microsoft.com/en-us/worklab/work-trend-index/agents-human-agency-and-the-opportunity-for-every-organization (accessed 2026-11-07). Referenced in: Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Appendix C: Data Sources and Methods.
Source [27]: Stack Overflow (2024). 2024 Stack Overflow Developer Survey. Stack Exchange Inc.; survey open 20 May to 20 June 2024, results released 24 July 2024; 65,437 respondents from 185 countries (self-selected online survey of Stack Overflow users); the results data are published in the archive repository github.com/StackExchange/Survey under the Open Database License (ODbL) 1.0, with cell contents under the Database Contents License (DbCL) 1.0, and are kept as the dataset data/stackoverflow_dev_survey_2024. Available at: https://survey.stackoverflow.co/2024/ (accessed 2026-11-07). Referenced in: Chapter 3: The New Landscape: Who Acts, With Whose Identity, Under Whose Decision, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [28]: Stack Overflow (2025). 2025 Stack Overflow Developer Survey. Stack Exchange Inc.; survey open 29 May to 23 June 2025, results released 29 July 2025; more than 49,000 responses from 177 countries (self-selected online survey of Stack Overflow users); the results data are published in the archive repository github.com/StackExchange/Survey under the Open Database License (ODbL) 1.0, with cell contents under the Database Contents License (DbCL) 1.0, and are kept as the dataset data/stackoverflow_dev_survey_2025. Available at: https://survey.stackoverflow.co/2025/ (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 3: The New Landscape: Who Acts, With Whose Identity, Under Whose Decision, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [29]: European Commission, Directorate-General for Employment, Social Affairs and Inclusion (2025). Artificial Intelligence and the future of work. Special Eurobarometer 554, Eurobarometer report; fieldwork 25 April to 22 May 2024 by Verian, 26,415 face-to-face interviews with residents aged 15 and over in the 27 Member States; published 13 February 2025. Publications Office of the European Union, catalogue number KE-01-24-018-EN-N, ISBN 978-92-68-21815-0; the values quoted in the book are kept as the dataset data/eurobarometer_ai_work_2025. DOI: https://doi.org/10.2767/8591026. Available at: https://europa.eu/eurobarometer/surveys/detail/3222 (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [30]: European Commission, Directorate-General for Communications Networks, Content and Technology (2025). The Digital Decade 2025. Special Eurobarometer 566, Eurobarometer report; fieldwork 18 February to 16 March 2025 by Verian, face-to-face interviews with residents aged 15 and over in the 27 Member States; published 16 June 2025. Publications Office of the European Union, report catalogue number KK-01-25-044-EN-N, ISBN 978-92-68-27439-2 (data annex KK-01-25-042-EN-N, DOI 10.2759/0648867); the AI-related values quoted in the book are kept as the dataset data/eurobarometer_digital_decade_2025. DOI: https://doi.org/10.2759/7606875. Available at: https://digital-strategy.ec.europa.eu/en/library/digital-decade-2025-special-eurobarometer (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [31]: Ipsos (2025). The Ipsos AI Monitor 2025: A 30-country Ipsos Global Advisor Survey. Ipsos, June 2025; 23,216 adults interviewed online, and in India partly face to face, between 21 March and 4 April 2025 (vendor survey, self-funded by Ipsos); Ipsos's legal mentions deem polls published on its website to be in the public domain, usable with attribution to Ipsos; the values quoted in the book are kept as the dataset data/ipsos_ai_monitor_2025. Available at: https://www.ipsos.com/sites/default/files/ct/publication/documents/2025-06/Ipsos-AI-Monitor-2025.pdf (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Appendix C: Data Sources and Methods.
Source [32]: McClain, C., Kennedy, B., Gottfried, J., Anderson, M. and Pasquini, G. (2025). How the U.S. Public and AI Experts View Artificial Intelligence. Pew Research Center, Washington, D.C., 3 April 2025; American Trends Panel survey of 5,410 US adults (August 2024) and a survey of 1,013 AI experts (14 August to 31 October 2024); the topline values are kept as the dataset data/pew_ai_public_experts_2025. Available at: https://www.pewresearch.org/internet/2025/04/03/how-the-us-public-and-ai-experts-view-artificial-intelligence/ (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Appendix C: Data Sources and Methods.
Source [33]: Poushter, J., Fagan, M. and Corichi, M. (2025). How People Around the World View AI. Pew Research Center, Washington, D.C., 15 October 2025; Spring 2025 Global Attitudes Survey, nationally representative surveys of 28,333 adults in 25 countries, fieldwork 8 January to 26 April 2025 outside the United States; the topline values are kept as the dataset data/pew_global_views_ai_2025. Available at: https://www.pewresearch.org/global/2025/10/15/how-people-around-the-world-view-ai/ (accessed 2026-11-07). Referenced in: Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Appendix C: Data Sources and Methods.
Source [34]: Gillespie, N., Lockey, S., Ward, T., Macdade, A. and Hassed, G. (2025). Trust, attitudes and use of artificial intelligence: A global study 2025. The University of Melbourne and KPMG; online survey of 48,340 respondents in 47 countries and jurisdictions, November 2024 to mid-January 2025 (university-led study supported by KPMG); licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0); the values quoted in the book are kept as the dataset data/kpmg_trust_in_ai_2025. DOI: https://doi.org/10.26188/28822919. Available at: https://kpmg.com/xx/en/our-insights/ai-and-technology/trust-attitudes-and-use-of-ai.html (accessed 2026-11-07). Referenced in: Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Appendix C: Data Sources and Methods.

Incident and threat data

Source [35]: Responsible AI Collaborative (2026). AI Incident Database. Database of reported incidents in which AI systems caused or nearly caused harm; the database collections are licensed under Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) according to the terms of use and the licence file of the database snapshots; the weekly snapshot of 2 November 2026 is kept as the dataset data/aiid_incidents. Available at: https://incidentdatabase.ai/ (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [36]: Organisation for Economic Co-operation and Development (OECD) (2026). AIM: AI Incidents and Hazards Monitor. OECD.AI Policy Observatory; an automated monitor of AI incidents and hazards reported in the news, developed by the OECD.AI expert group on AI incidents, with its method described at https://oecd.ai/en/incidents-methodology; use is subject to the OECD terms and conditions; the counts retrieved on 7 November 2026 are kept as the dataset data/oecd_aim_incidents. Available at: https://oecd.ai/en/incidents (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 10: The Size Instinct: Numbers Without Denominators, Appendix C: Data Sources and Methods.
Source [37]: European Union Agency for Cybersecurity (ENISA) (2024). ENISA Threat Landscape 2024. ENISA, 19 September 2024, reporting period July 2023 to June 2024; ISBN 978-92-9204-675-0; licensed under CC BY 4.0; the report is kept as the dataset data/enisa_threat_landscape_2024. DOI: https://doi.org/10.2824/0710888. Available at: https://www.enisa.europa.eu/publications/enisa-threat-landscape-2024 (accessed 2026-11-07). Referenced in: Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 10: The Size Instinct: Numbers Without Denominators, Appendix C: Data Sources and Methods.
Source [38]: European Union Agency for Cybersecurity (ENISA) (2025). ENISA Threat Landscape 2025. ENISA, 1 October 2025 (revised version 1.3, 22 September 2026); ISBN 978-92-9204-723-8, ISSN 2363-3050; licensed under CC BY 4.0; the report is kept as the dataset data/enisa_threat_landscape_2025. Available at: https://www.enisa.europa.eu/publications/enisa-threat-landscape-2025 (accessed 2026-11-07). Referenced in: Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.

Legal instruments and official documents

Source [39]: European Parliament and Council of the European Union (2024). Regulation (EU) 2024/1689 of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Artificial Intelligence Act). Official Journal of the European Union, L series, 2024/1689, 12 July 2024; as amended by Regulation (EU) 2026/1744. Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 3: The New Landscape: Who Acts, With Whose Identity, Under Whose Decision, Chapter 5: The Box Instinct: AI Is Not One Thing, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Chapter 14: The One-Page Landscape: Drawing It From What You Already Have, Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Chapter 18: A Year at Nordvik Region and Hansa Mutual: Two Landscapes Compared, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [40]: European Parliament and Council of the European Union (2026). Regulation (EU) 2026/1744 of 8 July 2026 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI). Official Journal of the European Union, L series, 2026/1744, 24 July 2026; in force from 27 July 2026, the third day after publication. Available at: https://eur-lex.europa.eu/eli/reg/2026/1744/oj (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 3: The New Landscape: Who Acts, With Whose Identity, Under Whose Decision, Chapter 5: The Box Instinct: AI Is Not One Thing, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Chapter 14: The One-Page Landscape: Drawing It From What You Already Have, Chapter 15: The Landscape Over a Year: Reading Change, Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Chapter 18: A Year at Nordvik Region and Hansa Mutual: Two Landscapes Compared, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [41]: European Parliament and Council of the European Union (2016). Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Official Journal of the European Union, L 119, 4 May 2016, p. 1. Available at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (accessed 2026-11-07). Referenced in: Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs.
Source [42]: European Parliament and Council of the European Union (2022). Regulation (EU) 2022/2554 of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011. Known as DORA. Official Journal of the European Union, L 333, 27 December 2022, p. 1. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj (accessed 2026-11-07). Referenced in: Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Chapter 18: A Year at Nordvik Region and Hansa Mutual: Two Landscapes Compared, Chapter 19: The Rules of Thumb in Practice.
Source [43]: European Parliament and Council of the European Union (2022). Decision (EU) 2022/2481 of 14 December 2022 establishing the Digital Decade Policy Programme 2030. Official Journal of the European Union, L 323, 19 December 2022, p. 4. Available at: https://eur-lex.europa.eu/eli/dec/2022/2481/oj (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 8: The Straight-Line Instinct: Curves That Bend, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 11: The Destiny Instinct: Nothing Here Is Fixed, and Nothing Is Inevitable, Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [44]: European Parliament and Council of the European Union (2022). Directive (EU) 2022/2555 of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive). Official Journal of the European Union, L 333, 27 December 2022, p. 80. Available at: https://eur-lex.europa.eu/eli/dir/2022/2555/oj (accessed 2026-11-07). Referenced in: Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape.
Source [45]: European Commission (2011). Commission Decision of 12 December 2011 on the reuse of Commission documents (2011/833/EU). Official Journal of the European Union, L 330, 14 December 2011, p. 39. Available at: https://eur-lex.europa.eu/eli/dec/2011/833/oj (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [46]: European Commission (2026). Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe's cloud and AI ecosystem (Cloud and AI Development Act). COM(2026) 502 final, 2026/0138 (COD), Brussels, 3 June 2026; part of the Commission's Cloud and AI Development Act package published on 3 June 2026, retrieved from the Commission's Digital Strategy library and kept as the dataset data/eu_cloud_sovereignty_or_market_share. Available at: https://ec.europa.eu/newsroom/dae/redirection/document/129111 (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [47]: European Commission (2026). Commission Staff Working Document: Impact Assessment Report accompanying the document Proposal for a Regulation of the European Parliament and of the Council establishing a framework of measures for strengthening Europe's cloud and AI ecosystem (Cloud and AI Development Act). SWD(2026) 502 final, Part 1/2 and Part 2/2, Brussels, 3 June 2026 (executive summary SWD(2026) 503 final); its figures on European cloud providers' market share are relayed from Synergy Research Group; kept as the dataset data/eu_cloud_sovereignty_or_market_share. Available at: Part 1 https://ec.europa.eu/newsroom/dae/redirection/document/129113 and Part 2 https://ec.europa.eu/newsroom/dae/redirection/document/129114 (accessed 2026-11-07). Referenced in: Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Appendix C: Data Sources and Methods.
Source [48]: Eurostat. Copyright notice and free re-use of data. Eurostat help pages; the notice authorises the reuse of statistical data, metadata and publications for commercial or non-commercial purposes provided the source is acknowledged, implementing the Commission's decision on the reuse of Commission documents, with the exception that data for countries other than EU and EFTA Member States and official acceding and candidate countries may be reused for non-commercial purposes only; a copy as retrieved is kept in data/_licence_evidence/. Available at: https://ec.europa.eu/eurostat/help/copyright-notice (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.
Source [49]: European Commission. Legal notice. The Commission's website legal notice; it states that the Commission's reuse policy is implemented by its decision on the reuse of Commission documents and that, unless otherwise indicated, content owned by the EU on the website is licensed under Creative Commons Attribution 4.0 International (CC BY 4.0); a copy as retrieved is kept in data/_licence_evidence/. Available at: https://commission.europa.eu/legal-notice_en (accessed 2026-11-07). Referenced in: Appendix C: Data Sources and Methods.

Reports and articles

Source [50]: McGregor, S. (2021). Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. Proceedings of the AAAI Conference on Artificial Intelligence, 35(17), 15458–15463. Association for the Advancement of Artificial Intelligence, 18 May 2021. DOI: https://doi.org/10.1609/aaai.v35i17.17817 (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 7: The Model Instinct: The Use Sets the Risk and the Value, Chapter 9: The Fear Instinct: The Loud Harms and the Quiet Ones, Chapter 10: The Size Instinct: Numbers Without Denominators, Chapter 13: The Blame Instinct: When Nobody Designed Who Decides, Appendix C: Data Sources and Methods.
Source [51]: Gonzalez Vazquez, I., Fernandez Macias, E., Wright, S. and Villani, D. (2025). Digital Monitoring, Algorithmic Management and the Platformisation of Work in Europe. European Commission, Joint Research Centre, JRC143072; Publications Office of the European Union, Luxembourg, released 13 October 2025, catalogue number KJ-01-25-490-EN-N, ISBN 978-92-68-31994-9; based on the AIM-WORK survey of 70,316 individuals aged 16 to 65 in the 27 Member States; licensed under CC BY 4.0; the values quoted in the book are kept as the dataset data/jrc_aimwork_2025. DOI: https://doi.org/10.2760/9406086. Available at: https://publications.jrc.ec.europa.eu/repository/handle/JRC143072 (accessed 2026-11-07). Referenced in: Chapter 1: Introduction: A Test, a Picture and a Stance, Chapter 6: The Binary Instinct: Neither Automated Nor Manual, Chapter 12: The Single-Perspective Instinct: Security, Compliance and Productivity Share One Landscape, Chapter 19: The Rules of Thumb in Practice, Chapter 20: The Next Years, and a Conclusion, Appendix C: Data Sources and Methods.
Source [52]: Synergy Research Group (2022). European Cloud Providers Continue to Grow but Still Lose Market Share. Press release, Reno, NV, 27 September 2022; vendor market estimates from Synergy's quarterly cloud infrastructure market-share model (press-release data); kept as the dataset data/eu_cloud_sovereignty_or_market_share. Available at: https://www.srgresearch.com/articles/european-cloud-providers-continue-to-grow-but-still-lose-market-share (accessed 2026-11-07). Referenced in: Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Appendix C: Data Sources and Methods.
Source [53]: Synergy Research Group (2025). European Cloud Providers' Local Market Share Now Holds Steady at 15%. Press release, Reno, NV, 24 July 2025; vendor market estimates from Synergy's quarterly cloud infrastructure market-share model (press-release data); kept as the dataset data/eu_cloud_sovereignty_or_market_share. Available at: https://www.srgresearch.com/articles/european-cloud-providers-local-market-share-now-holds-steady-at-15 (accessed 2026-11-07). Referenced in: Chapter 16: Supply, Sovereignty and Jurisdiction: Where the Landscape Runs, Appendix C: Data Sources and Methods.

Organisations and websites

Source [54]: Kvadrat AB. Kvadrat – Sweden's largest network of self-employed consultants. Available at: https://www.kvadrat.se/ (accessed 2026-11-07). Referenced in: About the Author.