AI Weekly Malaysia

Apple submitted a court-ordered proposal to charge 15% commissions on purchases made via external links inside iOS apps, with 5% for small business developers, 10% for certain partner programs, and 10% for subscription renewals. The Supreme Court rejected Apple's bid to delay, forcing the disclosure after Apple had previously imposed a 27% external-link commission that the court found problematic. Apple compared its rates to Google Play's 20% standard, 15% special program, and 10% subscription renewal link-out fees.

Why: If you ship an iOS app and route payments through external links, these proposed rates determine your unit economics: 5% if you qualify as a small business developer versus 15% standard. Founders should model both scenarios now and check whether their app qualifies for the small business or partner program tiers before finalizing pricing.

Anthropic has begun inserting invisible watermarks into Claude's editorial text outputs to comply with the EU AI Act's Transparency Code, which requires AI-generated or AI-edited content to be machine-identifiable. Some users on Reddit are upset, arguing the system will disproportionately catch casual users rather than sophisticated ones who paraphrase or route outputs through other AI services.

Why: If you ship products or workflows that surface Claude-generated text to end users — especially in EU markets — you should now expect that text to carry machine-detectable provenance signals. This affects compliance posture for SaaS products that embed Claude outputs, and it changes the calculus for anyone using Claude for drafting, summarization, or editing in workplace or academic settings where AI use is restricted.

Anthropic will watermark all text and files generated by models released after August 2, 2026, to comply with the EU AI Act's Transparency Code. The watermark travels with copy-pasted text and may persist through some editing, though Anthropic hasn't clarified how much editing removes it. Watermarking applies across Claude API, Claude, Claude Code, Claude Cowork, and Claude Tag, with file watermarking using the C2PA open standard.

Why: If you ship Claude-generated text to end users—especially EU customers—your output will now carry an embedded watermark that survives copy-paste and some editing. Builders using Claude Code or the API should test whether watermarks affect downstream processing, content pipelines, or user-facing output, and factor this into compliance posture for EU markets.

Gregory Kurtzer, founder of CentOS and Rocky Linux, has launched OpenWALDO—a project to build a shared, open-source AI training dataset with full provenance and a bill of materials. Funded by his AI infrastructure company CIQ, the effort currently targets 167 billion transparent tokens, a fraction of the trillions used by major AI labs. The project argues that even 'open-weight' models hide their training data, creating legal and compliance risk for downstream users.

Why: If you ship products using open-weight models, you currently have no auditable trail for training data lineage—OpenWALDO's 'bill of materials' concept could eventually let you point to a verified baseline corpus and reduce copyright/consent exposure. But at 167B tokens today versus trillions in proprietary datasets, this is not yet something you can train a competitive model on; treat it as a project to watch, not a dataset to use.

Anthropic extended its Compliance API to cover Claude Cowork (desktop, web, mobile) and Claude Code (CLI, desktop app) in beta for Claude Enterprise customers. The new session endpoints return consolidated transcripts including prompts, responses, tool calls, MCP content, and metadata like verified user ID and timestamps, with no separate integration required beyond an existing Compliance Access Key.

Why: If your team uses Claude Code or Cowork under a Claude Enterprise plan, compliance and security teams can now pull session transcripts for audit and eDiscovery without building separate logging infrastructure. Note the gaps: Claude Code on the web, Claude Platform sessions, and Bedrock/Vertex AI/Foundry deployments are NOT covered, so if you run Claude Code through a cloud provider you still lack this visibility.

This is a sponsored HPE-NVIDIA piece pitching 'Sovereign AI'—keeping data, models, infrastructure, and operations under local control for regulated industries and governments. It promotes the HPE Sovereign AI Factory as a validated, air-gappable stack with identity federation, positioned for organizations facing data residency and compliance mandates, including agentic AI workloads.

Why: For Malaysian builders bidding on government or regulated-sector AI projects, data residency and sovereignty requirements are increasingly real—this signals what enterprise-grade sovereign AI stacks will look like (air-gapping, identity federation, controlled agent execution). But this is vendor marketing, not independent guidance, so treat it as a requirements checklist rather than a buying recommendation.

Cloudflare for Government has achieved FedRAMP Class D (High) certification, sponsored by NIST, marking a step up from its 2022 Moderate authorization. Cloudflare also announced it is pursuing DoD Impact Level 4 (IL4) authorization for handling controlled unclassified data, using the same systems developed for FedRAMP High.

Why: This is a US federal compliance milestone with little direct impact on Malaysian or SEA builders. It only matters if you are selling into US government or defense contracts and need a CDN/edge provider with FedRAMP High status; otherwise no action required.