Closing the Sovereign Safety Gap: A Localized Adversarial Auditing Framework for African AI Governance

The project makes a strong and specific argument: Africa's AI governance gap is less about writing policy and more about building the technical ability to verify deployed AI systems. The “Sovereign Safety Gap” framing is compelling, especially because the paper connects it to Nigeria’s mismatch between policy-capacity ranking and overall AI readiness, then broadens the claim to Kenya, South Africa, and Mauritius. The LAAI framework is also well motivated: using existing offensive-security and red-teaming talent for localized AI audits feels practical and regionally grounded rather than abstract.

The strongest part of the paper is the healthcare pilot matrix. It shows the author understands that African AI safety failures may appear through local disease prevalence, underrepresented patient groups, and robustness failures from ambiguous or manipulated inputs. That makes the proposal more concrete than a generic “AI governance capacity” argument.

The main weakness is that the paper stops at scoping. No actual audit is conducted, so we cannot tell whether LAAI would uncover failures that existing model evaluations miss, whether regulators would act on the findings, or whether offensive-security methods transfer cleanly to AI evaluation. The regional evidence is also thinner than the argument suggests: Nigeria has the strongest policy-capacity evidence, while the other country comparisons rely mainly on overall readiness rankings.

To strengthen this, the next version should run one small audit on a real or open healthcare AI system, document actual failure cases, and show how findings would be handed to a regulator or institution. It should also explain more precisely which pen-testing practices map well to AI auditing and which require new methods.

Overall, this is a thoughtful and well-written governance proposal with a strong theory of change, but it needs real audit evidence to move from persuasive framework to demonstrated contribution.

This paper presents a clear and compelling policy contribution by framing Africa's primary AI governance challenge as a "Sovereign Safety Gap" between policy and the technical capacity to verify deployed AI systems. The proposal to leverage existing offensive security expertise for adversarial AI auditing is practical and well motivated, while the four-stage auditing framework provides a structured approach for operationalizing AI governance. The Nigeria case study effectively illustrates the core argument.

The main limitation is that the work remains a conceptual framework without validation through a real-world audit. The healthcare test matrix would be stronger with more Africa-specific evaluation scenarios, and the regional analysis would benefit from comparable pillar-level evidence across additional countries. A pilot evaluation of a deployed healthcare AI system and engagement with regulators would significantly strengthen the paper's practical impact.

Overall, this is a thoughtful and well-argued position paper that offers a valuable framework for advancing AI governance through technical assurance rather than policy alone.

The thesis is genuinely interesting and well-argued: Africa's realistic governance leverage is technical verification capacity, not compute, and the continent's existing base of offensive-security practitioners can be redirected toward AI auditing. The disposition is honest throughout — the pilot is explicitly scoped rather than executed, the dual-use risk is raised unprompted, and the regional claim is hedged exactly where the data thins. But this is a position paper, not research. The "results" are an existing index's four overall ranks (Kenya 65th through Nigeria 72nd) reproduced rather than analysed, and a three-row test matrix that is a template, never run against a real system. The central empirical claim — that policy capacity outpaces verification capacity at a regional level — rests entirely on one country's pillar breakdown (Nigeria's 35th in policy versus 72nd overall); the other three have only an overall rank, so the regional pattern is asserted, as the paper itself concedes. The path forward is the one it names: execute the healthcare audit against a single deployed triage tool, and the methodology stops being a claim about what an audit could find and becomes one about what it does.