Went for AI training that only teaches you to prompt, or use a tool?
I call these “prompt and pray” courses. Spend a day or two. Leave with a few tricks that break the moment the tool evolves, and no idea why.
This is my experiment to do the opposite: no jargon, materials in plain language that teach you mental models and how AI actually works, so what you learn transfers to the next tool and the next model.
For folks who want a first principles understanding of AI, AI governance and risk management, in finance and other domains. From someone who has built AI models from the ground up and written national-level rules for how they should be governed.
Books first. Courses and more are coming. Some free, some paid, all affordable.
ABOUT ME
Hi, I'm Gary Ang. I’ve built AI models from the ground up, and I've written national-level rules for how they should be governed.
At the Monetary Authority of Singapore (MAS), I led AI risk supervision and wrote Singapore's first AI Risk Management Guidelines for the financial sector. Before that, I ran the team managing the risk of Singapore's foreign reserves, and earlier worked on banking rules and audited models inside banks and exchanges.
I now run my own practice, Quaintitative - an independent practice focused on AI governance and risk management in financial services. Current and past engagements include MAS, the Association of Banks in Singapore, the Wealth Management Institute, the Singapore College of Insurance, and the Cambridge Centre for Alternative Finance. I am also an advisor to the Institute of Banking & Finance, and sit on Rutgers Business School's Master of Quantitative Finance Advisory Board. A LinkedIn Top Voice in AI, I also hold a PhD in Computer Science, with research in deep learning for networks, time series, and multimodal data published at venues including ACL and ACM. I also hold Masters degrees in Financial Engineering and Knowledge Engineering from NUS.
Contact me at ask@quaintitative.com
Start Here
New to this, or not sure my way of explaining things works for you? Start here. These cost nothing.
You want to get on top of AI risk and governance, but where do you even start? Search Google or Perplexity and you get more results than anyone can reasonably read - most of it noise, much of it vendor pitches. It is easy to spend hours and come away with nothing.
This book is the answer I keep giving when people ask. Six short reading lists of papers, guidelines, and articles - governance, data management, evaluation and testing, human oversight, third-party AI risk, and explainability - each entry with a note on why it is useful and worth your time. Organized in circles of progression: start at the center and work outwards. Read the one you need; nothing here assumes you read the others.
What you get: a clear, curated path through a noisy field, so you can start on the right things instead of drowning in search results. No affiliate links, no vendor pitches - just what is worth reading in each area, from someone who wrote a national set of AI risk guidelines and has read most of the rest. Work through it and you will understand AI risk better than most people paid to talk about it.
Not exhaustive, but a good place to start.
I call it "prompt and pray." A workshop, a demo, a clever prompt, everyone marvels - and no one stops to ask what the model is actually doing, what data it's seeing, what task it thinks it's solving. This primer is the opposite: the boring fundamentals that outlast every model launch.
The frame is three questions. What data do I have? What task am I doing? Which method fits? Around them, four short moves. An AI model is just math - form, loss, train, evaluate, the same four questions under a line through points, a neural network, an LLM, and an agent. The shape of your data decides what follows - five data types, one grid, very different structures. The magic wand conceals a toolbox - every AI project is a chain of named tasks from a small set of families. And machine learning, deep learning, generative AI, and agentic AI are four setups over the same three parts.
About 30+ pages, in plain English. Written by someone who started a PhD in AI at 42 after years of managing investment risk, and wrote Singapore's AI risk guidelines - for anyone who wants to understand what they're looking at before reaching for a model.
This is the gateway to the full book, *Thinking in AI*, which takes the frame through each of the five data types in depth - why a small model on a spreadsheet still beats billion-parameter models at most real decisions, how a five-step language pipeline collapsed into one model, why your ECG and a stock chart are the same kind of problem. Free to download, and free to pass along.
Someone will try to sell your organisation AI governance that looks impressive - an ethics framework, a principles workshop, a thousand-question checklist. Most of it won't actually manage anything. This primer is about another view: not AI governance principles, but the underlying first principles of AI risk management.
Part one is the AI. One idea - a line through points - scaled up from machine learning to deep learning, language models, RAG systems, and agents. Every step up buys more capability and more of the three U's: uncertainty, unexpectedness, unexplainability. No equations, no code - just the mental models, including why language models make things up, why testing once tells you little, and why the sensible architecture is often the boring one.
Part two is the risk management. The whole framework fits on a napkin: what do you have, how are you managing it, who's accountable. Then one level down - the system that answers those questions as a cycle, the lifecycle controls in 3 groups, and why the controls only work together, as a system, not a checklist.
Written through the financial sector's risk lens by the author of Singapore's AI risk management guidelines, but built to work for hospitals, hiring, and government services too. About 36 pages.
This primer is the gateway to the full book and guided course - AI Risk Management from First Principles - planned for 4Q 2026.
Someone will try to sell you an LLM that predicts the future. It will sound confident, and it will be wrong more often than it lets on. Forecasting is usually the AI task most oversold and least understood.
This free primer provides some mental models to understand why.
Why a language model cannot forecast on its own - text and time are different kinds of sequence. What actually forecasts: the ladder from fifty-year-old classical models that still win competitions, through machine learning and deep learning, to the foundation models trying to become the ChatGPT of time. And why one rational way to use AI here is with an agent - a reasoning loop that drives real forecasting tools and checks the results against reality.
No code, no notebooks, no math you need a whiteboard for. You also leave with a working detector for nonsense: the questions that separate a real forecasting system from a confident paragraph - was it backtested, was the test split by time, did it beat the naive baseline.
Written by someone who did a PhD building forecasting models and wrote Singapore's first AI risk management guidelines for the financial sector.
The upcoming companion, *AI Agents for Advanced Forecasting*, builds everything here in code - the tools, the agent patterns, runnable notebooks - and is targeted for 4Q 2026. This primer is the why. Free to download and keep.
An agent is not a chatbot with a new name. It acts - it looks up accounts, issues refunds, sends emails - and each choice opens more choices, until nobody can review every path. A simple billing-dispute agent has thousands. This primer is one picture to think with: the agent as a tree of paths, governed the way a bonsai is tended.
Cut, and wire. Cut the branches that must never happen - the permission that was never granted cannot be argued with, tricked, or talked past. Then hold the rest with 3 kinds of wire. Rigid wire: rules coded into the tools, not prayers written into the prompt. Supple wire: a model posted as judge - useful, and a second tree you now have to govern. And your own hands: evaluation and testing that reads the path instead of the answer, repeats every run, and probes through everything the agent reads.
Along the way: why 95% reliability per step becomes 60% over ten steps, why a rule in the prompt is a request while a rule in the tool is a control, why fluent wrongness passes a fluency check, and the sign-off questions that cannot be answered with adjectives - show me the trajectories; what happens if the model ignores this control; what is the success rate across 8 repeated runs?
About 40 pages, with figures for nearly every idea. Written by the author of Singapore's AI risk management guidelines and deliberately general: the ideas apply to agents anywhere, not just in finance.
This primer is the gateway to the fuller book - *AI Risk Management: Agentic AI*, the supervisory expectations, registers, evaluation practice and worked examples behind this way of thinking - planned for 4Q 2026. 
Someone will try to sell you an LLM that manages your money. It will sound confident. Some of it will be made up, and it will not tell you which parts. This primer is about why that happens - an LLM on its own has no data and no calculator - and about the fix, which is not a smarter model. It is the right architecture.
Five ideas, in about twenty-five pages. LLMs are buns, not meat: good at the language, not at the numbers. Most tasks don't need an agent - the complexity ladder tells you when a workflow will do. An agent is four parts - model, tools, instructions, memory - holding three kinds of tools, and only one kind should ever act without a human. Four patterns cover the work: tool calling, ReAct, CodeAct, orchestration. And the demo is not the product - the gap to production is guardrails, approval, and audit, not cleverer models.
No code, no notebooks. Written for anyone who will buy, build, or approve an AI tool that touches a portfolio - and who wants to be able to tell, when shown one, whether it is calling real tools or generating a confident paragraph.
This is the primer to the full book, *AI Agents for Investing* (listed in this catalogue), which builds all of it in runnable code: the tools, the four patterns, a working portfolio assistant, and a no-code path for people who would rather not write Python.
Most of what passes for AI governance is a pile of boxes that grows faster than the AI does - and never quite governs it. Multiply it out: twenty frameworks, two hundred use cases, a thousand questions per checklist. Four million boxes. Even if you ticked them all, you still wouldn't be governed. You'd just be really really busy.
This primer is the opposite argument, in three moves, written by the author of Singapore's first AI risk management guidelines for the financial sector. For anyone trying to keep control of AI as the number of systems climbs, in a firm, a regulator, or a team of one.
This primer is the gateway to the fuller book, Some Thoughts on Scaling AI Governance.
AI Fundamentals
Understand how AI actually works once, so the next new model or paper stops being a mystery.
You sit through the workshops and the demos. Someone shows a clever prompt, everyone marvels at the output, and no one stops to ask what the model is actually doing - what data it is seeing, what task it is solving, why it works here but might not on the next example. So when the next model drops, you feel like you have to relearn everything. I call this prompt and pray, and it wears you out.
The fix is boring, and it lasts. Before reaching for a model, ask three questions: what data do I have, what task am I doing, which method fits. My PhD supervisor put it in three words - "Let's start with the task" - and years of working through data types and tasks showed me he was right. That is what this book teaches: how to see AI through the lens of data types and tasks.
Why it matters now, in the age of LLMs and agents: prompts are brittle, and a framework for thinking is more durable than a harness. AI has always been about data and tasks. LLMs wrap over those tasks in a more general way; agents are an LLM orchestrating tools and other LLMs on tasks. Strip the headline away and the data types and tasks are the same ones that were there ten years ago.
What you get: the book works through the main data types - tabular, text, image, networks, and time series - the same way each time. What the data is, how you break it down, how AI works on it. From the current landscape to the frontier. Learn the pattern once and you can look at any new tool or paper and understand what it is doing, instead of relearning the hype every six months.
If you are here for the frontier, you are in the wrong place. This is deliberately about the boring fundamentals - the part of AI that does not expire when the next model drops.
I call it "prompt and pray." A workshop, a demo, a clever prompt, everyone marvels - and no one stops to ask what the model is actually doing, what data it's seeing, what task it thinks it's solving. This primer is the opposite: the boring fundamentals that outlast every model launch.
The frame is three questions. What data do I have? What task am I doing? Which method fits? Around them, four short moves. An AI model is just math - form, loss, train, evaluate, the same four questions under a line through points, a neural network, an LLM, and an agent. The shape of your data decides what follows - five data types, one grid, very different structures. The magic wand conceals a toolbox - every AI project is a chain of named tasks from a small set of families. And machine learning, deep learning, generative AI, and agentic AI are four setups over the same three parts.
About 30+ pages, in plain English. Written by someone who started a PhD in AI at 42 after years of managing investment risk, and wrote Singapore's AI risk guidelines - for anyone who wants to understand what they're looking at before reaching for a model.
This is the gateway to the full book, *Thinking in AI*, which takes the frame through each of the five data types in depth - why a small model on a spreadsheet still beats billion-parameter models at most real decisions, how a five-step language pipeline collapsed into one model, why your ECG and a stock chart are the same kind of problem. Free to download, and free to pass along.AI Governance & Risk Management
You're being asked to put AI into real decisions and to answer for it when something goes wrong. These show you how to govern AI so you can stand behind it, from first principles up to running it at scale, and for the board.
You have twenty frameworks to comply with, two hundred use cases to govern, and a control checklist a thousand questions long for each. Multiply it out and you get millions of boxes. Tick them all and you still are not governed - you are just very busy. Governance that grows faster than the AI does not scale, and most of what passes for AI governance today is exactly that.
This short book compiles some thoughts on three moves that collapse twenty frameworks and hundreds of use cases into one backbone you can actually manage - and scale.
Govern to a common spine. Strip the packaging off twenty frameworks and they ask the same questions. Build one backbone and twenty columns collapse to one.
Govern with the unit that scales. "What are the use cases?" is the wrong first question - a use case is the least scalable thing to govern. Underneath sit units that repeat. Govern those once and every use case inherits.
Govern as a system, not a checklist. A thousand-question checklist passed box by box still fails, because the boxes do not talk to each other.
Some ideas on how to keep control of AI as the number of systems climbs - in a firm, a regulator, or a team of one - without a pricey consultant and without drowning in boxes. It is deliberately boring, because the parts that last usually are. I wrote Singapore's first AI risk management guidelines for the financial sector, and much of this is what I wish I could have said in the margins of them.
A director at a board I was briefing asked me a simple question: what do I actually need to know about AI? I did not answer it well at the time.
And so this is the answer, written down. A short, board-facing book that reads the AI problem through the financial sector's risk discipline - the one built over decades and paid for in real losses. It is built on the MAS AI Risk Management Guidelines (AIRG), which I wrote, and it takes the generalist SID AI Guide for Boards in Singapore as its starting point. Comparison and extension, not a critique - it just follows the finance lens further than a general guide can.
Five questions, one for each thing a board owns. Approve the approach. Set the appetite. Get the roles clear. Understand enough to challenge. Review the approach. Each one turns the obvious question into another one a financial-sector board should be asking - who really owns the risk, what "good enough" means for the task, when a control has quietly been skipped - and shows where the answer for finance is not the generalist answer.
You do not need to send your directors on a prompt-engineering course. You need a handful of durable questions that do not expire when the next model ships. That is what this is - about thirty plus pages, five questions, and the detail behind each one, to take into the next board meeting.
Written for directors, especially in financial institutions, but useful to any board that takes AI risk seriously. Someone will try to sell your organisation AI governance that looks impressive - an ethics framework, a principles workshop, a thousand-question checklist. Most of it won't actually manage anything. This primer is about another view: not AI governance principles, but the underlying first principles of AI risk management.
Part one is the AI. One idea - a line through points - scaled up from machine learning to deep learning, language models, RAG systems, and agents. Every step up buys more capability and more of the three U's: uncertainty, unexpectedness, unexplainability. No equations, no code - just the mental models, including why language models make things up, why testing once tells you little, and why the sensible architecture is often the boring one.
Part two is the risk management. The whole framework fits on a napkin: what do you have, how are you managing it, who's accountable. Then one level down - the system that answers those questions as a cycle, the lifecycle controls in 3 groups, and why the controls only work together, as a system, not a checklist.
Written through the financial sector's risk lens by the author of Singapore's AI risk management guidelines, but built to work for hospitals, hiring, and government services too. About 36 pages.
This primer is the gateway to the full book and guided course - AI Risk Management from First Principles - planned for 4Q 2026.
Most of what passes for AI governance is a pile of boxes that grows faster than the AI does - and never quite governs it. Multiply it out: twenty frameworks, two hundred use cases, a thousand questions per checklist. Four million boxes. Even if you ticked them all, you still wouldn't be governed. You'd just be really really busy.
This primer is the opposite argument, in three moves, written by the author of Singapore's first AI risk management guidelines for the financial sector. For anyone trying to keep control of AI as the number of systems climbs, in a firm, a regulator, or a team of one.
This primer is the gateway to the fuller book, Some Thoughts on Scaling AI Governance.
You want to get on top of AI risk and governance, but where do you even start? Search Google or Perplexity and you get more results than anyone can reasonably read - most of it noise, much of it vendor pitches. It is easy to spend hours and come away with nothing.
This book is the answer I keep giving when people ask. Six short reading lists of papers, guidelines, and articles - governance, data management, evaluation and testing, human oversight, third-party AI risk, and explainability - each entry with a note on why it is useful and worth your time. Organized in circles of progression: start at the center and work outwards. Read the one you need; nothing here assumes you read the others.
What you get: a clear, curated path through a noisy field, so you can start on the right things instead of drowning in search results. No affiliate links, no vendor pitches - just what is worth reading in each area, from someone who wrote a national set of AI risk guidelines and has read most of the rest. Work through it and you will understand AI risk better than most people paid to talk about it.
Not exhaustive, but a good place to start.
An agent is not a chatbot with a new name. It acts - it looks up accounts, issues refunds, sends emails - and each choice opens more choices, until nobody can review every path. A simple billing-dispute agent has thousands. This primer is one picture to think with: the agent as a tree of paths, governed the way a bonsai is tended.
Cut, and wire. Cut the branches that must never happen - the permission that was never granted cannot be argued with, tricked, or talked past. Then hold the rest with 3 kinds of wire. Rigid wire: rules coded into the tools, not prayers written into the prompt. Supple wire: a model posted as judge - useful, and a second tree you now have to govern. And your own hands: evaluation and testing that reads the path instead of the answer, repeats every run, and probes through everything the agent reads.
Along the way: why 95% reliability per step becomes 60% over ten steps, why a rule in the prompt is a request while a rule in the tool is a control, why fluent wrongness passes a fluency check, and the sign-off questions that cannot be answered with adjectives - show me the trajectories; what happens if the model ignores this control; what is the success rate across 8 repeated runs?
About 40 pages, with figures for nearly every idea. Written by the author of Singapore's AI risk management guidelines and deliberately general: the ideas apply to agents anywhere, not just in finance.
This primer is the gateway to the fuller book - *AI Risk Management: Agentic AI*, the supervisory expectations, registers, evaluation practice and worked examples behind this way of thinking - planned for 4Q 2026. Build AI tools for finance you can actually trust, grounded in real data and real calculations, not confident guesses. With code you can run.
AI in Finance
Open ChatGPT, Claude, or Gemini and ask it to build you a low-volatility portfolio. You will get a confident, reasonable-sounding answer. But did it actually check the volatility? Calculate whether the allocation can hit your target? Verify the correlations? Maybe. And maybe it hallucinated the whole thing and told you with complete confidence. You cannot tell which - and if this powers your real portfolio, that is a serious problem.
This is not a bug in any one model. It is how LLMs work: they are good at language, not at being databases or calculators. Real finance questions are multi-step - fetch the data, calculate the metrics, check the correlations, optimize the allocation - and an LLM on its own cannot do them reliably. Unless you give it tools. That is what this book is about.
What you get: four patterns - tool calling, ReAct, CodeAct, and orchestration - that ground an LLM in real data and real calculations, each explained plainly and with working code you run yourself in Google Colab. A finance primer if you want the concepts underneath the metrics. An n8n bonus chapter that builds the same patterns as visual workflows, with no Python. By the end you will have built a working portfolio assistant that fetches real prices, calculates real metrics like volatility, Sharpe ratio, and value at risk, shows its reasoning at each step, and answers follow-ups about your holdings.
It gets you from "LLMs hallucinate" to "I have a working tool I can trust." It covers analysis, not execution, and stops short of production deployment - that is a bigger next step. Helpful but not required: basic Python, some APIs, some finance. Not required: ML expertise or any prior agent experience. If you can read, you have enough to start. The reason it works is not that the model is smarter, but that the architecture is right.
You get the PDF to download and keep, along with the code.
Someone will try to sell you an LLM that predicts the future. It will sound confident, and it will be wrong more often than it lets on. Forecasting is usually the AI task most oversold and least understood.
This free primer provides some mental models to understand why.
Why a language model cannot forecast on its own - text and time are different kinds of sequence. What actually forecasts: the ladder from fifty-year-old classical models that still win competitions, through machine learning and deep learning, to the foundation models trying to become the ChatGPT of time. And why one rational way to use AI here is with an agent - a reasoning loop that drives real forecasting tools and checks the results against reality.
No code, no notebooks, no math you need a whiteboard for. You also leave with a working detector for nonsense: the questions that separate a real forecasting system from a confident paragraph - was it backtested, was the test split by time, did it beat the naive baseline.
Written by someone who did a PhD building forecasting models and wrote Singapore's first AI risk management guidelines for the financial sector.
The upcoming companion, *AI Agents for Advanced Forecasting*, builds everything here in code - the tools, the agent patterns, runnable notebooks - and is targeted for 4Q 2026. This primer is the why. Free to download and keep.Someone will try to sell you an LLM that manages your money. It will sound confident. Some of it will be made up, and it will not tell you which parts. This primer is about why that happens - an LLM on its own has no data and no calculator - and about the fix, which is not a smarter model. It is the right architecture.
Five ideas, in about twenty-five pages. LLMs are buns, not meat: good at the language, not at the numbers. Most tasks don't need an agent - the complexity ladder tells you when a workflow will do. An agent is four parts - model, tools, instructions, memory - holding three kinds of tools, and only one kind should ever act without a human. Four patterns cover the work: tool calling, ReAct, CodeAct, orchestration. And the demo is not the product - the gap to production is guardrails, approval, and audit, not cleverer models.
No code, no notebooks. Written for anyone who will buy, build, or approve an AI tool that touches a portfolio - and who wants to be able to tell, when shown one, whether it is calling real tools or generating a confident paragraph.
This is the primer to the full book, *AI Agents for Investing* (listed in this catalogue), which builds all of it in runnable code: the tools, the four patterns, a working portfolio assistant, and a no-code path for people who would rather not write Python.An agent is not a chatbot with a new name. It acts - it looks up accounts, issues refunds, sends emails - and each choice opens more choices, until nobody can review every path. A simple billing-dispute agent has thousands. This primer is one picture to think with: the agent as a tree of paths, governed the way a bonsai is tended.
Cut, and wire. Cut the branches that must never happen - the permission that was never granted cannot be argued with, tricked, or talked past. Then hold the rest with 3 kinds of wire. Rigid wire: rules coded into the tools, not prayers written into the prompt. Supple wire: a model posted as judge - useful, and a second tree you now have to govern. And your own hands: evaluation and testing that reads the path instead of the answer, repeats every run, and probes through everything the agent reads.
Along the way: why 95% reliability per step becomes 60% over ten steps, why a rule in the prompt is a request while a rule in the tool is a control, why fluent wrongness passes a fluency check, and the sign-off questions that cannot be answered with adjectives - show me the trajectories; what happens if the model ignores this control; what is the success rate across 8 repeated runs?
About 40 pages, with figures for nearly every idea. Written by the author of Singapore's AI risk management guidelines and deliberately general: the ideas apply to agents anywhere, not just in finance.
This primer is the gateway to the fuller book - *AI Risk Management: Agentic AI*, the supervisory expectations, registers, evaluation practice and worked examples behind this way of thinking - planned for 4Q 2026. 
