Interesting read.
But I'd say the compliance aspect that is also placed in Layer 8, I'd put in another Layer 9: policies and processes.
AI fits better across different layers.
The OSI Model and Its Two Missing Layers
Layer 8½
heimdalsecurity.com
Two missing layers of the OSI Model can blow up your cyber defense strategy anytime. Jayal Yadal explain what they are.