FINOS Open Source in Finance Podcast

Jaksot

• 
  [OSFF Panel] Can Open Data Solve Financial Data Pain Points? 15.09.2026 36min

  In this episode of the Open Source in Finance Podcast, host Grizz Griswold introduces an expert OSFF panel moderated by Hilary Carter (Linux Foundation) featuring Jose Plehn (Bright Query / open-data.org), Nora Anwar (Overture Maps Foundation), and Jane Gavronsky (FINOS COO). The panelists explore why financial services urgently need a shared open data commons to eliminate duplicate reference data maintenance, establish a universal entity graph across companies, people, and places, and ground AI models to prevent hallucinations. 🗽 Catch Us in New York! Ready to explore open data, shared entity graphs, and collaborative open-source engineering? Join global financial technology leaders at OSFF New York on November 4–5, 2026.🎟️ Register Now: https://hubs.ly/Q04n_bZL0🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C 🕒 Timestamps:0:00 Podcast Intro with Grizz Griswold & Panel Setup1:34 Panelist Introductions: Bright Query, Overture Maps & FINOS3:45 Why Open Data Matters: Breaking Down Financial Data Silos5:00 The Vision of an Open Entity Graph: Companies, People & Places7:57 Governance & Community Scale: Cross-Referencing Master IDs11:06 Winners & Losers in the Open Data Landscape13:11 Financial Reference Data Pain Points: The "Light Switch" Analogy16:55 Crowdsourcing Entity Resolution & Identifier Mapping20:13 Overture Maps Origin Story: Meta, Microsoft, Amazon & TomTom Collaboration25:06 Geospatial Data Use Cases: From Insurance Risk to Fraud Detection29:10 Open Data for AI Grounding: Reducing LLM Hallucinations with RAG34:07 Success Metrics & How Financial Institutions Can Join 📊 The Problem: The "Light Switch" Reference Data Tax & Fragmented SilosRedundant Reference Data Maintenance: Financial institutions spend millions of dollars individually ingesting, cleaning, and enhancing identical vendor reference datasets just to keep basic systems operational. Entity Resolution & Identifier Disconnects: Mismatched entity IDs (LEIs, CUSIPs, ISINs, addresses) across disparate corporate databases create massive operational friction, slowing down KYC/KYB compliance, onboarding, and risk management. 🏗️ The Solution: A Shared Open Data Commons & Global Entity GraphGlobal Reference & Entity Graph: Bright Query and open-data.org are establishing an open global directory covering over 400M companies, 1B people, and 200+ countries mapped with unique, permanent entity IDs. Overture Maps Collaboration Model: Following the proven Linux Foundation model of Overture Maps (founded by Meta, Microsoft, Amazon, and TomTom), competitors mutualize base data maintenance costs so teams can focus on proprietary innovation layers. Grounding AI & RAG Pipelines: Joining LLM knowledge graphs to deterministic open entity graphs drastically reduces hallucinations during AI training and inference, providing the verifiable data lineage required in regulated finance. ⚙️ Why This Matters for Financial Engineering Mutualizing Non-Competitive Costs: Crowdsourcing entity matching, validation rules, and cross-referencing tables removes the "thankless" overhead of reference data cleanup across buy-side and sell-side firms. Spatial & Corporate Context for AI Agents: Integrating open entity graphs with spatial systems (GERS IDs) gives AI agents accurate organizational and geographic awareness to automate risk assessment and site selection. 🌐 More about FINOS: https://www.finos.org/ 📧 Join our newsletter: https://www.finos.org/sign-up 🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts LinkedIn: https://www.linkedin.com/company/finosfoundation
• 
  [FINOS Zenith] Is Your Enterprise Ready for Spatial Computing? Christopher Fonte Breaks It Down 11.09.2026 45min

  Learn how CustomerXR CTO Chris Fonte uses Spatial Computing, VisionOS & AI to revolutionize financial workflows & enterprise training.Christopher Fonte joins Peter Smulovics to explore how Extended Reality (XR) and Spatial Computing are transitioning from consumer gaming into enterprise financial applications. Discover how immersive training models slash operational costs and knowledge retention gaps, while pass-through spatial hardware expands desktop multi-screen real estate. Learn how combining spatial interfaces (VisionOS, Horizon OS) with Generative AI enables 3D market visualizations and collaborative wealth management advisory.Episode Chapters 00:00 - Welcome & Guest Intro: Chris Fonte’s 10-Year XR Journey02:08 - Why Enterprise Needs XR: Immersive Procedural Training & Retention04:05 - Immersive Security Training: Gamifying Artifact Discovery in VR06:01 - VR to Mixed Reality Evolution: Passthrough vs See-Through Lenses08:08 - Meta Connect Predictions & Next-Gen Spatial Hardware Form Factors09:20 - Pass-Through Hardware Debates: Compute Pucks vs Integrated Lenses12:12 - Multi-Screen Real Estate: Spatial Workspaces for First-Line Workers16:21 - Next-Gen Spatial UX: Eye Tracking, Hand Tracking & Smart Rings18:28 - HoloLens Architectural Lessons & Apple VisionOS Spatial Personas22:36 - Real-World Spatial Apps: CAD Ingestion & Lighting Inference Engine25:42 - Spatial Computing in Finance: 3D Market Data & Wealth Advisory29:25 - Generational Technology Adoption: Gen Z Intuitive Spatial Interfaces33:09 - Audience Q&A: Carrier Hardware Financing, Mass Adoption & PricingLinksRegister for OSFF New York (20% OFF Code 26YTOSFFNY20C): https://hubs.ly/Q04n_bZL0
• 
  Building a World-Class OSPO: Lessons from the Financial Industry 10.09.2026 36min

  On this episode of the Open Source in Finance Podcast, host Rob Moffat (Chief Architect at FINOS) is joined by an executive panel featuring Mimi Flynn (Vice President & Open Source Developer Advocate at Morgan Stanley), Elspeth Minty (Managing Director at RBC Capital Markets), and Mark Paulsen (Head of Open Source Program Office at TD Bank). Together, they explore the operational realities of open-source adoption in regulated banking. The panel breaks down the hidden costs and security risks of internal code forking, strategies for measuring OSPO Return on Investment (ROI), automated contribution controls via GitProxy, and how to prepare engineering teams for the convergence of open source, rising global regulations, and generative AI. 🗽 Catch Us in New York! Ready to scale your Open Source Program Office (OSPO), mitigate supply chain risks, and streamline enterprise contribution workflows? Join us at OSFF New York on November 4–5, 2026.🎟️ Register Now: https://hubs.ly/Q04n_bZL0🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C📊 The Problem: The Hidden Trap of Internal Code Forks & Governance DragRegulated financial institutions face exponential increases in regulatory oversight, open-source dependency trees, and CVE vulnerabilities. When engineering teams bypass contribution approvals by creating private internal code forks, they incur severe technical debt, untracked security risks (such as missing upstream CVE patches), and long-term maintenance overhead. 🏗️ The Solution: Enterprise OSPOs, GitProxy & Standardized Maturity ModelsThe panel details how financial institutions build mature OSPOs using FINOS Open Source Readiness (OSR) frameworks: Developer Training & Maturity Roadmaps: Mandating foundational developer training (such as Linux Foundation’s FSOSD) to educate engineers on licensing, IP, and risk management. Automated Guardrails (GitProxy): Implementing automated commit controls at push time to screen outgoing code for secrets, proprietary logic, and licensing compliance without disrupting developer velocity. Standardized Maturity Benchmarks: Utilizing the FINOS OSR Maturity Model as a competitive roadmap to transition from passive software consumption to active open-source sponsorship and code contribution. ⚙️ Why This Matters for Financial EngineeringMeasuring True ROI: Demonstrating OSPO value through hard metrics (Evident AI indicators) alongside soft metrics like recruiting appeal, developer career progression, and talent retention. Collaborative Industry Security: Mutualizing open-source governance tools allows banks to solve shared compliance challenges together rather than re-inventing the wheel in isolation. 🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation
• 
  Open Data vs. Open Source: Scaling Spatial Metadata & AI Workflows | Amy Rose 02.09.2026 45min

  Amy Rose (CTO of the Overture Maps Foundation) joins the podcast to explore the structural differences between open-source software and open data. Amy breaks down how Overture—founded by AWS, Meta, Microsoft, and TomTom—builds interoperable global map layers, resolves complex entity definitions across disparate datasets, and why modern agentic AI workflows require record-level metadata rather than dataset-level summaries. 🗽 Catch Us in New York! Ready to explore open data, high-performance computing, and enterprise AI architecture? Join us at OSFF New York on November 4–5, 2026.🎟️ Register Now: https://hubs.ly/Q04n_bZL0🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C 🕒 Timestamps:4:36 Interview Start: Amy Rose & The Overture Maps Foundation6:43 From Landscape Architecture to GIS: Amy's Career Journey11:05 Real-World Geo Applications: Transportation, Disaster Recovery & Oak Ridge Lab14:02 What is Overture Maps? Building Interoperable Global Map Data15:38 Open Source Software vs. Open Source Data17:13 Defining High-Quality Data: Fitness for Purpose & Use Cases18:39 Case Study: Built Environment Mapping & Entity Resolution24:05 Why Agentic AI Workflows Require Record-Level Metadata29:45 The Monthly Release Engine: GERS IDs, Bridge Files & Change Logs34:08 Solving Spatial Interoperability: Geometric Joins & Entity Matching42:05 The Future: Native Location Integration in Enterprise AI 📊 The Problem: The Open Data Lineage & Interoperability ChallengeUnlike open-source software—where source code acts as a single point of truth—open data requires merging disparate, opinionated input sources with varying licenses, coordinate systems, and quality levels. Traditional dataset-level metadata fails when applied to autonomous systems or agentic AI workflows, which parse and combine individual records rather than entire tables. Furthermore, performing spatial joins and resolving duplicate entities across different municipal or corporate datasets creates massive computational and manual overhead. 🏗️ The Solution: Overture's GERS Infrastructure & Record-Level MetadataAmy Rose outlines how Overture Maps standardizes global spatial data: Global Entity Reference System (GERS): Assigning persistent, canonical GERS IDs to physical entities (buildings, places, roads) to maintain lineage and bridge external datasets (e.g., Esri, Meta, Microsoft, Google). Record-Level Provenance: Embedding metadata (source, license, transformation steps, coordinate reference frames) directly into individual records rather than appending summary text at the dataset level. Monthly Aggregated Releases: Distributing prepackaged monthly releases alongside bridge files and change logs, allowing downstream consumers to verify fitness for purpose in navigation, logistics, or risk modeling. ⚙️ Why This Matters for Financial & Technical ArchitectureVerifiable Risk & Asset Modeling: Provides clean, open spatial foundations for underwriting flood risk, supply chain logistics, ESG impact, and real estate valuation without expensive manual data wrangling. Trusted AI Agent Evidence: Equips AI models and automated agents with explicit record-level evidence, making spatial queries verifiable and reproducible. 🌐 More about FINOS: https://www.finos.org/ 📧 Join our newsletter: https://www.finos.org/sign-up 🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts LinkedIn: https://www.linkedin.com/company/finosfoundation#FINOS #OSFFNewYork #OvertureMaps #OpenData #GIS #Metadata #AgenticAI #DataEngineering #SpatialData
• 
  Oxymoron or Match Made in Heaven? Innovation Under Regulation | Dr. Aditya Kashyap 28.08.2026 46min

  Is operating under strict financial regulation an innovation killer or its greatest catalyst? Host Peter Smulovics (Distinguished Engineer at Morgan Stanley and FINOS Zenith Lead) sits down with Dr. Aditya Vikram Kashyap (FINOS Ambassador, IEEE Senior Member, and Forbes Technology Council member) for an insightful episode of the Open Source in Finance Podcast from the FINOS Zenith Special Interest Group. Innovation and regulation are often portrayed as opposing forces: innovation wants speed and freedom, while regulation introduces constraints and controls. But in financial services, and increasingly with AI, the reality is much more complicated. Good governance can actually make innovation possible at scale, while bad governance can become its own source of risk.Together Dr. Kashyap and Peter challenge the narrative that speed and control are opposing forces. Dr. Kashyap breaks down how regulatory frameworks like model risk management (SR 11-7) and NIST post-quantum cryptography (PQC) standards force architectural clarity, why the "cost of delay" is the most under-managed enterprise risk, and how to structure continuous governance for agentic AI fleets. 🗽 Catch Host Peter Smulovics Live in New York! Ready to navigate enterprise AI governance, post-quantum migration, and open-source standards? Join Peter Smulovics and global finance leaders at OSFF New York on November 4–5, 2026.🎟️ Register Now: https://hubs.ly/Q04n_bZL0🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C📊 The Problem: The "Cost of Delay" & End-Gate Approval FlawsMost regulated enterprises fail to quantify the risk of standing still. While risk matrices track the downside of deploying new technology, they completely ignore the cost of delay—leading organizations into a false sense of security while their innovation cycles stall. Furthermore, traditional Software Development Life Cycle (SDLC) models place risk, legal, and compliance teams at the end of the development pipeline as an "approval gate". By the time a finished prototype reaches reviewers, every decision (to approve, reject, or send back for rework) is catastrophically expensive. 🏗️ The Solution: Embedded Governance & Machine IdentitiesDr. Aditya Kashyap outlines how financial institutions can transform governance into an operational engine: Embedding Risk from Day One: Shifting compliance, legal, and cybersecurity teams from external gatekeepers to active core members of the innovation team during initial design. "Accountability Follows Authority": Ensuring human oversight remains legally bound to system outputs while assigning distinct machine identities and permissions to autonomous AI agents interacting across multi-model ecosystems. Goodhart's Law & Production Metrics: Replacing vanity metrics (patent counts, hackathons) with actionable indicators: pilot-to-production conversion rates, cycle-time splits, decommissioning velocity, and time-to-fault detection. ⚙️ Why This Matters for Financial EngineeringSR 11-7 & PQC Preparation: Early adoption of model risk management and NIST post-quantum cryptography standards builds the exact architectural inventory required to safely scale generative AI and quantum-resilient infrastructure. Standards as Lasting Power: Establishing open, transparent industry standards through foundations like FINOS prevents regulatory capture and creates common baselines that compound value across global financial markets for decades. 🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation
• 
  Crossing the Rubicon: How Advanced Prompting Turns Business Leaders into Developer Wizards 25.08.2026 41min

  What happens when a business-focused professional discovers that AI can translate vision into working software?In this episode, we follow the journey of a business-aligned leader who never saw herself as a developer. Armed with curiosity, domain expertise, and increasingly sophisticated prompting techniques, she crosses the Rubicon from consumer of technology to creator of technology.We explore how modern AI tools are redefining who gets to build software, contribute to projects, experiment with emerging technologies, modernize financial systems, and solve real-world business problems. The conversation examines what changes when technical barriers fall, and domain expertise becomes a superpower.This isn't a story about replacing developers. It's a story about expanding the circle of creators. Host Peter Smulovics (Distinguished Engineer at Morgan Stanley and FINOS Zenith Lead) sits down with Fintech Product Manager Sarah Hilton-Burroughs for a special edition of the Open Source in Finance Podcast. Together, they explore how domain experts are leveraging AI agents, Spec-Driven Development (SDD), and custom component prompts to build full-stack RegTech platforms—without abandoning architectural guardrails or regulatory auditability. 📊 The Problem: The Context-Window "Credit Suck" & AI FabricationWhen non-technical domain leaders attempt to build complex software using basic chat prompts, they quickly encounter two major barriers: context decay and AI fabrication. Re-teaching an entire multi-tenant codebase to a general AI model on every iteration rapidly consumes token credits without maintaining state. Furthermore, unguided models fabricate plausible-sounding code and logic rather than adhering strictly to empirical laws or financial regulations, creating massive compliance risks if deployed blindly. 🏗️ The Solution: Component-Driven SDD & Specialist Agent FleetsSarah Hilton-Burroughs demonstrates how business leaders can structure their domain knowledge into a scalable software pipeline: Spec-Driven Prompt Libraries: Replacing endless conversational chats with structured markdown specification libraries and component-level rule sets. Specialized Agent Delegation: Customizing dedicated AI agents for specific architectural layers (e.g., a schema agent that exclusively manages database mutations). Domain Knowledge Moats: Recognizing that code writing has been democratized, shifting the builder's focus to requirements precision, data science fundamentals, and cross-jurisdictional compliance. ⚙️ Why This Matters for Financial EngineeringEmbedded Regulatory Auditing: Integrating NIST AI RMF, ISO, and GDPR frameworks directly into the SDLC to generate immutable data provenance, lineage, and mathematical state logs that pass strict regulatory scrutiny. Expanding the Creator Base: Empowering product managers and domain experts to rapidly prototype and validate solutions alongside senior system architects, drastically accelerating time-to-market for financial tools. 🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation
• 
  What's really happening in Quantum? A FINOS Emerging Tech SIG Update - Peter Smulovics 07.08.2026 13min

  In this edition of our special bi-weekly FINOS Zenith / Emerging Technologies SIG highlight, Peter Smulovics (Distinguished Engineer at Morgan Stanley and FINOS Zenith Lead) delivers a comprehensive breakdown of the major shifts reshaping deep tech. Peter explores why artificial intelligence has transitioned from a standalone category into the primary horizontal layer powering quantum fault tolerance, spatial interfaces, physical robotics, and fusion energy. 🗽 Catch Peter Smulovics Live in New York! Ready to explore the bleeding edge of enterprise technology and open-source financial engineering? Join Peter and global technology leaders at OSFF New York on November 4–5, 2026.🎟️ Register Now: https://hubs.ly/Q04n_bZL0🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C 🕒 Timestamps:0:00 Introduction: AI as the Universal Horizontal Enabling Layer1:15 Quantum Computing Shift: Moving from Physical Qubits to Fault-Tolerant Logical Units1:55 Commercial Quantum Moats: IBM’s $10B Commitment & Microsoft’s Majorana 2 Lifetimes2:45 Accelerating Post-Quantum Cryptography Migration Targets to 2028–20293:10 Quantinuum’s IPO, Non-Abelian Anyons & Protected Universal Gates4:10 QuEra’s Fault-Tolerance Roadmap & D-Wave’s Gate Model Transition5:05 Spatial Computing Evolution: Snap Ambria Specs, Qualcomm Reality Elite & TART6:40 Enterprise Spatial Upgrades: Apple visionOS 27 & Meta Luxottica Smart Glasses8:00 Orbital Infrastructure: Space Tech Commercialization & Artemis Timelines8:50 Physical AI & Industrial Robotics: NVIDIA Halos, BMW Figure 03 Deployment & Jetson Thor10:50 Photonic AI Accelerators: Running Generative Models on Optical Chips11:15 Energy Infrastructure: US DOE Fusion Roadmap & Microreactor Criticality Milestones12:30 Brain-Computer Interfaces: Paradromics BCI Feasibility & Medtech Innovations 📊 The Paradigm Shift: AI as the Horizontal Enabling LayerThe definition of "emerging technology" has fundamentally inverted. Artificial intelligence is no longer viewed as a isolated software vertical; rather, it has become the underlying operational layer enabling rapid iteration across quantum error correction, spatial computing platforms, physical robotics, and orbital manufacturing. 🏗️ Key Technological Breakthroughs Analyzed:Logical Quantum Computing: The industry has moved away from physical qubit vanity metrics toward fault-tolerant architectures, topological anyon gate protection, and accelerating post-quantum cryptography (PQC) deadlines to 2028–2029. Ambient Spatial Computing: Heavy VR headsets are giving way to AI-native smart glasses, cross-compiler spatial platforms, and advanced lighting/splatting spatial rendering engines. Physical AI & Autonomous Hardware: Full-stack safety frameworks (such as NVIDIA Halos) and Jetson architectures are driving humanoids (like Figure 03) directly into automated automotive manufacturing plants. ⚙️ Why This Matters for Financial EngineeringCryptographic Agility: Hyper-scalers accelerating PQC targets to 2028 require financial systems to immediately audit and upgrade legacy encryption standards. Spatial & Physical Operations: Integrating ambient spatial interfaces and AI-native hardware expands the operational boundary for risk management, quantitative trading setups, and physical asset tracking. 🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation#finos #OSFFNewYork #MorganStanley #ZenithProject #EmergingTech #QuantumComputing #PostQuantumCryptography #SpatialComputing #PhysicalAI #Robotics #DeepTech
• 
  Why You See Double: Orchestrating Large Scale Code Upgrades With AI | Sourcegraph 15.07.2026 31min

  Erik Seliger (Lead Product Engineer at Sourcegraph) and Robert Lin (Lead Platform Engineer at Sourcegraph) join FINOS Zenith Project Lead Peter Smulovics to break down the mechanics of Agentic Batch Changes. They reveal how implementing a multi-layered agent architecture solves the high economic cost of pure "vibe coding" by combining deterministic scripting pipelines with localized, token-efficient AI coding models.🗽 Catch Us in New York! Ready to scale your repository automation while defending corporate token budgets? Join the enterprise DevOps community at OSFF New York on November 4–5, 2026. 🎟️ Register Now: https://hubs.ly/Q04n_bZL0 🔥 25% OFF DISCOUNT CODE: FINOSREDOSFF25📊 The Problem: The Economic Nightmare of Unbounded "Vibe Coding" When global financial institutions attempt large-scale codebase modifications—such as upgrading framework dependencies across 25,000 active code services—relying on a single coding model introduces severe fragmentation. Traditional coding assistants immediately blow through millions of context-window tokens trying to execute code changes repo-by-repo. Furthermore, when these blind refactoring attempts trigger continuous integration (CI) failures, the model encounters a non-deterministic loop, spinning out out-of-bounds calculations, custom exceptions, and configuration drift that burns cash without hitting production.🏗️ The Solution: The Multi-Layered Agentic Batch Architecture Sourcegraph delivers a structural framework that decouples project coordination from individual script executions:The Outer Loop Project Manager: Running an orchestration agent governed by immutable system prompts to research, manage repository staging, and continuously audit diff outputs.Deterministic Baseline Integration: Using the planning agent to write efficient, low-cost scripts for programmatic tasks (like straightforward find-and-replace or package manager updates) instead of burning tokens on every file.Inner Loop Containment: Deploying localized coding engines (such as Cody or Cloud Code) strictly inside isolated base Docker images to handle ambiguous, complex code edge cases on demand.⚙️ Why This Matters for Financial EngineeringAutomated CI Hook Blocks: Injecting localized AI hooks directly into failing build logs, empowering inner loop agents to dynamically correct pipeline issues in real time based on compilation feedback.Deep MCP Integration: Setting up customized Model Context Protocol (MCP) layers to bridge context lines, letting inner agents instantly ask the master outer orchestrator for repository-scale search data when hitting technical roadblocks.🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation
• 
  FINOS FDC3 & Common Cloud Controls - Rob Moffat, FINOS 18.06.2026 20min

  Rob Moffat (Chief Architect at FINOS) maps out the intersection of workspace interoperability, open-source AI deployment, and multi-cloud security frameworks. He compares MCP (Model Context Protocol) with FDC3, tracks the rollout of the Common Cloud Controls (CCC) live validator tool, and reveals how open-source standards prevent multi-vendor lock-in at the desktop and infrastructure layers.🇬🇧 Join us in London! Dive into FDC3 Con and CCC working sessions on June 23-24, ahead of OSFF London on June 25, 2026: https://hubs.ly/Q041YV9Z0 (Use Code: 26YTOSFFLN20C)🕒 Timestamps:0:00 AI Integration Realities: MCP vs. FDC3 Context Paradigms0:41 Podcast Intro, Key Dates, and Global Showcase Streaming1:25 Shout-Out to Our Key Sponsors and Foundation Supporters2:50 The Evolution of FDC3: Moving Past the 2.0 Era into Context Sharing4:15 Why Request-Response Frameworks Fail at Complex Desktop Interop5:40 Empowering AI Agents with the FDC3 Semantic Context Matrix7:22 Introducing FDC3 Con: What to Expect at the Dedicated London Workshop8:50 Common Cloud Controls (CCC): Standardizing the Infrastructure Defense Layer10:35 The Hyperscaler Drift: Translating Security Requirements Natively12:15 Unveiling the CCC Live Validator: Testing Configurations via Code14:40 Breaking Down Multi-Vendor Lock-In from the Desktop to the Cloud16:15 Getting Involved: How to Contribute to Open Banking Workspaces18:10 Logistics and Free Pass Perks: Food, Networking, and Community Benefits📊 The Problem: Fragmented API Protocols and Multi-Cloud Configuration DriftFinancial technology stacks are heavily fractured at both ends of the architecture. On the desktop, the emergence of Model Context Protocol (MCP) handles basic request-response data queries but misses the rich, stateful orchestration layer needed to tie legacy banking applications together. Meanwhile, at the infrastructure layer, cloud security teams are forced to manually translate uniform security constraints into completely distinct vendor syntaxes, creating systemic compliance drift and massive platform team overhead.🏗️ The Solution: Unified Context Surfaces and Open Compliance ValidatorsRob Moffat details how open-source abstractions are resolving fragmentation at every level of the financial enterprise:FDC3 as the Agent Interface: Providing an operational workspace framework that allows AI agents to read, interact with, and seamlessly drive multi-application workflows natively without massive API custom coding.Common Cloud Controls Taxonomy: Building a vendor-agnostic catalog that translates core compliance mandates into predictable, repeatable infrastructure configurations.The CCC Live Validator: Rolling out code-driven validation tools that automatically check native cloud environments against the master CCC schema to detect configuration drift instantly.⚙️ Why This Matters for Financial EngineeringSecuring the Desktop Supply Chain: Ensuring that as banks add AI assistance to trade execution or client onboarding screens, those tools use pre-vetted semantic security context lines.Neutral Governance Pipelines: Bypassing proprietary SaaS cloud-security products in favor of open, community-maintained validation infrastructure that scales natively across AWS, Azure, and Google Cloud.🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation#FINOS #OSFFLondon #FDC3 #CommonCloudControls #MCP #CloudSecurity #Interoperability #FinTechArchitecture #MultiCloud
• 
  Governing the Pipeline: Fusing CALM with Open SDLC | Karl Moll, FINOS 17.06.2026 32min

  Karl Moll (Technical Project Advocate at FINOS) sits down with Grizz Griswold to discuss how CALM (Common Architecture Language Model) is acting as the structural glue connecting compliance projects across the banking ecosystem. He breaks down the momentum behind the Open SDLC Controls Framework and how these tools together build a secure, governable pipeline for unpredictable AI deployments.🇬🇧 Join us in London! Attend our free technical pre-forum workshops on June 23-24, right before OSFF London on June 25, 2026: https://hubs.ly/Q041YV9Z0 (Use Code: 26YTOSFFLN20C)🕒 Timestamps:0:00 CALM as the Glue for Governable Pipelines0:35 Podcast Intro, Forum Dates, and Venue Logistics0:55 Thank You to Our Sponsors: VMware by Broadcom & Global Partners2:20 Who is Karl Moll? The Role of a FINOS Project Advocate3:50 The June 23-24 Workshops: Free Technical Hands-On Sessions4:40 Deep Dive into CALM: Machine-Readable Enterprise Architecture6:30 Why Standard Architecture Specs Speed Up Bank Delivery8:55 Introducing Open SDLC: Codifying Software Development Controls10:45 The Duplication Pain: Why Banks Waste Millions on Custom Compliance12:55 Connecting CALM and Open SDLC into a Single Delivery Vector14:10 Shifting Left on Governance: Validating Architecture via CI/CD Pipelines15:30 Managing Opaque and Mission-Critical Financial AI Deployments17:45 Project Maturity Lifecycles: Launching vs. Firm-Wide Implementation19:50 Wrap-Up: How to Join the Free Open Workshops in London📊 The Problem: The High Cost of Isolated Governance SilosGlobal banks burn an astronomical amount of capital independently drafting manual, text-heavy architectural guidelines and software compliance controls. Because these definitions are trapped in static text files or slide decks, there is a total disconnect between enterprise architects, security teams, and developers. When dealing with highly complex, non-deterministic AI workloads, this manual verification bottleneck stops innovative features from making it to production safely.🏗️ The Solution: The Interconnected, Machine-Readable Delivery PipelineKarl Moll explains how FINOS is uniting distinct open-source projects to create an automated pipeline that validates itself:CALM as the Common Language: Moving architecture out of static diagrams and into a structured, machine-readable syntax that software pipelines can evaluate instantly.Open SDLC as the Rulebook: Standardizing the compliance taxonomy across institutions to prevent banks from reinventing software risk controls from scratch.Shifting Architecture Left: Merging CALM blueprints directly into Open SDLC validation engines so architecture patterns are automatically verified and audited during the standard git commit loop.⚙️ Why This Matters for Financial EngineeringCritical Momentum Windows: Catching these projects at an ideal evolutionary step—where CALM is actively being deployed to monitor core systems and Open SDLC is launching its V1 specification.Free Foundational Training: Bypassing vendor-locked educational programs to get engineers hands-on with neutral, industry-wide compliance infrastructure before the main conference.🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation#FINOS #OSFFLondon #CALM #OpenSDLC #ArchitectureAsCode #DevSecOps #ComplianceAutomation #FinancialEngineering #EnterpriseArchitecture
• 
  Bounding AI Autonomy: OSFF London 2026 Preview 10.06.2026 24min

  Grizz Griswold (Executive Producer of Global Programs & Content at FINOS) kicks off Season 6 of the Open Source in Finance Podcast with an absolute masterclass preview of OSFF London 2026. Discover how the global financial industry is shifting its focus from basic LLM experimentation to production-grade agentic safety, deterministic workflows, and cross-hyperscaler cloud controls.🎟️ FINOS Members: Claim your FREE pass before the benefit window closes! Email: [email protected] 🔥 Non-Members: Save 20% off your registration pass using code OSFFLondonLF20.🕒 Timestamps:0:00 Season Six Kickoff & Global Event Roadmap0:50 Member Ticket PSA: Claiming Your Corporate Benefits2:15 Thank You to Our Sponsors: VMware by Broadcom & Core Contributors3:50 The Week at a Glance: Workshops, Leadership Summits, and Wembley Stadium4:45 June 23 Workshops: Tokenized Assets, Architecture-as-Code (CALM), and FDC3 Con6:30 June 24 Workshops: AI Governance (AIGF), Five Spot HPC, and Common Cloud Controls (CCC)8:22 Closed Session: Open Source AI in Finance Leadership Summit11:30 Keynote Reveal 1: Greg Kroah-Hartman (Linux Foundation Fellow)13:02 Keynote Reveal 2: Craig Kitchen (Fidelity Investments) & Greig Callen (NatWest)14:10 Keynote Reveal 3: Michael Hsu (Former US acting Comptroller of the Currency)15:15 AI Track Highlights: Old-School Vulnerabilities vs. Bounded Autonomy18:38 Fluxnova & Platform Automation: 35 Terabyte Database Migrations19:55 Cultivating Culture: Patent Silos (TD Bank) & GitProxy (Citi)21:35 Interoperability, CDM, and Desktop Connective Tissue22:45 Final Discount Code, Show Notes, and Podcast Wrap-Up📊 The Problem: The Chaos of "Autonomy Creep" and PDF Regulation As generative AI hits production, financial institutions face an operational nightmare called "autonomy creep," where AI agents independently spawn and orchestrate other agents in highly regulated environments. Compounding this risk is the legacy bottleneck of traditional compliance: dense, ambiguous PDF regulation manuals and slow, manual architectural review boards where innovative engineering designs go to die.🏗️ The Solution: Executable Standards & Bounded Autonomy The OSFF London 2026 lineup showcases how global banking giants are building code-driven leashes to securely lock down probabilistic tech:* Deterministic Guardrails (Fluxnova): Leveraging deterministic workflow engines to act as a complete visibility and audit traceability loop around fluid LLMs. * Executable Regulations (CDM & CCC): Transitioning regulators away from text manuals toward shared, machine-readable software definitions that automate compliance validation. * Automated Architecture Frameworks (CALM): Embedding security policies straight into code so compliance checks happen instantly within developer pipelines. ⚙️ Why This Matters for Financial Engineering* Eliminating Legal Friction: Architecture like Citi's GitProxy enables enterprise developers to seamlessly contribute back to open communities without triggering manual legal silos. * Sovereign Cloud Orchestration: Utilizing the Common Cloud Controls (CCC) live validator tools to map granular security controls across multiple hyperscalers natively, preventing vendor lock-in. The takeaway: If you are building, governing, or regulating financial technology in the UK or Europe, this isn't an optional event—this is where actual production standards are being forged. Join us in London from June 23rd to 25th!🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation#FINOS #OSFFLondon #OpenSource #FinTech #AIGovernance #Fluxnova #CommonCloudControls #GitProxy #HighPerformanceComputing #BankingInnovation
• 
  Open Source AI in Finance | What's Happening in Toronto 23.02.2026 18min

  OSFF Toronto 2026 Preview: FINOS Ecosystem, AI, HPC, Fluxnova, CALM, CDM & Open Data CommonsIn this episode of the Open Source in Finance Podcast, host Grizz Griswold delivers an essential preview of the upcoming inaugural OSFF Toronto. Grizz breaks down why Toronto's unique position as a top-tier global financial hub—home to Canada's "Big Five" banks and a world-class AI research community—makes it the perfect environment for the next evolution of open-source collaboration. The episode explores the shift from Canadian institutions being open-source consumers to becoming active leaders in projects like FDC3 and Common Cloud Controls, providing a roadmap for what to expect when the forum debuts in the "6ix."🇨🇦 Join us in Toronto!Catch the latest on open source innovation in the Canadian financial hub on April 14, 2026.🎟️ Register Now: https://events.linuxfoundation.org/open-source-finance-forum-toronto/ (seating is very limited)🌐 More about FINOS: https://www.finos.org/LinkedIn: https://www.linkedin.com/company/finosfoundation📈 Why Toronto? Why Now?The podcast highlights Toronto as a powerhouse in the global financial landscape, boasting a unique concentration of major banks, fintech innovators, and world-class academic institutions.The "Big Five" Hub: With Canada's major banks headquartered in Toronto, the city is a natural focal point for standardizing open source practices in a highly regulated environment.Academic Excellence: The proximity to the University of Toronto and the Vector Institute makes it a prime location for the intersection of Open Source and AI.Community Growth: The FINOS community in Canada has reached a critical mass, necessitating a dedicated forum to address region-specific regulatory and technical challenges.🏗️ Key Themes for OSFF TorontoDov and Peter outline the strategic pillars that will define the Toronto forum:AI & Data Sovereignty: How Canadian institutions are leveraging open source AI while navigating strict data residency and privacy requirements.OSPO Maturity: A look at how the "Open Source Program Office" is evolving within Canadian banks to move from simple consumption to active contribution.Regulatory Interop: Aligning open standards with Canadian regulatory frameworks to reduce the "compliance tax" on new technology.⚙️ What to Expect at the EventLeadership Tracks: Deep dives for CTOs and legal teams on the business value of open source.Technical Workshops: Hands-on sessions for engineers building with FDC3, CDM, and Common Cloud Controls.Unrivaled Networking: Connecting the Canadian "Big Five" with global technology partners to solve shared industry challenges.The takeaway:OSFF Toronto is more than just a conference; it’s a milestone for the Canadian financial ecosystem. By bringing together the country’s top banks and tech leaders, FINOS is fostering a culture of "collaborative competition" that will define the future of finance in North America. See you in Toronto on May 14!#FINOS #OSFFToronto #OpenSourceInFinance #FinTech #CanadaTech #BankingInnovation #OpenSource #SoftwareSupplyChain #AI
• 
  Scaling Open Source Readiness in Banking: Strategy & OSPO Best Practices | FINOS New York 04.02.2026 29min

  🔑 Scaling Open Source Readiness in Financial Institutions | OSFF New York🚀 Explore insights from #OSFFNYC – the premier event for open source in financial services.🌐 More about FINOS: https://www.finos.org/ LinkedIn: FINOS Foundation🚀 Explore insights from #OSFFNewYork by FINOS – the leading open source in finance conference.📚 OSR Body of Knowledge: https://osr.finos.org/ 🌐 More about FINOS: https://www.finos.org/ 📧 Join our newsletter: https://www.finos.org/sign-up 📥 Download the State of Open Source in Financial Services report: https://www.finos.org/state-of-open-source-in-financial-services 🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts 🗣️ Attend the next Open Source in Finance Forum: https://hubs.ly/Q03z9D9D0 LinkedIn: https://www.linkedin.com/company/finosfoundationIn this high-level panel, Peter Smulovics (Morgan Stanley), Brittany Istenes (Fannie Mae), and Elspeth Minty (RBC Capital Markets), moderated by Rob Moffat (FINOS), share the "battle-tested" blueprints for taking open source from a developer-led hobby to an enterprise-grade strategic asset.🏛️ The Infrastructure of Readiness"Open Source Readiness" (OSR) is the foundational ability of a firm to consume and contribute to open source while managing regulatory, legal, and security risks. The panelists outline the evolution of a firm's maturity:The OSPO as a Catalyst: How an Open Source Program Office acts as the "connective tissue" between Legal, Risk, Cyber, and Engineering.Maturity Modeling: Moving from passive Usage (SCA scanning) to active Contribution and eventually Strategic Leadership in the ecosystem.The "Security Sandwich": Balancing the speed of open source adoption with the rigorous supply chain security standards required by regulators.⚙️ Scaling Contribution: The Morgan Stanley & RBC PlaybooksThe leaders discuss how they’ve automated the "toil" out of open source contribution to empower thousands of developers:Frictionless Approval: Using tools like GitProxy and automated CLA (Contributor License Agreement) management to shorten the distance from "Idea" to "Pull Request."InnerSource as a Stepping Stone: Brittany Istenes explains how InnerSource (applying open-source patterns internally) builds the "muscle memory" needed for external contribution in a safe environment.Policy-as-Code: Leveraging frameworks like CALM (Common Architectural Language Model) to embed compliance and architectural standards directly into the development lifecycle.🛡️ Navigating the Regulatory LandscapeIn 2026, regulatory scrutiny of open source has intensified. The panel addresses how they meet these evolving standards:The OSR Body of Knowledge (BoK): Utilizing the FINOS-curated BoK to standardize "what good looks like" for auditors.Cyber Resilience Act (CRA) & Liability: Preparing for new global laws that hold software producers—including financial institutions—accountable for the security of their released code.SBOMs & Transparency: Transitioning from "knowing what we use" to "proving how we secure it" through high-fidelity Software Bills of Materials (SBOMs).The takeaway: Scaling open source readiness is no longer a technical choice; it is a business imperative for resilience and talent. By operationalizing OSPOs and contributing back to common standards, financial institutions can reduce redundant development costs, attract top-tier talent, and proactively satisfy the most demanding global regulators.#FINOS #OSFF #OpenSourceReadiness #OSPO #InnerSource #MorganStanley #RBC #FannieMae #FinTech #RegTech #SBOM #cyberresilience
• 
  Cloud & AI in Banking: Navigating Residency, Risks, and Automation | Microsoft & Red Hat 09.01.2026 32min

  🔑 Cloud, AI, and Automation: Navigating the New Regulatory Frontier | Open Source in Finance Podcast🚀 Explore insights from the #FINOS community – the center of open source innovation in financial services.🌐 More about FINOS: https://www.finos.org/ 🤖 Explore the FINOS AI Governance Framework: https://air-governance-framework.finos.org/ ☁️ Learn about Common Cloud Controls (CCC): https://ccc.finos.org/ 📧 Join our newsletter: https://www.finos.org/sign-up 📥 Download the State of Open Source in Financial Services report: https://www.finos.org/state-of-open-source-in-financial-services 🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts 🗣️ Attend the next Open Source in Finance Forum: https://hubs.ly/Q03z9D9D0 LinkedIn: https://www.linkedin.com/company/finosfoundationIn this episode, Grizz Griswold (FINOS) sits down with Allison Nachtigal (VP, Azure Chief Product Officer, Microsoft) and Aric Rosenbaum (Chief Technologist, Red Hat) to discuss the complexities of deploying cloud and AI in the most highly regulated industry in the world.🏛️ Why Cloud is Different for BanksThe panelists establish that for financial services, the cloud isn't just a technology shift—it's a massive compliance and "headline risk" challenge.Shared Responsibility: Moving to the cloud requires banks to demonstrate compliance for third-party infrastructure they do not directly control.Sovereignty & Residency: Meeting strict data residency requirements (e.g., keeping data within Swiss or EU borders) remains a primary enabler—and hurdle—for global Azure and Red Hat deployments.The "Toil" of Compliance: Implementation is often slowed by manual verification. Allison and Aric highlight the need for Common Cloud Controls (CCC) to standardize what "good" looks like across providers.🤖 The "Order of Magnitude" Complexity of AIWhile machine learning has existed for decades, LLMs introduce a fundamental conflict for auditors: Non-determinism.The Deterministic Gap: Banks require "same input, same output." LLMs, by nature, are unpredictable.Synthetic Data: Because private data cannot always leave specific regions for model training, banks are increasingly relying on synthetic data to bridge the gap.AI Governance: Aric and Allison discuss the FINOS AI Governance Framework (AIGF) as a way to crowdsource risks and automate mitigations, ensuring AI isn't just an "experiment" but a production-ready tool.⚙️ Automation as the Compliance EngineTo stay off the headlines, security must be reproducible 100% of the time.Ansible for Security: Aric emphasizes using tools like Ansible to automate security playbooks. This ensures that as Red Hat or Microsoft releases new versions, the controls remain intact across on-prem and multi-cloud environments.Crowdsourced Risks: By collaborating through FINOS, competitors like Microsoft and Red Hat work with banks to define a common set of controls, reducing the regulatory burden for everyone.🔮 Looking Ahead to 2026What does the next year hold for the industry?Efficiency Shift: Moving from "insane" energy-hungry models to smaller, high-efficiency models and autonomous agents.Quantum Uplift: A massive focus on post-quantum cryptography will likely "slow down" some migrations to ensure security foundations are rebuilt for the quantum era.Agentic Modernization: The convergence of digital assets, AI agents, and cloud will drive the next multi-year wave of modernization.The takeaway: Cloud and AI are no longer optional for financial services, but their success depends on "trust through automation." By leveraging open standards like the FINOS Common Cloud Controls and AI Governance Framework, institutions can move away from manual "toil" and build safe, non-deterministic systems that satisfy both auditors and customers.#FINOS #OpenSource #CloudSecurity #Azure #RedHat #AI #AIGovernance #FinTech #Ansible #DigitalSovereignty #QuantumComputing #Podcast
• 
  Turn CCC into Real Checks: Multi-Cloud Security with Prowler + AI (OSFF NY Preview) 12.10.2025 22min

  🚀 Get a sneak peek of how FINOS Common Cloud Controls (CCC) can move from policy docs to practical enforcement—through automation and open source.In this clip:Toni de la Fuente, Founder & CEO, ProwlerToni shares his journey from maintaining open source in his spare time to helping the community align cloud security with real frameworks like CCC. He previews the upcoming OSFF workshop, where he and Pedro Martín will show how to translate CCC requirements into automated checks across AWS, Azure, and GCP, and how AI can help teams generate and test custom controls quickly. The session will also cover lessons learned: data modeling, compatibility challenges, and how to keep automation simple enough to adopt without adding more complexity.🎟️ See Toni’s full workshop with Pedro Martín at OSFF New York (Oct 21–22, 2025).🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNY #OpenSourceInFinance #CCC #CloudSecurity #AI #ComplianceAutomation #MultiCloud #DevSecOps
• 
  OpenBB’s Open Data Platform: Local-First AI Data Pipelines (OSFF NY Preview) 08.10.2025 21min

  🚀 Get a sneak peek of Ihsan Saracgil’s OSFF NY session on how OpenBB’s Open Data Platform (ODP) lets teams connect private, proprietary, and public financial data to AI—securely, locally, and on your terms.In this clip:Ihsan Saracgil, CPO, OpenBBTired of waiting on scarce engineering cycles for every integration? Ihsan shows how ODP gives data engineers a Python-native, local-first way to register extensions, wrap external sources as APIs, and serve them to downstream tools (copilots, notebooks, dashboards) with full control of credentials, execution, and access. He also breaks down why Model Context Protocol (MCP) is a game-changer: wire up tools to your AI copilot fast—so tasks that once required custom plumbing (even “send me that result via email”) become quick, safe, and auditable. With a lightweight GUI (Tauri) and standardized FastAPI/OpenAPI specs, ODP helps teams unify messy data pipelines without leaking business logic to third-party platforms.🎟️ See Ihsan’s full talk at OSFF New York (Oct 21–22, 2025).🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNY #OpenBB #OpenSourceInFinance #FinancialData #AI #Copilots #MCP #DataEngineering #LocalFirst
• 
  Communications Very Erratic (CVE): Stabilizing Vuln Data for the Industry (OSFF NY Preview) 05.10.2025 34min

  🚨 What happens when the backbone of vulnerability reporting wobbles? In April 2025, funding shocks to CVE/CWE—and the downstream NVD—sparked panic before a short-term lifeline appeared. The uncertainty hasn’t gone away.In this clip:Christopher “CRob” Robinson, CTO & Chief Security Architect, OpenSSF (The Linux Foundation)CRob previews his OSFF NY session on why reliable, authoritative vulnerability metadata is critical for banks, regulated enterprises, and open source maintainers—and what upstream is doing about it. He walks through the recent CVE/NVD turbulence, why downstream teams (risk, OSPOs, product owners) struggle to meet regulatory obligations without stable data, and how the open source community is collaborating to deliver consistent, high-quality vulnerability information going forward. Expect clear context, practical takeaways, and a path from fragmented signals to trustworthy feeds.🎟️ See CRob’s full talk at OSFF New York (Oct 21–22, 2025).🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNY #OpenSourceSecurity #OpenSSF #CVE #CWE #NVD #VulnerabilityManagement #Risk #Compliance #SupplyChainSecurity
• 
  OSFF New York Day 2 Preview — AI Tracks, Security Deep Dives, and Lightning Hot Topics | Grizz Griswold 24.09.2025 14min

  🚀 Highlights from #OSFFNewYork by FINOS – the premier open source in finance conference.Join us at the Open Source in Finance Forum (Oct 21–22, 2025): https://hubs.ly/Q03z9D9D0In this episode (podcast preview):Grizz Griswold, Head of Marketing, FINOSDay 2 is built for builders and risk leaders alike—two AI tracks, a full OpenSSF security program, a Confidential Computing Consortium security track (details incoming), and a fast-moving Hot Topics lightning series.Open Source, AI-Powered Industry (developer/engineering focus): Hands-on sessions on AI-native software development, neuro-symbolic techniques, workforce augmentation with agents, adoption challenges, and integrating AI with FDC3—closing with the EAMS Dial open source enterprise gen-AI platform. Speakers from J.P. Morgan, Red Hat, S&P Global, Scott Logic, interop.io, EPAM, and more.Mutualizing Risk & Compliance in the Open (governance focus): How the industry collaborates on secure-by-design architectures, automated compliance with Common Cloud Controls (CCC) + Prowler, zero-trust blueprints, and the FINOS AI Governance Framework. Featuring ControlPlane, Prowler, Runnink, GitLab, JUXT, and more.OpenSSF: Guarding the Vaults (security focus): Raising the baseline for secure OSS in finance—securing AI in the open, defending against secrets/token/API attacks, and model signaling/validation. Contributions from IBM, Bloomberg, Sonatype, Red Hat, and OpenSSF.Confidential Computing Consortium (security track): Sister-foundation deep dives on hardware-anchored trust and protected data/compute—full agenda to be announced.Hot Topics (15-minute lightning talks): Rapid-fire innovation across open data, GenAI, FDC3, CDM-driven automation, payments flexibility, financial agents, and more—speakers from Citi, AWS, GitLab, OpenBB, Temporal, RPI, J.P. Morgan, vCluster, and others.🎟️ P.S. There’s a hidden VIP code in the audio (free & 50% tickets). It’s not in this description—catch it in the episode!🌐 More about FINOS: https://www.finos.org/📥 Download the latest State of Open Source in Financial Services: https://www.finos.org/state-of-open-source-in-financial-services📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNewYork #OpenSourceInFinance #AIinFinance #Security #OpenSSF #ConfidentialComputing #FDC3 #CDM #AIGovernance #CommonCloudControls #ZeroTrust #Conference
• 
  Zero Trust + Open Source: A Practical Compliance Blueprint | Rakia Finley, Copper & Vine Studio 22.09.2025 27min

  🚀 Highlights from #OSFFNewYork by FINOS – the premier open source in finance conference.Join us at the Open Source in Finance Forum (Oct 21–22, 2025): https://hubs.ly/Q03z9D9D0In this podcast (podcast preview):Rakia Finley, Founder & Managing Partner, Copper & Vine StudioRegulatory rigor and rapid innovation don’t have to clash. Rakia shares a battle-tested approach to embedding compliance into product design using zero-trust architecture and open-source components. She explains why leaders must clarify the “why” behind regulatory change, and why developers should start from existing regulations—auditing “digital beliefs” (data quality, infra, policies) before layering AI. Expect takeaways on aligning to DORA/ISO, secure-by-design patterns, proactive threat modeling, and how inclusive governance reduces risk by reflecting the communities you serve. Plus: a teaser case study of a fintech pipeline brought into compliance without slowing delivery.🌐 More about FINOS: https://www.finos.org/📥 Download the latest State of Open Source in Financial Services: https://www.finos.org/state-of-open-source-in-financial-services📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNewYork #OpenSourceInFinance #ZeroTrust #Compliance #DORA #ISO27001 #SecureByDesign #AIGovernance #FinancialServices #CopperAndVine
• 
  OSFF New York: Day 1 Preview — Tracks, Keynotes, and Big Announcements | Grizz Griswold 16.09.2025 28min

  🚀 Highlights from #OSFFNewYork by FINOS – the premier open source in finance conference.Join us at the Open Source in Finance Forum (Oct 21–22, 2025): https://hubs.ly/Q03z9D9D0In this episode:Grizz Griswold, Head of Marketing, FINOSA fast, inside look at Day 1 of OSFF New York: what’s new, what’s launching, and where you’ll get the most value.Keynotes & momentum: How open source went from “nice-to-have” to core infrastructure in finance, with ROI front-and-center.The Forge (ideation): Ground-floor concepts before incubation—think Open SDLC Controls, Secure-by-Design (CALM + AI Governance + Common Cloud Controls), and an Open Data Commons.Launchpad (incubating projects): Hands-on sessions with CALM, the FINOS AI Governance Framework, Common Cloud Controls, and a brand-new project being unveiled on stage.CDM track: Real adoption stories—eligible collateral, digital bond issuance, and tokenized assets integrated into collateral management.FDC3 track: Desktop interoperability becomes mainstream—conformance, web expansion, and a preview of FDC3 2.3.Open Source Readiness: How banks scale OSPOs, govern licenses, and roll out enterprise open source programs—case studies from leading institutions.Community & networking: Seven tracks, project expos/booths, hallway track magic—meet maintainers, ask questions, try the tech.🎟️ P.S. Listen for a hidden VIP code in the audio (free & 50% tickets). It’s not in this description—catch it in the episode!🌐 More about FINOS: https://www.finos.org/📥 Download the latest State of Open Source in Financial Services: https://www.finos.org/state-of-open-source-in-financial-services📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNewYork #OpenSourceInFinance #FinancialServices #Conference #FDC3 #CDM #OpenSourceReadiness #DevOps #AIGovernance #OpenSourceCommunity