Loading…
2026 September 10-11 | Tokyo, Japan
View More Details & Registration

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
Subject: English clear filter
Thursday, September 10
 

09:00 JST

Keynote: Welcome - Angie Jones, Vice President of Developer Experience, Agentic AI Foundation
Thursday September 10, 2026 09:00 - 09:05 JST
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Angie Jones

Angie Jones

Vice President, Agentic AI Foundation

Thursday September 10, 2026 09:00 - 09:05 JST
Hall C
  Keynote Sessions

09:05 JST

Keynote: Opening Remarks - Mazin Gilbert, Executive Director, The Agentic AI Foundation
Thursday September 10, 2026 09:05 - 09:10 JST
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Mazin Gilbert

Mazin Gilbert

Executive Director, AAIF, The Linux Foundation
Mazin Gilbert is the Executive Director of the Agentic AI Foundation, part of the Linux Foundation. An IEEE Fellow with a Ph.D. in Artificial Intelligence and a Wharton MBA, Mazin brings 25+ years of experience driving AI innovation from research to global-scale deployment. His career... Read More →
Thursday September 10, 2026 09:05 - 09:10 JST
Hall C
  Keynote Sessions

09:10 JST

Keynote: MCP and the Era of Connectivity - David Soria Parra, Co-creator of MCP, Anthropic
Thursday September 10, 2026 09:10 - 09:20 JST
David will discuss the need for connectivity in an era of increasing AI capabilities. Open standards like MCP are at the heart of the AI revolution and the increased ability of models to reach out into the world. We discuss the last two years of MCP and look into the future of connectivity standards in the industry.
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for David Soria Parra

David Soria Parra

Co-creator, Model Context Protocol (MCP), Anthropic
I am the co-creator of the Model Context Protocol (Modelcontextprotocol.io) and a Member of Technical Staff at Anthropic working on a wide variety of things. Formerly a senior manager at Facebook working on static analysis and simulation based testing. I was responsible of integrating... Read More →
Thursday September 10, 2026 09:10 - 09:20 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English

09:20 JST

Keynote: Every AI Agent Needs a Gateway - Lin Sun, Head of Open Source, Solo.io
Thursday September 10, 2026 09:20 - 09:30 JST
AI agents are rapidly evolving from chatbots into autonomous systems that use tools, collaborate with other agents, and interact with enterprise data. But as their capabilities grow, so do the operational challenges. How do you know which agent consumed your AI tokens? Which tools were invoked? How do you govern, secure, and observe agent behavior across an increasingly complex ecosystem?

In this demo-driven keynote, Lin invites the audience to become part of a live agent experience, where her AI agent orchestrates multiple services and MCP tools to transform the audience in an unexpected way. Throughout the demo, every request flows through agentgateway, showcasing how an AI gateway enables secure access to MCP servers, intelligent traffic mediation, policy enforcement, cost attribution, and end-to-end observability for production-ready agentic systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Lin Sun

Lin Sun

Head of Open Source, Solo.io
Lin is the Head of Open Source at Solo.io, co-chair of KubeCon + CloudNatibeCon 2026. She actively contributes to AAIF and CNCF projects. She is the author of “Sidecar-less Istio Explained” and “AI Agents in Kubernetes”, and holds more than 200 patents.
Thursday September 10, 2026 09:20 - 09:30 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English

09:35 JST

Keynote: The State and Future of A2A - Kaz Sato, Staff Developer Advocate, Cloud AI, Google
Thursday September 10, 2026 09:35 - 09:45 JST
As organizations build more capable agents, those agents will need a common way to communicate and work together across frameworks, vendors, and platforms. This keynote examines the current state of A2A, the problems it is designed to solve, and where the project is headed. We'll also see A2A in action through a production multi-agent system, including what happens when one of its agents is compromised.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kaz Sato

Kaz Sato

Staff Developer Advocate, Cloud AI, Google
Kaz Sato, a Staff Developer Advocate from the Cloud AI team, has authored over 25 ML/AI blogs and demos for Google Cloud's official blog. His work has garnered attention from Jeff Dean and Eric Schmidt, and been featured in Newsweek and The New Yorker. He's a regular speaker at Google... Read More →
Thursday September 10, 2026 09:35 - 09:45 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

10:15 JST

Stateless MCP: Inside the 2026 Transport Spec - Himanshu Sangshetti, Mem0
Thursday September 10, 2026 10:15 - 10:40 JST
Most MCP servers in production today are stateful- each client session is pinned to one server instance.

That works on a single node. Add a load balancer and scale horizontally, and sessions start breaking: Kubernetes routes a request to the wrong pod, a Fargate deployment rolls and drops active connections, and NGINX or AWS ALB need special configuration just to keep the server reachable.

The 2026 spec release candidate, locked May 21, fixes this at the transport layer through three SEPs.
- SEP-1442 removes the mandatory init handshake so negotiation folds into the first request.
- SEP-2322 makes elicitation stateless.
- SEP-2243 mirrors routing data into HTTP headers so load balancers can route without parsing the payload.

This session covers what each SEP changes, what breaks in the server you run today, and what to refactor before the spec ships. I'll also show how we externalize session state at Mem0, so a stateless server keeps the memory and context a real agent needs.

You'll leave with a migration checklist and an architecture for stateless-first MCP.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Himanshu Sangshetti

Himanshu Sangshetti

Member of Technical Staff (MTS), Mem0
Himanshu Sangshetti is an MTS at Mem0 (60k+ Github stars).

With a background in AI, cloud, and DevOps, he builds the memory layer for AI agents and helps engineers design and operate them in production.

An AWS Community Builder, HashiCorp Ambassador, and former AWS Cloud Capt... Read More →
Thursday September 10, 2026 10:15 - 10:40 JST
Hall 1F
  MCPCon

10:50 JST

CrabRAG: Why Automated Assistants Need Graph Memory, Not More Tokens - Stephen Chin, Neo4j
Thursday September 10, 2026 10:50 - 11:15 JST
Autonomous assistants are easy to demo and hard to make reliable. The problem is usually not tool access. It is memory.

Most assistant architectures still treat memory as a chat log plus vector retrieval. That is fine for document question answering, but it breaks down when the assistant must connect conversations, people, tools, and decisions across multiple tool iterations. For an AI engineer, a single request can depend on a Slack thread, a GitHub PR, a failed CI run, a calendar event, and prior operating preferences or constraints. These are not isolated pieces of context. They form a connected state that changes as work progresses and context grows.

In this talk, I’ll show why knowledge graphs, context graphs, and GraphRAG provide a better foundation for OpenClaw-style assistants. Knowledge graphs capture durable entities and relationships. Context graphs capture the operational layer assistants usually lose, including actions, decision traces, provenance, and recency. GraphRAG turns that structure into task-time context by combining graph traversal, semantic retrieval, and tool use.

Attendees will leave with practical patterns for schema design, retrieval routing, and evaluation, plus a concrete blueprint for assistants that remember more than the last prompt and retrieve more than the nearest chunk.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Stephen Chin

Stephen Chin

VP of Developer Relations, Neo4j
Stephen Chin is VP of Developer Relations at Neo4j, conference chair of the LF AI & Data Foundation, and author of numerous titles including the upcoming GraphRAG: The Definitive Guide for O'Reilly. He has given keynotes and main stage talks at numerous conferences around the world... Read More →
Thursday September 10, 2026 10:50 - 11:15 JST
Hall 1F
  Agentic Engineering
  • Audience Level Any
  • Presentation Language English

10:50 JST

Let AGENTS.md Write Itself: Self-Improving Coding Agents, No RL Required! - Rudraksh Karpe, Simplismart; Satyam Soni, NitroStack
Thursday September 10, 2026 10:50 - 11:15 JST
AGENTS.md is the file that tells any coding agent how to work in your repo. One open AAIF standard, read by Codex, Cursor, Claude Code, and goose. But it is static. Written once, by hand. It drifts as the code moves. Auto-generate it and agents often get worse, following bloated rules and chasing dead paths. The agent fails the same way every run. Nothing feeds those failures back. The text that drives it never learns.

This talk show how to fix that with a layer on top of AGENTS.md that tunes it from the agent's own runs.The loop is small. Run a task. Reflect on the trajectory in plain language. Find what broke. Propose one targeted edit. Validate it against an eval harness before it sticks. Reflect, mutate, validate, select. Borrowed from reflective optimizers like GEPA. No RL. No fine-tuning. Just an agent learning from its mistakes.

The layer is tool-agnostic because AGENTS.md is, and it extends to MCP tool selection. We measure what moved, task success, edits per gain, token cost, regressions on a held-out set. We beat hand-written and auto-generated files. You leave with a layer you drop onto the AGENTS.md you already have.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Satyam Soni

Satyam Soni

Developer Advocate, NitroStack
Satyam is a Software Developer working at the intersection of AI and cloud-native technologies. He is a former member of the Kubernetes release team, serving as Release Notes Lead for v1.32, with experience in release engineering and a Google Summer of Code contributor at openSUS... Read More →
avatar for Rudraksh Karpe

Rudraksh Karpe

Forward Deployed Engineer, Simplismart
Rudraksh is an FDE and AI Inference Engineer at Simplismart, where he builds high-performance AI inference systems. He previously worked as an AI Engineer at ZS Associates.

He is a two-time Google Summer of Code participant with openSUSE and a GSoC 2026 mentor. He has spoken internationally at KubeCon EU, PyTorch Conference EU, OpenSearch Korea, PyCon US, PyCon JP, openSUSE Conference Germany, and openSUSE Asia Summit Tokyo, covering GenAI, open source... Read More →
Thursday September 10, 2026 10:50 - 11:15 JST
Hall C
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English

10:50 JST

Workshop: Building MCP Authorization with Keycloak and agentgateway - Yoshiyuki Tabata & Michito Okai, Hitachi
Thursday September 10, 2026 10:50 - 12:25 JST
As AI agents move from experimentation to production, authorization is becoming a core architectural concern. The MCP Authorization specification provides a standardized approach for protecting MCP resources and obtaining access tokens, but many developers have not yet seen these mechanisms in action.

In this hands-on workshop, participants will build a secure MCP environment using Keycloak, agentgateway, and MCP Inspector. Starting from an MCP server where all tools are publicly accessible, attendees will progressively introduce authorization controls using Keycloak and agentgateway, and observe how access to MCP tools changes.

Participants will use MCP Inspector to follow authorization flows step by step, including resource discovery, authorization server discovery, user authentication, token acquisition, authorization failures, and authorized tool invocation.

The workshop also explores Step-Up Authorization scenarios introduced in the latest MCP Authorization specification.

By the end of the session, participants will have a working MCP Authorization environment and practical experience securing MCP-based AI agent systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Yoshiyuki Tabata

Yoshiyuki Tabata

Chief OSS Consultant, Hitachi
Yoshiyuki Tabata is a Chief OSS Consultant at Hitachi OSPO with more than a decade of experience in identity and access management (IAM), authentication, authorization, and API security. He is a contributor to Keycloak, a co-author of the CNCF IAM Whitepaper, and serves as Tech Lead... Read More →
avatar for Michito Okai

Michito Okai

Software Engineer, Hitachi, Ltd.

Thursday September 10, 2026 10:50 - 12:25 JST
Hall B
  Workshop
  • Presentation Language English
  • Presentation Slides Attached Yes

11:25 JST

Carbon-Aware Agentic Engineering: Reducing Unnecessary Computation in AI Agent Workflows - Kouki Hama, NTT, Inc
Thursday September 10, 2026 11:25 - 11:50 JST
From a green software perspective, waste in agentic AI comes not only from model choice, but also from workflow design. Agent workflows combine planning, retrieval, retries, memory, tools, and model calls. Poor controls can lead to large models for simple tasks, long histories, repeated retrieval, or needless tool calls, increasing compute, cost, and latency.

This talk presents a design-review approach for reducing unnecessary computation in agent workflows. As a case study, it uses Lean Agentic AI (https://github.com/navveenb/lean-agentic-ai) as an open-source workflow example. For each workflow step, it asks: Is an LLM needed? Is the model appropriate? Is context bounded? Could code, rules, or a smaller model replace a large-model call?

The goal is not precise carbon accounting. Instead, it identifies avoidable inference, oversized context, and needless tool calls before estimating CO2 emissions.

Takeaways:
* See how agent workflow design affects compute, cost, and latency.
* Understand how reducing unnecessary computation supports green software goals.
* Ask simple review questions to reduce unnecessary LLM calls, retrieval, memory, and tool use.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kouki Hama

Kouki Hama

Senior Research Engineer, NTT, Inc
Kouki Hama is a Senior Research Engineer at NTT, Inc., Computer & Data Science Laboratories. His research focuses on green software engineering and software supply chain assurance, including CI/CD, GreenOps, FinOps, Software Carbon Intensity, and SBOM-based governance. As personal... Read More →
Thursday September 10, 2026 11:25 - 11:50 JST
Hall C
  Agentic Engineering

11:25 JST

MCP 2026-07-28 Under the Microscope: Security Implications for Stateless Agents - Thejes sree Satheesh kumar, Thoughtworks & Srinivasan Sekar, TestMu AI
Thursday September 10, 2026 11:25 - 11:50 JST
The MCP 2026-07-28 release candidate introduces a major shift in how agents connect, authenticate and manage state. With a stateless protocol core, first-class extensions and hardened authorization, the new spec improves scalability and interoperability, but it also changes the security model in ways that many builders may not fully anticipate. In this talk, I will examine the release candidate through a defender’s lens and highlight the practical risks that emerge when session state disappears, trust boundaries move and extension-based flexibility expands the attack surface. I will discuss failure modes such as broken state assumptions, capability confusion, unsafe cross-client behavior, and authorization mistakes in real deployments. The session will also cover concrete hardening patterns for secure MCP adoption, including least-privilege tool design, explicit state handling, authorization scoping, telemetry and rollout validation. Attendees will leave with a practical checklist for evaluating stateless MCP systems and defending agent runtimes in production.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Thejes sree Satheesh kumar

Thejes sree Satheesh kumar

Quality Analyst, MCP and AI Security Researcher, Thoughtworks
Thejes Sree Satheesh Kumar (she/her) is a Quality Analyst – Consultant at ThoughtWorks specializing in application and AI security testing. A CEH, CompTIA Security+ professional, With a strong background in automation testing (like Playwright), she combines quality engineering and... Read More →
avatar for Srinivasan Sekar

Srinivasan Sekar

Director of Engineering, TestMu AI
Srinivasan Sekar is a Director of Engineering at TestMu AI (formerly LambdaTest). He loves contributing to Open Source. He is an Appium Member and Contributor to various open-source repositories like Selenium, Webdriver.io, taiko, etc. He worked extensively on testing various Microservices... Read More →
Thursday September 10, 2026 11:25 - 11:50 JST
Hall 1F
  MCPCon

12:00 JST

Letting an Agent Upgrade Production Kubernetes — Without Getting Paged at 3 AM - Sanskar Agrawalla & Abhijeet Chaudhuri, Quartic.ai
Thursday September 10, 2026 12:00 - 12:25 JST
Kubernetes upgrades are high-stakes, deprecation-laden, and still mostly manual — most "AI for K8s upgrades" projects stop at a feasibility check. We went further: we built an agentic system that planned and executed a real cluster upgrade end to end, and in this talk we walk through exactly how it went, with the steps, evidence, and screenshots from our actual runs.


We'll break down the architecture we shipped — a planner → executor → verifier loop, deprecated-API and CRD/Helm compatibility analysis run before anything touched the cluster, a human-in-the-loop approval gate for irreversible steps, and health-gated automatic rollback. Using captured logs and screenshots, we'll show a real multi-node upgrade as it happened, the failure cases that nearly broke it (version skew, stuck drains, webhook deadlocks), and the decisions we deliberately refused to let the model make.

You leave with an open-source blueprint for autonomous infra agents with production-grade guardrails — plus real numbers on success rate, time saved, preflight catches, and rollbacks triggered.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Sanskar Agrawalla

Sanskar Agrawalla

Site Reliability Engineer, Quartic.ai
👋 Site Reliability Engineer at Quartic.ai | Tech Enthusiast

Hey there! I'm a Site Reliability Engineer with a passion for building impactful solutions. Currently, I'm working on cutting-edge projects that drive innovation. From enhancing monitoring processes to optimizing infrastructure, I'm all about crafting efficient and secure systems... Read More →
avatar for Abhijeet Chaudhuri

Abhijeet Chaudhuri

Site Reliability Engineer, Quartic.ai
Site Reliability Engineer who runs a production distributed system on Kubernetes — Kafka, Spark, Airflow, and a fleet of edge devices — where long-running operations are a daily reality, having experience in implementing scalable cloud-native solutions across Kubernetes, AWS... Read More →
Thursday September 10, 2026 12:00 - 12:25 JST
Hall C
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

12:00 JST

Sponsored Session: Same Prompt, Different Agent: Building an Assembly Line for Agents - Kan Wang, Raytone
Thursday September 10, 2026 12:00 - 12:25 JST
Run the same prompt twice and you get two different agents. Both work. Neither is the same. If you ship agents to customers rather than demos, this is a failure mode you already know, and it is why agent work has not industrialized.

Today's AI coding is 3D printing: brilliant for one-offs, unreliable at scale. Assembly is the alternative, and agents have finally converged enough to make it possible. They have a bill of materials: model, harness, interface layer, state, tool integrations. Open source ships every part. Nobody ships the guarantee that two of them work together.

You will leave with the six-station line we run, why moving the model from author to assembler cuts variance and token spend at the same time, the compatibility matrix we maintain, and the list of component pairs that deadlock, which is the part almost nobody publishes.

We will also name what assembly does not fix, and where reproducibility stops being enough.


In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Kan Wang

Kan Wang

Co-Founder, Raytone
Kan leads international Token business development at Raytone, with over 11 years of experience in global cloud services, AI data, and enterprise technology partnerships. He previously worked in Business Strategy and Innovation at ByteDance, developing international business models... Read More →
Thursday September 10, 2026 12:00 - 12:25 JST
Hall 1F
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

13:30 JST

Do Tools Still Matter? MCP Tool Design in the Age of Code Mode - Ruben Casas, Postman
Thursday September 10, 2026 13:30 - 13:55 JST
The first wave of MCP adoption was defined by abundance. Every API endpoint became a tool, every workflow became a collection of tool calls, and many servers exposed hundreds of operations directly to agents. It worked, but at a cost: bloated context windows, slower tool selection, and increasingly unreliable agent behaviour.

But then Code Mode appeared!

With approaches Code Mode agents can search an API surface, generate code, and interact with services directly. If models can consume entire APIs and write code to acomplish a task, does tool design still matter?

In this talk, we'll compare three approaches to agent tooling: curated workflow-oriented tools, tool discovery and search, and Code Mode's search-and-execute model. Using real-world examples, benchmarks, and evals, we'll explore the trade-offs in reliability, latency, token usage, and task success.

Attendees will leave with a practical framework for deciding when to consolidate tools, when to expose APIs, and whether the future of MCP is better tools or fewer tools altogether.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Ruben Casas

Ruben Casas

Staff Engineer, Postman
Ruben Casas is a Google Developer Expert and Staff Engineer at Postman. He builds developer tooling, AI agents, and MCP apps, and writes about frontend architecture at scale and AI. Ruben is a podcast guest and has spoken at major conferences, sharing insights from large-scale migrations... Read More →
Thursday September 10, 2026 13:30 - 13:55 JST
Hall 1F
  MCPCon

13:30 JST

Workshop: Governing AI Agent Actions: MCP and Beyond - Shannon Williams & Chris Urwin, Obot AI
Thursday September 10, 2026 13:30 - 15:05 JST
Enterprise adoption of the Model Context Protocol is accelerating, and MCP has become the primary way agents connect to enterprise tools and data. But MCP is only part of how agents act. Agents also run CLIs, execute Skills, and generate code that calls APIs directly. Governing MCP well matters. Governing everything else agents can do matters just as much.

Building MCP servers and writing Skills isn't particularly hard. The real challenges are deciding which actions agents are allowed to take, controlling who can take them, and proving it all later. These are architectural questions, and they need answers before agents scale across an organization.

In this workshop, we will:
  1. Show how to control agent actions with policies that apply across MCP servers, CLIs, Skills, and agent-generated code — including allowlists, access control by users and groups, and human-in-the-loop approvals.
  2. Explain why enterprises need managed registries for MCP servers and Skills, and how admin review and approval change the trust model.
  3. Work through audit and compliance requirements: capturing complete logs of agent and tool activity, exporting to enterprise storage, and generating reports.
  4. ⁠Demonstrate how to discover shadow AI — unmanaged agents, MCPs, and Skills already running in your organization — and how to block them or bring them under management.
  5. Look at token usage and spend visibility by agent, user, and group.

You'll leave with a clear picture of the architectural decisions ahead of you, and a better sense of what your security team will require before signing off on scaling AI agents across your organization.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Shannon Williams

Shannon Williams

President, Obot AI
I am the President and co-founder of Obot AI, and have been building open source software for the last 20 years. Prior to starting Obot, I co-founded Cloud.com (creator of CloudStack) and Rancher Labs (creator of Rancher, k3s, Longhorn, etc). I was a board member of the CNCF for 4... Read More →
avatar for Chris Urwin

Chris Urwin

VP of Field Engineering, Obot AI
Chris Urwin is VP of Field Engineering at Obot AI and a veteran engineering leader. With deep hands-on experience in cloud‑native platforms, Kubernetes, containers, CI/CD, and developer tooling, he builds and scales global technical teams. Chris bridges product, engineering, and... Read More →
Thursday September 10, 2026 13:30 - 15:05 JST
Hall B
  Workshop

14:05 JST

The Agent Builder Loop from Daily Work to OSS - Minoru Onda, KDDI Agile Development Center Corporation
Thursday September 10, 2026 14:05 - 14:30 JST
AI agent discussions often focus on coding or MCP. My starting point is different. I use coding agents such as Claude Code and Codex as assistants for work beyond development. Instead of automating isolated tasks, I keep them beside me as a secretary and knowledge platform for routine operations, speaking requests, internal coordination, slide preparation, and customer-facing project delivery.

That daily use reveals agent-worthy problems. With Markdown, Git, Google Workspace, and MCP in the loop, work becomes context an agent can read, improve, and hand back. I then turn those problems into agents I build, deploy, review, and operate myself.

I will cover Vibe Presales, my term for turning a customer's concerns, constraints, and reactions in a presales conversation into a working demo while the context is fresh. I will also share lessons from a PowerPoint-building agent, including design, deployment, review, and output quality for real slide and proposal work.

These lessons become OSS code, articles, books, and hands-on material. Attendees leave with a loop for living with agents at work, building reliable systems, and sharing reusable lessons.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Minoru Onda

Minoru Onda

KDDI Agile Development Center Corporation
Technology Evangelist, KDDI Agile Development Center Corporation
Thursday September 10, 2026 14:05 - 14:30 JST
Hall C
  Building Reliable Agent Systems

14:05 JST

Who Owns the Agentic Loop? - Angie Jones, Agentic AI Foundation
Thursday September 10, 2026 14:05 - 14:30 JST
A customer is due a refund. The support agent sends 10x the amount that was due. Who is at fault? Was it the team that set the rules, the runtime that managed the loop, the model that chose the action, or the tool that carried it out?

In this agentic whodunit, we'll follow the evidence through one failed run and uncover where the mistake happened. Solving the case raises a harder question. Who owns the outcome when an agent acts on your behalf?

We'll examine the agentic loop as the unit of ownership, from the runtime and model to the tools, data, and control plane around them. You'll learn what teams need at each layer to inspect what happened, constrain what can happen, and change the system when it no longer meets their needs. Along the way, we'll see how open source infrastructure gives teams the access they need to own the full path from decision to action.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Angie Jones

Angie Jones

Vice President, Agentic AI Foundation

Thursday September 10, 2026 14:05 - 14:30 JST
Hall 1F

14:40 JST

What Happens When Your MCP Tools Cost Money? - Prakash Rao, AIG Technologies & Marco González, Red Hat
Thursday September 10, 2026 14:40 - 15:05 JST
What happens when an AI agent has to pay for its tools? Today, nobody knows. Open-source MCP servers run for free, and their maintainers quietly absorb the cost. The x402 protocol changes the model: a server can charge a small payment for each tool call, with no accounts or API keys needed. The plumbing works. The open question is how agents behave once tools have a price.

We put it to the test. We built a paid MCP server on Cloud and ran it end to end, live, settling real payments on a public testnet. We put the agent behind an identity provider and a policy gateway, to see what a paid tool call has to carry before anyone would run one in production. We gave the same work to two competing vendors to see who really decides which one gets bought. And we varied the system prompt, to see how much of a model's spending behaviour is a property of its instructions rather than of the request.

The result is practical guidance for maintainers: how to price a call, where the payment flow breaks, which model behaviours to expect, and whether per-call payments can realistically fund an open-source MCP server.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Prakash Rao

Prakash Rao

Principal Cloud Engineer, AIG Technologies
Prakash Rao is a Principal Cloud Engineer at AIG Technologies in Japan, designing Google Cloud infrastructure for financial services: hybrid connectivity, enterprise networking, and security architecture. His recent work includes deploying AI agents on Vertex AI Agent Engine and infrastructure... Read More →
avatar for Marco González

Marco González

Sr. Software Engineer, Red Hat
Senior Software Engineer at Red Hat with 13+ years of global experience in 3G, 4G, and 5G network integration. US patent creator and Telco Automation expert. 2026 AAIF ambassador and active CNCF Program Committee member and speaker at KubeCon, Kubedays, and CNCF events. Contributor... Read More →
Thursday September 10, 2026 14:40 - 15:05 JST
Hall 1F
  MCPCon

14:40 JST

The Production Gap: Why Governing Agent Traffic Is the Key To Shipping Multi-Agent Systems - Juhi Singh, Kong & Prithvi Raj, Mirantis
Thursday September 10, 2026 14:40 - 15:05 JST
Every team building agentic systems hits the same wall: the gap between a demo and a system you'd trust in production. Most assume it's an engineering problem. It isn't. It's a governance problem and governance in a multi-agent system isn't a policy document. It's the full data path.



We demonstrate a production-style multi-agent workflow where customer feedback flows through agents, MCP tools, GitHub integrations, and multiple LLM providers before triggering automated actions.



We show how cloud-native primitives govern every interaction: OpenTelemetry for distributed tracing across agent hops, OPA for declarative policy enforcement, API gateways for prompt injection protection and model routing, and Kubernetes for workload isolation.



The hardest part of running agents in production isn't the AI. It's the same problems Kubernetes solved for microservices, observability, traffic management, policy, workload isolation applied to a new class of workload the ecosystem is still learning to instrument.


___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Juhi Singh

Juhi Singh

Developer Evangelist, Kong
Juhi is the Developer Evangelist (APAC) at Kong. She’s passionate about helping the developer community and building strong connections. Outside of work, Juhi enjoys reading, staying fit, trekking, traveling, and cooking. She describes herself as a "product of a community" with... Read More →
avatar for Prithvi Raj

Prithvi Raj

Senior Community Manager & Developer Advocate, Mirantis
Prithvi Raj is a Senior Community Manager & Developer Advocate at Mirantis working with the OSPO. He is a CNCF Ambassador with 6+ years of experience who helped scale a CNCF incubating project and runs the CNCG Platform Engineering Meetup group. He is currently leading the community... Read More →
Thursday September 10, 2026 14:40 - 15:05 JST
Hall C
  Multi-Agent and Distributed Systems

15:35 JST

Stop Giving Agents Tokens: Securing With Side-Car Proxies - Ritwik Ranjan, Independent Contributor
Thursday September 10, 2026 15:35 - 16:00 JST
As autonomous agents move from experimental scripts to production systems, we’re exposing a massive flaw in how they’re built. We are giving LLMs the power to execute code, access files, and make network requests—essentially turning them into untrusted programs with direct authority over our infrastructure.

Prompt injection isn’t just a model quirk; it’s an open door to a massive attack surface. The moment an agent processes untrusted data, that input can hijack generated code, trigger outbound requests, and lead to data leaks or Server-Side Request Forgery (SSRF). Without proper guardrails, a highly capable agent is just a friendly interface over a Remote Code Execution (RCE) vulnerability.

This session reframes the entire security challenge. Instead of wasting time trying to make the model perfectly "safe," we’ll look at how to design infrastructure that stays secure even after the agent is compromised. By enforcing strict policy gates, we ensure that even if an agent is hijacked, it cannot access secrets, traverse your network, or execute privileged actions.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Ritwik Ranjan

Ritwik Ranjan

Software Engineer, Independent Contributor
Ritwik Ranjan is a systems-focused software engineer with a track record of building resilient, high-scale cloud platforms. With prior engineering experience across Microsoft Azure Core and Amazon Web Services (AWS), he brings a strong foundation in distributed infrastructure, runtime... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall C
  Building Reliable Agent Systems

15:35 JST

Lessons From Building a Generative UI Runtime for MCP Apps - Rabi Guha, Thesys Inc
Thursday September 10, 2026 15:35 - 16:00 JST
MCP UI lets servers return interactive application surfaces instead of plain tool results. But it raises a new question: what happens when the interface inside that surface is generated at runtime by the agent?

This talk shares lessons from building a Generative UI layer within MCP UI. MCP UI provides the app/resource boundary and host communication model, while frameworks like OpenUI provide the generated interface inside that boundary: a component registry, model-friendly UI language, streaming validation, form state, and explicit actions that route back to MCP tools.

The key shift is that MCP UI does not have to mean one fixed widget per tool result. A server can expose capabilities and context, the agent can generate the right interface for the task, and the host can still control rendering, permissions, actions, and observability.

The demo uses a data-dashboard workflow: an agent connects to a datasource, inspects data, generates an interactive dashboard with filters and drilldowns, then turns the result into persistent artifacts such as reports, documents, or slide decks.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Rabi Guha

Rabi Guha

Co-Founder & CEO - Thesys, Thesys Inc

Rabi Shanker Guha is Co-Founder and CEO of Thesys, the Generative UI company behind C1 and OpenUI. Previously, he was Head of Engineering and a founding member at DevRev.ai, where he helped scale the engineering team to about 150 people. He has also held roles at Google and Nutanix, and... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall 1F
  MCPCon

15:35 JST

Architecting Agent-Native Data Layers: Managing Persistent State Across MCP Tools - Tomohiro Ichimura, Yugabyte Japan
Thursday September 10, 2026 15:35 - 16:00 JST
As multi-agent systems move to production, managing persistent state and data lineage across independent tools is a critical engineering bottleneck. This session explores the architectural gaps in current agent workflows and introduces an open-source approach to building structured, tiered datastores using the Model Context Protocol (MCP).

We will present the concept of an "agent-native data layer" and the "datapack" framework—designed to decouple and layer data specifically for multi-agent environments. Attendees will learn how an open-source MCP server can act as a unified abstraction layer to securely bridge public and proprietary data. You will walk away with actionable design patterns to ensure independent tools seamlessly retain state and context without vendor lock-in.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Tomohiro Ichimura

Tomohiro Ichimura

Head of Japan and Korea, Yugabyte Japan
As Head of Japan and Korea, leading both commercial strategy and technical operations to bridge the gap between business growth and complex engineering. With a deep background in distributed systems, cloud-native infrastructure, and data platforms—built across technical and business... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall B
  Multi-Agent and Distributed Systems

16:10 JST

Building an AI for Security Exception Tickets: What Actually Worked - Juan Corena, Woven by Toyota
Thursday September 10, 2026 16:10 - 16:35 JST
This session presents a lightweight AI assistant built to help a Security Assurance team review policy exception tickets more efficiently. The assistant summarizes tickets, generates follow-up questions, and maps requests to internal standards to support faster reviews.

The solution uses GitHub Workflows, a custom MCP server and client written in Go, ServiceNow integration, and Python-based evaluation. We used RAGAS to assess relevance and hallucination risk, and verified that the assistant retrieved internal standards through MCP calls.

We will share early results, including meaningful time savings in ticket review, as well as practical challenges such as stakeholder alignment, service account access, and the difficulty of evaluating correctness in security workflows. Attendees will leave with a practical blueprint for building a standards-grounded AI workflow for security review. In our implementation, the initial review step dropped from about 60 minutes of manual effort to about 50 seconds of automated generation plus validation, a time savings of roughly 98.6% per ticket.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Juan Corena

Juan Corena

Senior Software Engineer, Woven by Toyota
Juan Corena is currently an Application Security Engineer at Woven by Toyota working on security automation, dynamic analysis and internal cryptographic standards. Previously, he worked in privacy compliance for ad networks, digital assistants, information security research and as... Read More →
Thursday September 10, 2026 16:10 - 16:35 JST
Hall C
  Building Reliable Agent Systems

16:10 JST

Tasks at Scale: How MCP's New Task Lifecycle Powers Long-Running Agentic Systems - Abhishek Pandit, NitroStack
Thursday September 10, 2026 16:10 - 16:35 JST
In the 2026-07-28 MCP spec, Tasks graduated from an experimental core feature to a full extension, and the redesign reflects hard lessons from production use. For teams building agentic systems, this isn't a minor API tweak. It changes how long-running work, the kind agents constantly trigger (data pipelines, multi-step workflows, async approvals) gets modeled, tracked, and scaled across a stateless protocol.

This session is a field report on what it takes to build agentic systems around the new Tasks lifecycle.

We'll cover:
  1. Why Tasks moved from core to an extension, and what that signals about MCP's evolution philosophy
  2. The new server-directed task model: how a tools/call returns a task handle, and the client drives it via tasks/get, tasks/update, and tasks/cancel
  3. Why tasks/list was removed entirely, and what that means for how agents discover and track in-flight work
  4. Patterns for orchestrating dozens or hundreds of concurrent tasks across a fleet of agents without sessions to lean on
  5. Migration lessons from the experimental 2025-11-25 Tasks API, including what broke and how we handled the transition without downtime.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Abhishek Pandit

Abhishek Pandit

CEO, NitroStack
Abhishek Pandit is a technology entrepreneur and software architect with 7+ years building scalable, high-performance systems using Node.js, React, AWS, and Azure. As CEO of NitroStack, he focuses on AI agents and Model Context Protocol (MCP), helping developers build secure, production-ready... Read More →
Thursday September 10, 2026 16:10 - 16:35 JST
Hall 1F
  MCPCon

16:10 JST

Workshop: Enterprise Agentic AI: Architecting Autonomous Java Systems for Production - Daniel Oh, Red Hat & Kevin Dubois, IBM
Thursday September 10, 2026 16:10 - 17:45 JST
Step into the future of enterprise automation by building production-ready agentic AI systems using Java. This hands-on lab guides you through designing scalable multi-agent architectures that seamlessly connect with enterprise infrastructure. You will gain practical experience implementing key design patterns such as sequence, parallel, routing, loop, and supervisor models while enabling direct agent-to-agent (A2A) collaboration. We will also address real-world deployment challenges by integrating human-in-the-loop control points and robust observability features. Leave equipped with functional code and the architectural blueprints needed to bring robust agentic AI into your organization.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Daniel Oh

Daniel Oh

Senior Principal Developer Advocate, Red Hat
Java Champion, CNCF Ambassador & TAG DevEX Co-Chair, AAIF Ambassador, Microsoft MVP, Developer Advocate, Technical Marketing, Keynote Speaker, Published Author
avatar for Kevin Dubois

Kevin Dubois

Sr Principal Developer Advocate, IBM
Kevin Dubois is often featured as a (keynote) speaker at conferences around the world, where he shares his passion and knowledge about developer experience, Agentic AI, open source, cloud native development and Java. He is also an author, java Champion, and an accomplished software... Read More →
Thursday September 10, 2026 16:10 - 17:45 JST
Hall B
  Workshop

16:45 JST

Running an MCP Proxy at Scale - Camila Rondinini, Anthropic
Thursday September 10, 2026 16:45 - 17:10 JST
The MCP spec is clear about how one client and one server talk to each other. It says much less about what happens when the client is itself a distributed system, serving millions of people across thousands of third-party MCP remote servers.

At Anthropic, we run a proxy between our products and a large, growing set of remote servers. At that scale, we started running into problems the spec doesn't answer.

This talk is about three of them:

- Authentication: How do we make authentication work across servers that all implement it a little differently? How do we keep people connected when connections drop and credentials expire, without making them sign in again?

- Caching: How do we avoid hammering the MCP remote servers, and which caching strategies make that possible?

- Monitoring: How do we monitor a system where the servers vary widely, from stable production ones to unstable ones still in development? When something breaks, how do we tell whether the fault is ours or the server's?

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Camila Rondinini

Camila Rondinini

Member of Technical Staff, Anthropic
Camila Rondinini is a Member of Technical Staff on the Connectivity team at Anthropic, where she works on supporting MCP across Anthropic's product surfaces. Her focus is on improving the reliability and monitoring of MCP at scale.
Thursday September 10, 2026 16:45 - 17:10 JST
Hall 1F
  MCPCon

17:20 JST

Accelerating the Autonomous Web With WebMCP - Vin Lim, StaffOS
Thursday September 10, 2026 17:20 - 17:45 JST
AI agents have long been capable of interacting with the web, relying on brittle DOM scrapers and heavy browser automation has kept these workflows slow and prone to failure. We will explore how the WebMCP shifts agentic web interaction from merely functional to highly performant and efficient by providing a standardized, machine-readable layer for context sharing and action execution. WebMCP eliminates the friction and overhead of legacy automation techniques.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Vin Lim

Vin Lim

CTO, StaffOS
Vin is the co-founder of StaffOS, an AI Workforce platform for business to deploy and govern AI agents. He is also a Google Developer Expert, having partnered with Google to advocate web technology for the past 10 years, speaking, mentoring and conducting community workshops.
Thursday September 10, 2026 17:20 - 17:45 JST
Hall C
  Interoperability & Standards
 
Friday, September 11
 

09:00 JST

Keynote: Welcome - Mazin Gilbert, Executive Director, The Agentic AI Foundation
Friday September 11, 2026 09:00 - 09:10 JST
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Mazin Gilbert

Mazin Gilbert

Executive Director, AAIF, The Linux Foundation
Mazin Gilbert is the Executive Director of the Agentic AI Foundation, part of the Linux Foundation. An IEEE Fellow with a Ph.D. in Artificial Intelligence and a Wharton MBA, Mazin brings 25+ years of experience driving AI innovation from research to global-scale deployment. His career... Read More →
Friday September 11, 2026 09:00 - 09:10 JST
Hall C
  Keynote Sessions

09:10 JST

Sponsored Keynote: From Consumers to Contributors: Why Japan Must Join the Agentic AI Upstream - Yoshiyuki Tabata, Chief OSS Consultant, Hitachi
Friday September 11, 2026 09:10 - 09:20 JST
Japan is rapidly embracing Agentic AI. New products, services, and platforms are emerging as organizations explore how AI agents can transform the way we work and build software.

Yet an important question remains:

Who is building the technologies that define the future of AI agents?

Behind every protocol, specification, and open source project is a community shaping how agents communicate, collaborate, authenticate, authorize, and make decisions. These communities are defining the foundations of the Agentic AI ecosystem.

While participation in upstream communities continues to grow worldwide, Japan's presence in the development of the standards and infrastructure behind this ecosystem remains limited.

As AI agents become more widely adopted, adoption alone is not enough. Open source projects and standards bodies are determining how the ecosystem evolves, and participation in these communities allows organizations and individuals to help shape that future.

The future of Agentic AI is being built today through open source projects, technical standards, and the communities behind them.

Will Japan remain a consumer of that future, or become a contributor to it?

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Yoshiyuki Tabata

Yoshiyuki Tabata

Chief OSS Consultant, Hitachi
Yoshiyuki Tabata is a Chief OSS Consultant at Hitachi OSPO with more than a decade of experience in identity and access management (IAM), authentication, authorization, and API security. He is a contributor to Keycloak, a co-author of the CNCF IAM Whitepaper, and serves as Tech Lead... Read More →
Friday September 11, 2026 09:10 - 09:20 JST
Hall C
  Keynote Sessions

09:25 JST

Sponsored Keynote: Beyond the Model: Control and Execution for Enterprise AI - Allan Teng, Founder & Senior Advisor, APAC & Japan | General Manager & Vice President, Workato Japan, Workato
Friday September 11, 2026 09:25 - 09:35 JST
AI models and agent frameworks are advancing rapidly, but intelligence alone does not make an organisation agentic. To create real value, agents must safely interact with enterprise systems, data, people and business processes.

This keynote explores the architectural challenge beyond the model: building a control and execution layer for enterprise AI. MCP is an important step toward interoperable agent-to-tool interaction, but production systems also require identity, least-privilege access, policy enforcement, human approvals, orchestration, observability and auditability.

The session will offer a practical framework for thinking about how open protocols and agent systems can move from impressive demonstrations to trusted, scalable enterprise action. The central question is not whether an agent can use a tool, but whether an enterprise can safely allow it to do meaningful work.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Allan Teng

Allan Teng

Founder & Senior Advisor, APAC & Japan | General Manager & Vice President, Workato Japan, Workato
Allan is an entrepreneur, business builder, and cross-border leader focused on helping enterprises drive measurable outcomes through automation and AI adoption. He currently serves as Vice President and General Manager for Workato Japan, and Senior Advisor for Workato Asia Pacific... Read More →
Friday September 11, 2026 09:25 - 09:35 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English

09:40 JST

Keynote: Skills Over MCP: From Experiment to Extension - Ola Hungerford, Principal Engineer, Nordstrom
Friday September 11, 2026 09:40 - 09:50 JST
Tool descriptions tell an agent what a tool can do, but not how to orchestrate those capabilities toward a goal, or supplement them with specialized knowledge. Agent skills have become a popular and accessible way to close that gap, and many organizations now ship skills alongside their servers. The community effort to standardize that pairing has drawn 50+ contributors from 25+ organizations across the entire AI infrastructure stack: cloud platforms, data platforms, enterprise SaaS, gateways, and independent implementers. This talk covers where that momentum is headed, and how Extensions let the protocol evolve to meet real-world demand while balancing the stability, security, and developer experience that production systems require.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Ola Hungerford

Ola Hungerford

Principal Engineer, Nordstrom
Ola Hungerford is a Principal Engineer at Nordstrom and a maintainer and community moderator for the Model Context Protocol. She leads AI enablement initiatives while contributing to MCP’s specification, developer tooling, documentation, and community governance. Ola comes from... Read More →
Friday September 11, 2026 09:40 - 09:50 JST
Hall C
  Keynote Sessions

10:20 JST

Building Local Regression Testing and Evals for ADK Agents - Thu Ya Kyaw, Google
Friday September 11, 2026 10:20 - 10:45 JST
The hardest part of agentic engineering isn't writing the code; It’s proving that a prompt tweak or a new tool schema didn't completely break your agent's routing logic. Traditional unit testing falls short when dealing with non-deterministic agent trajectories.

This session looks at how to build an automated local evaluation and regression testing pipeline for ADK workflows. We will walk through how to programmatically mock tool responses, simulate user edge cases, and run parallel assertions against agent trajectories using open-source evaluation frameworks. Attendees will learn how to catch infinite loops, detect tool-calling degradation, and establish a baseline scoring rubric for agent accuracy before code ever hits a production branch.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Thu Ya Kyaw

Thu Ya Kyaw

Senior Developer Relations Engineer, Google
Thu Ya Kyaw is a Senior Developer Relations Engineer for Google Cloud. At Google, he helps to make learning, developing, deploying, and scaling applications on Google Cloud a delightful experience for everyone. He is passionate about using AI to solve real-world problems, and he is... Read More →
Friday September 11, 2026 10:20 - 10:45 JST
Hall C
  Evals & Testing

10:20 JST

Skills as Reusable Operational Knowledge - Nimit Savant, DevRev
Friday September 11, 2026 10:20 - 10:45 JST
The next leap in agent engineering is not bigger models. It's reusable skills.

Today, many agents repeatedly spend tokens rediscovering the same workflow every time a task appears. Whether it's code reviews, incident analysis, documentation generation, or research tasks, the agent often re-plans work it has already solved before.

This talk explores how agent skills are emerging as reusable workflow primitives that package expertise, decision-making patterns, and execution steps into portable capabilities. Instead of relying on increasingly large prompts, teams can teach agents repeatable workflows once and reuse them across tasks, products, and environments.


Key Takeaways

- Why prompts don't scale for repetitive work
- Skills as reusable workflow contracts
- Reducing token consumption through workflow reuse
- How skills and MCP work together
- Building self-improving agent systems

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Nimit Savant

Nimit Savant

Developer Evangelist, DevRev
I love to talk about Agentic AI and B2B Developer Advocacy and strategies
Friday September 11, 2026 10:20 - 10:45 JST
Hall 1F
  Interoperability & Standards

10:55 JST

Architecture Behind the Most Viral Agent Memory Open Source Project - Rohit Ghumare, DEVREL AS SERVICE & Vinuja Khatode
Friday September 11, 2026 10:55 - 11:20 JST
Most agent memory is a chat log with extra steps. Dump turns into a vector store, retrieve the top-k by cosine similarity, and hope the right context shows up. It usually doesn't, and the agent pays for it three turns later.

Agentmemory MCP Server began as a fix for that. It combines BM25, dense vector search, and a knowledge graph, fuses them with reciprocal rank fusion, and ages stored memories on an Ebbinghaus forgetting curve so old context decays instead of drowning new signal. On LongMemEval-S it reaches 95.2% recall at 5. The repo trended on GitHub, ranked on Product Hunt, got picked up by AlphaSignal, and was recognized by the Agentic AI Foundation, none of it paid for.

This talk covers how it was built and where the easy version breaks. Single-method retrieval looks fine in a demo and falls apart on long histories. I'll show why each method earns its place, how the pieces compose with one engine an agent can query over MCP, and which design decisions held up once real workloads hit them.

You'll leave with a memory model that beats top-k vector search and a clear picture of how to expose it to agents through MCP.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Rohit Ghumare

Rohit Ghumare

Founder, DEVREL AS SERVICE
Currently, working at iii.dev as founding DevRel. As a Google Developer Expert specializing in Google Cloud and GenAI, I am a passionate DevOps Advocate and a dedicated Community Evangelist. I lead and nurture multiple communities across diverse platforms, fostering DevOps and Developer... Read More →
avatar for Vinuja Khatode

Vinuja Khatode

Platform Engineer
A Platform Engineer at JPMorganChase and a CNCF community regular and lifelong learner. She’s spoken at global conferences like State of Open Con, KCDs, and DevOpsDays, bringing raw, real-world DevOps and Platform lessons to the stage. Vinuja has also built and scaled platforms... Read More →
Friday September 11, 2026 10:55 - 11:20 JST
Hall C
  Agentic Engineering

10:55 JST

You Have 1000 Employees and None of Them Have a Name - Marcus Tenorio, Bitso
Friday September 11, 2026 10:55 - 11:20 JST
Your agent swarm is running. It's browsing the web, calling APIs, reading files, making decisions, all on behalf of your users and your organisation. But ask yourself: do you know which agent did what? Can you revoke access to just one of them? Can you prove to an auditor that your agents only touched what they were supposed to?

Probably not. Because most agentic deployments treat agents as anonymous processes : no identity, no credentials, no audit trail, no way to fire them when something goes wrong. If a human employee operated this way, you'd call security. For agents, we call it production.

This talk proposes a fundamentally different approach: onboard your agents like employees. Every agent in your swarm deserves a verifiable identity, scoped permissions, a centralised audit trail, and an offboarding process. Drawing from experience securing cloud native and AI infrastructure, this session presents a blueprint for an open source "Okta for agents"! composing Identity Providers, API gateways, and policy engines to bring the same governance we give humans to the systems acting on their behalf.

You hired 1000 people. It's time to learn their names.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Marcus Tenorio

Marcus Tenorio

Security Engineering Manager, Bitso
Mart is an Infrastructure Security Manager at Bitso, where he enjoys managing various engineers who teach him every day how to break things and become a better manager and engineer. Mart began his journey in cybersecurity trying to understand why so many people liked prime numbers... Read More →
Friday September 11, 2026 10:55 - 11:20 JST
Hall 1F
  Human-Agent Collaboration

10:55 JST

Workshop: From goose to GDK: Building Your Own Agentic Applications - Abhijay Jain, AAIF goose
Friday September 11, 2026 10:55 - 12:30 JST
In this workshop, we’ll talk about goose and goose development kit, and look at the building blocks that make it possible to build your own agentic applications with goose.

We’ll start with goose and the **Goose Reference Client (GRC)**, looking at how the reference client demonstrates the capabilities and patterns of the goose ecosystem. We’ll then dive into the **Goose Development Kit (GDK)** and explore how developers can use its APIs and libraries to incorporate goose capabilities into their own applications.

Through a step-by-step walkthrough and live examples, we’ll look at how the GDK can be used to work with model providers, stream model responses, handle tool calls, and build application-specific experiences on top of goose. We’ll also explore how the reference client and GDK fit together and where different layers of the goose stack make sense for different use cases.

By the end of the workshop, attendees will have a clearer understanding of goose, the role of the Goose Reference Client and GDK, and how they can start using the GDK as a foundation for building their own agentic applications and experiences.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Abhijay Jain

Abhijay Jain

Maintainer & Contributor, AAIF goose

Friday September 11, 2026 10:55 - 12:30 JST
Hall B
  Workshop

11:30 JST

The 3 AM Page: Turning Chaos Into Context With Bounded AI and Structured Evidence - Madhu Patel & Sudhanshu Sah, Adobe
Friday September 11, 2026 11:30 - 11:55 JST
AI-powered incident response sounds like the perfect use case for autonomous agents, but giving them unrestricted access to raw alerts and logs can quickly turn automation into hallucination. Whether you're debugging production outages or investigating failed deployments, engineers still spend hours manually correlating signals across disconnected observability tools.

In this talk, we'll break down the anatomy of a reliable agentic incident investigation system and show why structured incident context outperforms raw telemetry, how evidence enrichment improves reasoning, and why bounded context is critical for trustworthy AI agents.

We'll walk through production-ready patterns for building dependable operational agents:
1. Structured evidence gathering from Datadog, New Relic, Splunk, and Prometheus
2. Context engineering through alert correlation and deployment metadata
3. Long-term memory using historical incidents stored in a vector database
4. Human-agent collaboration that validates AI-generated RCAs and continuously improves future investigations.

Thus helping you reduce manual triage, lower MTTR, and build reliable, production-ready AI-driven incident response systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Madhu Patel

Madhu Patel

Software Engineer 2 @ Adobe, Adobe
I'm Madhu Patel, a Software Development Engineer at Adobe, where I work on large-scale distributed backend services for Creative Cloud and AI-powered platforms. I graduated from Indira Gandhi Delhi Technical University for Women, one of Asia's largest technical universities for women... Read More →
avatar for Sudhanshu Sah

Sudhanshu Sah

Machine Learning Engineer @ Adobe, Adobe
MLE with 5 years' experience at the intersection of GenAI, backend engineering, and cloud platforms. I own core GenAI services, building production-grade ML APIs/SDKs, and shipping 0→1 products from alpha to GA. Currently focused on cloud-native AI infrastructure: architecting deterministic... Read More →
Friday September 11, 2026 11:30 - 11:55 JST
Hall C
  Building Reliable Agent Systems

11:30 JST

MCP-Powered Crash Investigation: How 11 MCP Servers Help an AI Agent Debug Production Issues at Uber - Kriti Dangi, Uber
Friday September 11, 2026 11:30 - 11:55 JST
Debugging eats 42% of developer time — $300B lost globally every year. On an average, fixing an issue takes 15 days. Debug Assist does it in 30 minutes — issue alert to validated, reviewable PR.

Most AI debugging tools stop at root cause analysis. Debug Assist goes much further: it writes a fix, validates it in a loop till correct, and creates the PR. Example, It caught a crash at 5% rollout, landed the fix the same day — preventing it from reaching thousands of users. Built on LangGraph with 11 MCP servers, 5 plugins, and parallel subagents: Sourcegraph for code search, crash analytics, Jira, feature flags, Jaeger, and logging — all one protocol.

Debug Assist even works on user-reported bugs which have minimal information attached. A user complained of battery drain, and Debug Assist traced it to a hot-looping code path, producing an RCA from behavioral evidence alone.
Domain knowledge lives in markdown skill files in a plugin marketplace — any developer can contribute fix patterns with no code, no redeployment.

We'll share how we built this from ground up, scaled to 5,000 RCAs/month across 6 languages, the challenges we hit, and how we improved the acceptance rate from 5% to 30%.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kriti Dangi

Kriti Dangi

Senior Software Engineer, Uber, Uber
Senior software engineer on the App Quality and Production Observability at Uber. Spent 3 years working on crash analytics platform, before designing and deploying Debug Assist. I love to dance, swim and travel in my free time. You can often find me chatting away with friends!

Friday September 11, 2026 11:30 - 11:55 JST
Hall 1F
  MCPCon
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

12:05 JST

Your Agent Starts the Checkout. Then What? - Muskan Jain, Independent
Friday September 11, 2026 12:05 - 12:30 JST
Modern agent workflows rarely finish in a single tool call. Commerce, travel, healthcare, and enterprise operations all require multi-step, stateful, failure-prone transactions that span agents, tools, and time. MCP today excels at stateless tool invocation, but production systems demand more: resumability, idempotency, compensation, human-in-the-loop, and trust boundaries.

In this talk, we present a Stateful MCP architecture for long-running transactions, using Universal Commerce Protocol (UCP) checkout flows as a real-world case study. We’ll walk through patterns for durable context, agent coordination, transaction lifecycles, rollback strategies, and human approvals, and show how MCP can serve as the orchestration layer for multi-agent workflows that behave more like distributed systems than chatbots.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Muskan Jain

Muskan Jain

Software Developer, Independent
I'm an SDE-III at Walmart Global Tech India, currently pursuing an MTech in Artificial Intelligence from IISc Bangalore. While I work on platform engineering full-time, I'm deeply interested in applied AI—especially in making intelligent systems more accessible, open-source, and... Read More →
Friday September 11, 2026 12:05 - 12:30 JST
Hall C
  Agentic Commerce
  • Audience Level Any
  • Presentation Language English

12:05 JST

The Model and the Mask: An Actor's Method for Engineering Agent Character - Nick Howden-Steenstra, Independent
Friday September 11, 2026 12:05 - 12:30 JST
Every agent system is two things: the model, which you rent, and the mask - the character - which is yours. The industry keeps upgrading the model and expecting the mask to improve. It doesn't work that way.

I'm a LAMDA-trained actor turned agent engineer. This talk is the actor's toolkit applied to shipped systems. Case one: a comms pipeline in production at a major crypto protocol - the generating model does Stanislavski table-work (super-objective, through-action, lining) before writing a word; a separate director model audits it blind; and voice is scored by a Laban Movement Analysis classifier that grades the human-written corpus and the machine's output on the same instrument. Brand voice becomes a falsifiable measurement. Case two: the home lab - eleven agents built with a Stanislavski character method, orchestrated over MCP, running my actual work.

You'll leave with the model/mask distinction, a character pipeline you can copy, and the failure modes: drift, voice collapse, paint-by-numbers slop.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Nick Howden-Steenstra

Nick Howden-Steenstra

Agent-Systems Engineer, Independent
Nick Howden-Steenstra trained at LAMDA and spent years building characters on stage; now he builds them as infrastructure. At a major crypto protocol he made brand voice falsifiable - generation gated by Stanislavski table-work, output graded by a Laban Movement Analysis classifier... Read More →
Friday September 11, 2026 12:05 - 12:30 JST
Hall 1F
  Human-Agent Collaboration

13:40 JST

Stateful Sandboxes for Stateless Agents: Designing Durable Volumes for MCP Tool Workspaces - Rui Su, Juicedata
Friday September 11, 2026 13:40 - 14:05 JST
Agent sandboxes are often described as ephemeral, but real MCP tool workflows are not. Agents edit files, install dependencies, run tests, download inputs, generate reports, and resume after failures. When workspace state is treated as disposable, reproducibility, isolation, and debugging become unnecessarily painful.

This talk presents a practical framework for designing durable volumes in agent sandboxes. Through a structured checklist — covering lifecycle management, tenant isolation, quotas, snapshots, read-only sharing, dependency caches, artifact retention, remount recovery, and audit trails — attendees will learn how to reason about workspace state systematically.

We then map these requirements to Kubernetes PersistentVolumes and explore the tradeoffs using JuiceFS CSI as a concrete open-source example. JuiceFS is used for its strong Kubernetes integration and snapshot capabilities, though the framework applies equally to local containers, serverless environments, and remote tool sandboxes.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Rui Su

Rui Su

Co-founder, Juicedata, Inc.
Rui Su is the co-founder of JuiceFS, an open-source distributed file system built on object storage.
Friday September 11, 2026 13:40 - 14:05 JST
Hall C
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

13:40 JST

Workshop: Delegated Authorization for AI Agents: Build an Agent with Fine-Grained Permissions - Sohan Maheshwar, AuthZed
Friday September 11, 2026 13:40 - 15:15 JST
DevOps and Platform teams now work with hundreds of AI Agents in their internal systems. These Agents usually run with credentials that can touch everything, including your production servers. This could lead to problems.

This workshop will teach you how to add delegated authorization to your AI Agents, at scale.

We'll build a DevOps deploy agent on goose - the open-source agent from the Agentic AI Foundation and then give it fine-grained permissions using Relationship-Based Access Control (ReBAC). Along the way you'll get hands-on with the Google Zanzibar model of fine-grained authorization (ReBAC) and why it fits AI agents: scoped delegation, expiring grants, instant revocation, and hierarchical permissions where revoking staging access automatically suspends production too, something role-based systems can't express cleanly.

This is a self-guided, hands-on workshop, and everything runs locally with open-source tooling.

Prerequisites:
  • Docker (can build a GitHub devcontainer as well)
  • Python 3.10+
  • goose installed, plus an API key for any LLM goose supports

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Sohan Maheshwar

Sohan Maheshwar

Lead Developer Advocate, AuthZed
Friday September 11, 2026 13:40 - 15:15 JST
Hall B
  Workshop

14:15 JST

What's Actually Running in Your Coding Agent: The Shadow AI Stack - Alexander Frazer, Runlayer
Friday September 11, 2026 14:15 - 14:40 JST
"Every MCP server, skill, and plugin in your coding agent is code or instructions you never really reviewed, running with your access to your database, your repos, and your keys. Three different ways in, and almost nobody is watching any of them."

Most of the agent security conversation is about prompt injection. Meanwhile there are three underserved vectors sitting right inside the tools you use every day:

- **MCP servers** run with the same access you have. One can look clean when you approve it and change its behavior later, or pull in a compromised dependency on the next run.
- **Skills and instruction files** (`SKILL.md`, `AGENTS.md`, `CLAUDE.md`, rules files) are just text. Nothing to install, nothing to flag. They quietly reshape what your agent does, and hidden instructions, zero-width characters, and pipe-to-shell tricks ride in the same way.
- **Plugins** bundle the first two together and ship through marketplaces with uneven vetting, so a single install can bring in both an MCP server and a skill you never opened.

I'll show where each one lives on disk, why the usual tooling misses it.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Alexander Frazer

Alexander Frazer

Founding Security Engineer, Runlayer
Alexander Frazer is a Founding Security Engineer at Runlayer, where he works on securing AI agents and the MCP ecosystem. He chairs the AAIF Security & Privacy Working Group, leading the effort to build community consensus around agentic security and privacy standards and best practices... Read More →
Friday September 11, 2026 14:15 - 14:40 JST
Hall C
  Building Reliable Agent Systems

14:15 JST

What's Missing in the Open Agentic Stack: Lessons From OSS Integration - Tatsuya Sato & Satoshi Ito, Hitachi, Ltd.
Friday September 11, 2026 14:15 - 14:40 JST
In the agentic AI space, standards like MCP and A2A and a growing OSS ecosystem are evolving. Yet building a real multi-agent system requires more than a single framework or protocol. It involves integrating multiple OSS components and adjacent specifications across areas such as agent-to-agent communication, orchestration, authentication, and observability. There is limited shared understanding of how to combine them and what architectural considerations and integration gaps emerge.

This session shares our work on organizing the landscape of OSS-based agentic AI stacks, and on designing architectures built around MCP, A2A, and representative OSS, including prototyping through reference implementations. We explore several architectural patterns from a whole-system perspective. With enterprise use in mind, our scope also covers cross-cutting concerns such as authentication and observability. (LLMs are currently proprietary.)

Through this work, we examine what each OSS layer solves and does not solve, and highlight cross-layer concerns that emerge only when components are integrated as a multi-agent system. We share these observations with a demo of the reference implementation.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Tatsuya Sato

Tatsuya Sato

Chief Researcher, Hitachi, Ltd.
Tatsuya Sato is a Chief Researcher at Hitachi, Ltd. His research focuses on agentic AI platforms, blockchain platforms, system operations, and OSS. He has been an active OSS contributor for many years. He has contributed extensively to the LFDT and Hyperledger communities and continues... Read More →
avatar for Satoshi Ito

Satoshi Ito

Researcher, Hitachi, Ltd.
The speaker is a researcher and engineer at Hitachi, engaged in open-source software development. Initially focused on blockchain technologies, they have worked on Self-Sovereign Identity (SSI), Decentralized Identifiers (DID), and NFTs. In recent years, their research has shifted... Read More →
Friday September 11, 2026 14:15 - 14:40 JST
Hall 1F
  Open Source Tools

14:50 JST

Building an Agentic Software Factory - Valentin De Matos, Delphi
Friday September 11, 2026 14:50 - 15:15 JST
AI coding agents are useful in isolated demos; the hard problem is making them controlled enough to ship production code. At Delphi, we built an agentic software factory that turns product specs and engineering tickets into scoped pull requests, then routes those PRs through reviewer agents, CI, browser verification, and merge gates.

This session breaks down the operating system around the agents: how we package repo context, encode architectural rules, isolate attempts in worktrees, make agents cite source-of-truth patterns, prevent drift from legacy code, and decide what should stay human-controlled. I will also cover failure modes we hit in production: stale context, over-broad diffs, flaky tests, review spam, false confidence, and agents copying the wrong pattern.

Attendees will leave with a practical blueprint for moving from “agent writes code” to a controlled delivery pipeline for agent-generated software.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Valentin De Matos

Valentin De Matos

AI Engineer, Delphi
AI Engineer at Delphi AI in San Francisco, Valentin builds production AI systems for digital twins, agent behavior, and AI-assisted engineering workflows.
Friday September 11, 2026 14:50 - 15:15 JST
Hall C
  Agentic Engineering

15:35 JST

Governed Agent Autonomy: Building a Control Plane for Agentic Systems - Nnenna Ndukwe, Qodo AI
Friday September 11, 2026 15:35 - 16:00 JST
We see how quickly AI coding tools and agent harnesses are improving. But how can the surrounding system keep that autonomy governable once an agent starts planning, executing tools, changing files, and consuming budget on a team’s behalf?

In this talk, I break down a technical case study based on a real AI coding control-plane architecture and show how serious systems structure autonomy through explicit boundaries: plan gates, permission controls, trust review, independent verification, and runtime observability. I will walk through the patterns and production-grade examples, explain why telemetry and quota tracing are integral to code governance, and show why integrity failures can still happen even with strong coding workflows.

This session gives engineering leaders and practitioners a framework for evaluating AI coding tools. The goal is to achieve agent governance that teams can trust, audit, and scale.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Nnenna Ndukwe

Nnenna Ndukwe

AI Developer Relations Engineering Lead, Qodo AI
Nnenna Ndukwe is a Developer Relations Engineering Lead and Software Engineer, passionate about AI. With 9+ years in industry, she's a global AI community architect championing engineers to build in emerging tech. She studied Computer Science at Boston University and is a proud member... Read More →
Friday September 11, 2026 15:35 - 16:00 JST
Hall C
  Building Reliable Agent Systems

15:35 JST

Trace-Based Evaluation of Open-Weight Coding Agents: Measuring Real Agent Behavior - Kota Tsuyuzaki, NTT DOCOMO BUSINESS, Inc.
Friday September 11, 2026 15:35 - 16:00 JST
Teams are moving coding agents onto self-hosted open-weight models to control inference cost, and real sessions routinely span tens of turns and hundreds of thousands of tokens. But the only common signal for judging those models is the static accuracy benchmark, which says little about how a model behaves across a real, multi-turn session.

This session closes that gap with a trace-based evaluation method built on open technology: OpenTelemetry for capture and MLflow for analysis. Through a case study tracing real Claude Code sessions on a 120B-class open-weight model and a frontier model, it surfaces behaviors no leaderboard reports. For example, in the sessions we traced, the model's logged reasoning recorded a user's constraint, and the same turn violated it. An accuracy score sees only the wrong action; the trace shows the model had the rule in hand and did not follow it.

Attendees leave with a reusable observability architecture for their own agents, metrics that go beyond accuracy, and a clear view of what running a coding agent on open weights actually costs, in reliability and not only in dollars.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kota Tsuyuzaki

Kota Tsuyuzaki

Engineering Manager, NTT DOCOMO BUSINESS, Inc.
Kota joined Nippon Telegraph and Telephone Corporation in 2010 and has been a core developer of OpenStack Swift, the open-source on-premise cloud storage. He later moved into the AI/HPC area, working with the Lustre file system and Slurm Workload Manager. In 2023 he joined NTT DOCOMO... Read More →
Friday September 11, 2026 15:35 - 16:00 JST
Hall B
  Evals & Testing

15:35 JST

Built for Two: What Design Systems Are Missing When AI Agents Become the Third User - Karen Ng, Endor Labs
Friday September 11, 2026 15:35 - 16:00 JST
AI coding agents now generate UI from component libraries. Most teams write component markdown files and expect agents to take it from there. The docs were complete. Agents still got it wrong.

Sitting with engineers in code review, the same things kept surfacing: the agent picked a visually similar but wrong component; it invented props; it read "Tag" as a UI primitive when the codebase meant a security concept. One author. No review process. A library too large for any agent to navigate without a map.

Not a component library talk. A talk about what the workflow was missing when the docs were already done.

I'll walk through the workflow that came out of those sessions: why a component file needs more than one author before agents can trust it; how an index changes what agents can find; and the naming decision that was invisible to humans and catastrophic for agents. Including the moment the team realized the problem wasn't the docs.

You'll leave with one reframe: a component library has always had two users. It now has a third. Here is what the workflow looks like when you build for all three.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Karen Ng

Karen Ng

Principal Product Designer, Endor Labs
Karen Ng designs AI-driven products for security engineers and oncologists. She leads UX at Endor Labs, where she has built AI agent governance, code scanning, and security workflow products from scratch. A three-time internal hackathon winner, she prototypes in code as readily as... Read More →
Friday September 11, 2026 15:35 - 16:00 JST
Hall 1F
  Human-Agent Collaboration

16:10 JST

Beyond Prototypes: Building Enterprise-scale Agentic Systems - Kevin Dubois, IBM & Mauricio "Salaboy" Salatino, Dash0
Friday September 11, 2026 16:10 - 16:35 JST
There has been a lot of progress in agentic frameworks (such as Langchain, CrewAI, Autogen, among others), most of them written in and targeting Python developers. These frameworks allow you to build multi-agent systems that are co-located inside the same application.

That works well for fast experimentation and building prototypes, but production systems live or die on scalability, security, observability and governance. At the end of the day agents are software that we need to ship, run an operate on production, much like any other type of enterprise software.

In this session we will show how to build distributed agentic, MCP-connected systems that are ready for enterprise scale. We'll cover real production patterns such as agentic orchestration patterns, MCP interoperability, agent/tool coordination, observability and tracing and enterprise integration reusing our existing platforms.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Mauricio Salatino

Mauricio Salatino

Ecosystem Engineer, Dash0
Mauricio Salatino, also known as salaboy, works for Dash0 as an Open Source and Ecosystem Engineer. He is a Java Champion, CNCF TOC member, and international Keynote speaker. Before working at Dash0, Mauricio spent the last 15 years building tools for Cloud-Native developers at companies... Read More →
avatar for Kevin Dubois

Kevin Dubois

Sr Principal Developer Advocate, IBM
Kevin Dubois is often featured as a (keynote) speaker at conferences around the world, where he shares his passion and knowledge about developer experience, Agentic AI, open source, cloud native development and Java. He is also an author, java Champion, and an accomplished software... Read More →
Friday September 11, 2026 16:10 - 16:35 JST
Hall C

16:10 JST

Build Your Own Open-Source Claude Code With Local LLMs - Daniel Oh, Red Hat
Friday September 11, 2026 16:10 - 16:35 JST
AI coding assistants are becoming part of everyday development, but many enterprises cannot send source code, internal APIs, or project context to external services. They need the productivity of coding agents while keeping models, repositories, prompts, and actions under their control.

In this session, we’ll show how to build an open-source, Claude Code-like assistant using local or privately hosted LLMs, Models as a Service, OpenCode, and AI guardrails. Developers will be able to explore a codebase, generate changes, review explanations, and trigger controlled actions without exposing sensitive data.

We’ll also cover the guardrails needed for real use: secrets protection, data leakage checks, unsafe command blocking, insecure code detection, and policy-based action control.

You’ll leave with a practical blueprint for building a private, secure coding assistant that improves developer productivity without compromising trust, privacy, or compliance.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Daniel Oh

Daniel Oh

Senior Principal Developer Advocate, Red Hat
Java Champion, CNCF Ambassador & TAG DevEX Co-Chair, AAIF Ambassador, Microsoft MVP, Developer Advocate, Technical Marketing, Keynote Speaker, Published Author
Friday September 11, 2026 16:10 - 16:35 JST
Hall 1F
  Open Source Tools

16:10 JST

Workshop: Building Secure & Discoverable Agent Infrastructure with agentgateway & agentregistry - Mehmet Hilmi Emel, ACEDEMAND IT Consulting Services
Friday September 11, 2026 16:10 - 17:45 JST
As AI agents move from local tests to real-world use, developers face a big problem: How do we easily find, direct, secure, and track AI traffic going to MCP servers? Standard API gateways do not understand LLM tool calls, and writing static lists of agents is too hard to manage.

In this hands-on workshop, we will connect AI agents and external tools easily using the standalone versions of Solo.io’s agentgateway and AgentRegistry. We will show you how to build a strong control layer for the Model Context Protocol (MCP) using simple local tools like Docker.

Participants will learn how to:

  • Discover: Run AgentRegistry locally to list, version, and find MCP servers dynamically.
  • Control: Set up agentgateway as a smart proxy to catch and manage agent requests.
  • Secure: Add AI-specific rules, like rate limits and basic access control, to agent tool calls.
  • Observe: See exactly which tools the agents are using and how fast they respond.

Join us to learn how to build a safe, easy-to-run foundation for your multi-agent systems right on your laptop!

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Mehmet Hilmi Emel

Mehmet Hilmi Emel

AI Engineer, Acedemand IT Consulting
As a AI System Engineer, I specialize in securing AI agent interactions at the infrastructure level. I have extensive experience designing AI-driven MCP architectures and tackling the complex security challenges of GenAI on Kubernetes. I build open-source blueprints for zero-trust... Read More →
Friday September 11, 2026 16:10 - 17:45 JST
Hall B
  Workshop

17:20 JST

From Logs to Proofs: Cryptographic Compliance for Agentic Payments - Aggre Hiroyuki, Lemma Oracle
Friday September 11, 2026 17:20 - 17:45 JST
Most agentic payment systems enforce compliance through post-hoc log monitoring: detection after the fact, not prevention. This talk argues that cryptographic proof can replace compliance theater: an agent generates a zero-knowledge attestation that its intended payment satisfies policy constraints before execution.

We present Trust402, an open-source protocol demonstrating this model in production. Agents produce zero-knowledge proofs that verify spend limits, role permissions, and regulatory constraints. Circuits are proof-system-agnostic, enabling post-quantum upgrades without policy-layer changes.

Concrete takeaways:
  • The wrapFetchWithProof pipeline: ZK proof generation composes into x402. No valid proof, no payment
  • The role-spend-limit circuit: LessEqThan constraints mapping role membership and spend limits to provable gates
  • Verification: ephemeral proofs, on-chain attestation per transaction
  • Trade-offs: proving time vs. trust model, circuit expressiveness vs. policy complexity

Attendees leave understanding where ZK proofs fit in agentic payments, what's production-ready, and where the hard problems remain.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Aggre Hiroyuki

Aggre Hiroyuki

CTO, FRAME00, Inc.
CTO at FRAME00, Inc., building "Lemma", a verifiable trust infrastructure for AI agents and payments. Works at the intersection of zero-knowledge proofs (Groth16, Circom), blockchain protocols, and autonomous agent systems. Creator of Trust402, an open-source ZK payment attestation... Read More →
Friday September 11, 2026 17:20 - 17:45 JST
Hall 1F
  Agentic Commerce

17:20 JST

Your Agent Inherits Code, Not Decisions: How To Use Context Graphs for Intent - Nyah Macklin, Neo4j
Friday September 11, 2026 17:20 - 17:45 JST
Technical debt lives in code. Cognitive debt lives in your head. Intent debt, Addy Osmani's term for the goals, constraints, and rationale behind a decision that never got written down, lives nowhere. It's the one debt agents can't pay down: an agent drafting a spec fills the gap with a confident guess, and the guess is usually wrong.

This talk covers building context graphs that capture the why: connecting decisions to the document threads and ticket discussions where humans actually made them, then exposing that structure to agents alongside code and data. I'll draw on an open-source toolkit that bootstraps context graphs from existing work artifacts (workspace threads, ticket histories) and the modeling questions that turned out hard: what separates a decision from a discussion, and when capture should run as a background process versus an explicit act.

Vendors now race to pitch "context layers for agents." I'll argue the differentiator isn't collection but connection: rationale linked to the entities, people, and prior choices it affects: queryable, not just retrievable.

You'll leave with patterns for making the why available to every agent that touches your work.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Nyah Macklin

Nyah Macklin

Sr. Developer Advocate, Artificial Intelligence, Neo4j
Nyah Macklin is a seasoned researcher and speaker on AI, ML, Ethics, Governance, and Responsibility. Nyah serves as a Sr. Developer Advocate at Neo4j, specializing in context engineering, knowledge graphs, and AI-driven developer tooling where Nyah has built high-impact technical... Read More →
Friday September 11, 2026 17:20 - 17:45 JST
Hall C
  Agentic Engineering
 
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.