In this clip from OSFF London 2026, Dov Katz (Morgan Stanley) reframes how engineering leaders should evaluate developer productivity in the AI era. Rather than measuring raw output through merged pull requests, Dov demonstrates how enterprise security productivity is quantified by burning down CVEs across thousands of transitive software dependencies.
🌐 More about FINOS: https://www.finos.org/
📧 Join our newsletter: https://www.finos.org/sign-up
🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts
LinkedIn: https://www.linkedin.com/company/finosfoundation
Video by Open Data Science and AI Conference via YouTube
What does it mean to be a data scientist in the age of AI agents?
In this episode of the ODSC Ai X Podcast, Sheamus McGovern sits down with Eric Ma, Data Science Leader at Moderna, to explore how AI coding agents are changing the way data scientists work—and why human expertise matters more than ever.
Eric shares practical insights on agentic data science, coding agents, loop engineering, evaluation frameworks, fine-tuning, AI engineering, and why data scientists should focus on the science of measurement rather than trying to become full-stack software engineers.
00:00 Why Data Scientists Should Focus on Measurement
00:56 Introduction and ODSC AI West
02:10 Meet Eric Ma: From Bioengineering to Data Science
03:44 What Agentic Data Science Means in 2026
05:07 Delegating Analysis to Coding Agents
06:13 Why Data Scientists Still Need to Work by Hand
08:13 What Should Data Scientists Still Do Themselves?
10:14 Slowing Down and Verifying AI-Generated Analysis
12:51 How AI Coding Tools Free Up Cognitive Capacity
13:46 Using AI to Learn New Technical Domains
15:54 Does AI Widen the Gap Between Experts and Beginners?
18:10 The Most Important AI Skills for Data Scientists
20:12 Loop Engineering and Precise Agent Instructions
22:12 Thinking in Systems and Designing Feedback Loops
24:35 What Is an Agentic Harness?
25:01 Coding Agents, Marimo Notebooks, and Pair Programming
26:29 Building a Personal Knowledge Base with AI
29:31 When Should Teams Fine-Tune an LLM?
30:31 Cost, Privacy, and Security Considerations
32:19 Common Failure Modes in Agentic Data Science
34:03 Should Data Scientists Become Full-Stack Engineers?
35:17 Why Measurement Is the Core Data Science Skill
36:52 Data Scientists vs. AI Engineers
38:23 Essential Practices for Working with AI Agents
40:25 Will the Data Scientist Role Still Exist in 10 Years?
41:34 How Important Are Engineering Skills for Data Scientists?
42:09 Final Takeaways and Closing
Visit our website and choose the nearest ODSC event to attend and experience all our training and workshops: https://odsc.ai
Use the code podcast for 10% off any ticket
To watch more videos like this, visit https://aiplus.training
Sign up for the newsletter to stay up to date with the latest trends in data science: https://opendatascience.com/newsletter/
Follow us online!
• Facebook: https://www.facebook.com/OPENDATASCI
• Instagram: https://www.instagram.com/odsc/
• Blog: https://opendatascience.com/
• LinkedIn: https://www.linkedin.com/company/open-data-science/
• X (twitter): https://x.com/_odsc
Discover how AAF moved from a two-system landscape to a three-system landscape with SAP Cloud ERP to support ERP harmonization, governance, and future growth.
Join host Yannick from SAP Product Success with Uwe Detroy from AAF, Hans Tscherwitschke from implementation partner XEPTUM, and Calin Cernea from SAP Product Management as they explore AAF’s real-world transformation journey. AAF, also known as American Air Filter and part of Daikin Group, needed to consolidate multiple standalone ERP systems, standardize processes across Europe, and create a scalable foundation for continued rollout and innovation.
In this Expert Talk, you’ll:
✔️ Learn why AAF chose SAP Cloud ERP to harmonize ERP processes across European entities
✔️ Understand the business challenges behind fragmented systems, manual alignment, and master data complexity
✔️ Hear why the two-system landscape became difficult for transport management, governance, and rollout planning
✔️ See how AAF, XEPTUM, and SAP approached the move to a three-system landscape
✔️ Explore how test data conversion helped support continuity in the new test environment
✔️ Learn how SAP Cloud ALM, transport management, and localization capabilities can support scalability
✔️ Hear how the new landscape helps AAF prepare for faster innovation, future rollouts, and AI capabilities with Joule
Whether you’re running SAP Cloud ERP, evaluating a 2SL to 3SL migration, or supporting a multi-entity ERP rollout, this Expert Talk shows how a modern system landscape can help organizations move from technical complexity to a more flexible, governed, and innovation-ready ERP foundation.
Explore SAP Cloud ERP:
https://www.sap.com/products/erp/s4hana.html
Chapters:
00:13 – Welcome and AAF transformation story
01:29 – Why AAF chose SAP Cloud ERP
03:23 – Standardizing processes across Europe
07:16 – Why the 2SL setup became challenging
10:52 – Moving from 2SL to 3SL
13:17 – The 3SL conversion journey with XEPTUM
20:19 – New capabilities, scalability, and AI readiness
25:28 – Key takeaways and closing
Follow us on social:
LinkedIn: https://www.linkedin.com/company/sap/
Instagram: https://www.instagram.com/sap
Facebook: https://www.facebook.com/SAP/
Threads: https://www.threads.com/@sap
About SAP:
As a global leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience. For more information, visit: https://www.sap.com/index.html
On MacBreak Weekly, Mikah Sargent, Andy Ihnatko, and Jason Snell talk about Apple’s Q3 2026 earnings, why Apple’s stock took a slide following their earnings report, and why investors are worried about supply issues with Apple’s products in the future.
You can find more about TWiT and subscribe to our full shows at https://podcasts.twit.tv
Subscribe: https://twit.tv/subscribe
Products we recommend: https://www.amazon.com/shop/twitnetcastnetwork
TWiT may earn commissions on certain products.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access.
Join today: https://twit.tv/clubtwit
Join our TWiT Community on Discourse: https://www.twit.community/
About us:
TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce over 30 hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, Windows Weekly, Security Now, Intelligent Machines, and more.
In the tenth and final tutorial of the Mastering MLflow for GenAI series, Jules Damji (Databricks) builds a multi-agent supervisor pattern with LangGraph and MLflow, routing queries to specialized agents, synthesizing results, and evaluating the full workflow with granular traces and scorers.
This session simulates a Databricks Agent framework–style supervisor using LangGraph’s StateGraph for acyclic, state-machine-like execution. The use case is a FEMA disaster-response assistant over roughly simulated records.
What You’ll Learn:
🔹 Multi-agent supervisor pattern: a supervisor fans out queries to specialized agents, then returns one cohesive answer
🔹 Supervisor router (Node 1): classify natural-language queries and route to a Genie-like agent, a knowledge assistant, or both
🔹 Genie-like agent (structured data): Natural Language → SQL with an LLM chain, executed against FEMA data via Python Pandas + SQLite
🔹 Knowledge-based assistant (unstructured data): document retrievers, OpenAI embeddings, and cosine similarity over in-memory files like PDFs
🔹 Synthesizer (Node 3): combine one or both agent outputs into a single response
🔹 Granular MLflow tracing: define agent tools: query, tool, embedding, and retriever functions with MLflow span markers
🔹 Built-in scorers: use MLflow’s 60+ scorers for answer relevance, safety, and guideline adherence on an evaluation dataset
🔹 Custom routing accuracy: implement a customer MLflow @scorer metric that compares supervisor fan-out against ground truth
🔹 Extra practice: supplementary notebooks for Deep Agents and CrewAI multi-agent frameworks
Resources:
🔗 Notebook 1.10: https://github.com/dmatrix/mlflow-genai-tutorials/blob/main/10_multi_agent_supervisor.ipynb
🎥 Full Series Playlist: https://youtube.com/playlist?list=PLaoPu6xpLk9EI99TuOjSgy-UuDWowJ_mR
The Hugging Face research team discusses the paper "Understanding Reasoning from Pretraining to Post-Training" which discovers a joint scaling law for pre-training and reinforcement learning.
Paper link: https://huggingface.co/papers/2607.16097
Dov Katz (Managing Director at Morgan Stanley) presents a deep-dive walkthrough of the Risk Navigator tool built for the OSERA (Open Source Enterprise Resiliency Alliance) initiative. He demonstrates how platform engineering and security teams can parse complex Software Bills of Materials (SBOMs), prioritize back-patching requirements across thousands of repositories, and use automated OpenRewrite pipelines to burn down transitive CVE vulnerabilities at enterprise scale.
🗽 Catch Us in New York! Ready to secure your software supply chain and scale automated patch management? Join the enterprise security community at OSFF New York on November 4–5, 2026.
🎟️ Register Now: https://hubs.ly/Q04n_bZL0
🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C
🕒 Timestamps:
0:00 Unconference Kickoff: Why Banks Are Commissioning Shared Back-Patches
1:00 Navigating Shared Infrastructure Priorities and Commissioned Capacity
1:39 Introducing Risk Navigator: Mapping Enterprise Dependency Data Sets
2:30 Quantifying Productivity: Using Reduced CVE/CWE Counts over Merged PRs
3:35 Navigating Transitive Dependencies: High-Leverage Upgrades vs. Developer Friction
4:20 Spec-Driven Local Deployments: Tailoring Risk Navigator for Corporate Estates
5:30 Dashboard Walkthrough: Filtering Patch-Level Opportunities and Version Offsets
6:10 Setting CVSS Vulnerability Thresholds and Evaluating Active Exploits
7:20 Identifying "Dead Ends": When Software Requires Commissioned Back-Patching
8:00 The Version-Bumping Shopping Cart: Generating OpenRewrite YAML Automations
8:41 Back-Patch Priority Matrices: Mutualizing Morgan Stanley, Citi, and Deutsche Bank Lists 9:30 Targeting Amplifiers: Base Container Images and Transitive Spring Framework CVEs
10:00 Privacy and Execution: Running Static JSON Data Pipelines Privately Behind Firewalls
10:40 Transitioning to Scale: Remediation Workflows with Moderne
📊 The Problem: The Transitive Dependency Patching Nightmare
When security scanners flag tens of thousands of Common Vulnerabilities and Exposures (CVEs) across an enterprise codebase containing 60,000 source repositories, platform teams face paralysis. Sending thousands of individual developers to manually add transitive overrides creates massive technical debt that becomes impossible to unwind when official patches release. Furthermore, many critical enterprise dependencies hit "dead ends"—where upstream maintainers have stopped supporting legacy versions—leaving banks with high-risk vulnerabilities and no clear upgrade path.
🏗️ The Solution: Risk Navigator & OpenRewrite Mutualization
Dov Katz demonstrates how financial institutions can use Spec-Driven decision support tools to prioritize remediation:
High-Leverage Amplifiers: Locating core framework and base container image dependencies (such as Spring or base Linux RPMs) where a single patch closes thousands of downstream vulnerability touchpoints simultaneously.
Dead-End Identification: Distinguishing between software that can be immediately bumped to minor/patch versions versus legacy packages requiring joint industry-commissioned back-patching.
Automated Shopping Carts: Selecting vetted dependency targets and exporting OpenRewrite YAML scripts to automatically execute version updates across thousands of repositories.
⚙️ Why This Matters for Financial Engineering
Quantifying True Security ROI: Shifting engineering metrics away from vanity signals (like merged PR counts) to measurable security burn-down rates (reducing active CVE touchpoints from 500,000 to 100,000).
Local Data Privacy: Running static, spec-driven analysis engines completely offline inside corporate environments without sending internal dependency trees or proprietary code to external APIs.
🌐 More about FINOS: https://www.finos.org/
📧 Join our newsletter: https://www.finos.org/sign-up
🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts
LinkedIn: https://www.linkedin.com/company/finosfoundation
Support us on Patreon and get an ad-free RSS feed with some early episodes. https://www.patreon.com/LateNightLinux
Initial Steam Machine reviews are broadly positive, Jellyfin is losing some key project leaders, Sony deletes more movies that people "bought", why you probably shouldn’t wipe your phone when the US authorities ask for access, Graham repurposes some discarded crypto hardware to play arcade games, Félim gets that old game working, a great terminal music player, and more.
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept All”, you consent to the use of ALL the cookies. However, you may visit "Cookie Settings" to provide a controlled consent.
This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Cookie
Duration
Description
cookielawinfo-checkbox-analytics
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional
11 months
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy
11 months
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.