Video by FINOS via YouTube
Hosted by Karl Moll, the Q4 2026 FINOS All Community Call reveals massive membership growth and game-changing project updates across the financial open-source ecosystem. Watch presentations from industry leaders at RBC, NatWest, Morgan Stanley, and ControlPlane as they break down how banks are collaborating to solve the hardest problems in tech risk. Highlights include the rapid rise of OSERA for mutualized security patching, RBC’s deployment of CALM for architecture-as-code, the launch of the Distinguished Engineer SIG, and a live look at the "Governance as Code" Steelthread combining Fluxnova and AIGF.
🕒 Timestamps:
0:00 – Welcome to the Q4 2026 Update
1:14 – FINOS Hits 110+ Members & OSFF Preview
3:46 – OSERA: The Open Source Security Patch Exchange
23:51 – SDLC Common Controls Hits Incubation
27:47 – RBC’s Adoption of Architecture-as-Code (CALM)
31:43 – Connecting Top Talent: Distinguished Engineer SIG
38:20 – CDM 7.0 Release & New Developer Courses
42:11 – FINOS AI Fund: The Governance as Code Steelthread
47:00 – OSFF, FluxnovaCon, and the Global Fall Hackathon
📊 The Problem: Isolated Security & Manual GovernanceRedundant Security Overhead:
Financial institutions waste resources independently fixing the exact same vulnerabilities in open-source dependencies. Document-Trapped Governance: AI policies live in static documents, and compliance evidence is gathered manually after deployments, making it impossible to safely govern fast-moving autonomous AI agents. Fragmented SDLC Policies: Disconnected corporate SDLC policies create operational toil and drift, blocking efficient cross-firm collaboration.
🏗️ The Solution: Mutualized Tech Risk & Executable PoliciesOSERA Exchange:
A standardized platform where 6 premier member banks mutualize the cost of patching open-source software and enforce strict remediation standards as code before patches hit production. Governance as Code Pipeline: The FINOS AI Fund combines AIGF (what to govern), CALM (where it applies), Common Cloud Controls (which controls), and Fluxnova (how it runs) into a single, testable CI/CD pipeline. Distinguished Engineer SIG: A trusted forum for senior technical leaders to collaborate cross-organizationally, offer pro-bono reviews for charities, and host inclusive engineering events for mid-career women.
⚙️ Why This Matters for Financial EngineeringAI-Speed Cyber Defense:
Standardizing and sharing patches through OSERA helps banks respond to AI-accelerated cyber threats much faster than working in silos. Continuous Evidence: Converts static compliance into runtime enforcement with a human-in-the-loop, generating automatic, machine-readable audit trails for high-risk financial AI deployments.
🌐 More about FINOS: https://www.finos.org/
📧 Join our newsletter: https://www.finos.org/sign-up
🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts
LinkedIn: https://www.linkedin.com/company/finosfoundation
#FINOS #OSFFNewYork #OpenSource