Sebastien Rousseau

CATEGORY

Open source

OSS in regulated banking — supply-chain trust, Rust, MCP, the projects banks rely on and ship.

3 tags

Tags in this category

  • Open source — 24 articles

    Open-source software in regulated banking — supply-chain risk, attestations, contribution policy, and the OSS projects banks rely on.

  • Rust — 17 articles

    Rust in banking infrastructure — memory safety, performance, and the ecosystem of crates relevant to financial workloads.

  • MCP — 2 articles

    Model Context Protocol — how AI clients discover and consume banking content as structured resources.

Recent articles in Open source

INFRASTRUCTURE & CRYPTOGRAPHY

KyberLib and the Post-Quantum Banking Migration in 2026: From Standards to Code

KyberLib turns the post-quantum banking migration from policy paper into inspectable Rust — FIPS 203 ML-KEM key encapsulation, hybrid classical-plus-quantum handshakes, no_std compilation for HSMs, crypto-agile abstraction boundaries, and the DORA Article 5 governance evidence boards now need.

APPLIED AI

CloudCDN: An Open-Source Blueprint for the AI-Native Edge in 2026

CloudCDN is an open-source blueprint for the AI-native edge — a zero-trust MCP gateway with 42 tools, atomic Durable Objects rate limiting, WebAuthn passkeys, signed URLs, SLSA Level 3 provenance, and 3,185 tests at 100% coverage, mapped to DORA, BCBS 239, and Basel III.

APPLIED AI

The Cloud Native Banking Index in 2026: DORA, Platform Engineering, Sovereign Cloud, and Operational Resilience

An engineering blueprint for cloud-native banking in DORA audit phase. Five platform-engineering primitives — Kubernetes paved roads, Backstage portal, GitOps via ArgoCD, Open Policy Agent admission, OpenTelemetry end-to-end — produce Article 8 register evidence at the speed of the pipeline. Tested exit-execution annually for CTPP-dependent CIFs against BIA-derived RTO targets. Sovereign-cloud options (AWS European Sovereign Cloud, Microsoft EU Data Boundary, Bleu, Thales / S3NS) addressed as engineering decisions, not branding.

APPLIED AI

The Quantum-Safe Banking Index in 2026: Post-Quantum Cryptography, QKD, Crypto-Agility, and Harvest-Now-Decrypt-Later Risk

An index framework for measuring quantum-safe banking readiness in 2026: cryptographic bill of materials, hybrid TLS deployment, NIST FIPS 203 / 204 / 205 migration progress, crypto-agility primitives, and harvest-now-decrypt-later exposure across long-lived confidential data. The Board-Level Quantum Scorecard defines four exact percentages — inventory completeness, HNDL exposure, NIST migration progress, crypto-agility readiness — that turn project statuses into supervisory-ready evidence.

APPLIED AI

The Agentic AI Index for Banks in 2026: Measuring Autonomy, Governance, Auditability, and Business Impact

An engineering blueprint for agentic AI in tier-1 banks: classify by permissions not intelligence, treat every production agent as an SR 11-7 / SS1/23 model from day one, and build the five-component control plane — OAuth-scoped service accounts, deterministic semantic routing, OPA policy gates, immutable WORM audit logs, and a tested kill switch — that turns autonomous workflows into auditable evidence.

APPLIED AI

Agentic Payments in Banking: Consent, Liability, and the New Payment UX in 2026

Agentic payments crossed from concept to live transaction in 2026 — Mastercard and Rabobank executed a Netherlands AI-agent payment via Agent Pay, AP2-style cryptographic mandates are emerging, and HM Treasury says payment-services regulation must adapt. The banking architecture question is consent, identity, liability, and pre-settlement evidence.

APPLIED AI

Quantum Lattice Crypto: Bug in Chen's LWE Attack

Following my recent article on the [Challenges in Quantum Algorithms for Lattice-Based Cryptography][00], I am compelled to provide an update on the latest developments in [Yilei Chen's research…