Payments
ISO 20022, end to end: pain.001, pacs.008, camt.053, and acmt.001. Adopt one library at a time.
Explore the ISO 20022 libraries
Wholesale Payments & AI Leader · Author of the EPAA Quantum-Safe Payments Paper · Creator of 179 open-source packages
Pembayaran sumber terbuka, keselamatan pasca-kuantum, dan AI terpakai untuk perkhidmatan kewangan.
Tailor the page order and highlights for your role.
# 1. Validate ISO 20022 pacs.008.001.10 (pip install pacs008)
pacs008 -t pacs.008.001.10 -m template.xml -s schema.xsd -d payments.csv --dry-run
✓ Schema validation passed
✓ Data validation passed (1 payment records)
# 2. Verify NIST FIPS 203 ML-KEM-768 KEM (cargo add kyberlib)
cargo test -p kyberlib --test test_kem
✓ test keypair_encap_decap ... ok
✓ test result: ok. 9 passed; 0 failed; finished in 0.01s
# 3. Verify live CycloneDX SBOM provenance (SLSA / Sigstore)
curl -sSLO https://sebastienrousseau.com/sbom.cdx.json && gh attestation verify sbom.cdx.json --owner sebastienrousseau
✓ Loaded 1 attestation from GitHub API (slsa.dev/provenance/v1)
✓ Verification succeeded!What I build
ISO 20022, end to end: pain.001, pacs.008, camt.053, and acmt.001. Adopt one library at a time.
Explore the ISO 20022 librariesPost-quantum primitives: ML-KEM (CRYSTALS-Kyber, NIST FIPS 203) and hashing, ready to pilot today.
See the post-quantum primitivesAudited Rust libraries and a code security scanner, signed and shipped with a software bill of materials.
View the toolingBukti
Most downloads come from transitive dependencies in CI/CD pipelines and production services across PyPI, crates.io, and npm · Updated .
Kerjaya
Hampir dua dekad kepimpinan dalaman bagi pembayaran dan produk digital di HSBC, PayPal, Barclays, Shazam, AKQA, dan Virgin Group.

EPAA · September 2025
Regulators are treating harvest-now-decrypt-later as a credible present risk. This paper, produced for the Emerging Payments Association Asia, sets out the structural threat and the case for coordinated action across wholesale payment rails.
Terkini
TL;DR Mulai 12 Januari 2027 caj penukaran pembekal awan lenyap, termasuk egress data. Bersamanya tamat juga hujah kos yang mengekalkan pelan keluar DORA sebagai teori semata-mata.
TL;DR Pada 11 September CRA memulakan tempoh pelaporan 24 jam. Kewajipannya melekat pada produk, jadi pengecualian DORA daripada NIS2 tidak pernah menjangkaunya.
TL;DR Omnibus AI memindahkan tarikh akhir berisiko tinggi ke Disember 2027. Ia tidak menyentuh Article 50. Kewajipan ketelusan berkuat kuasa mulai hari ini dan mengenai chatbot.