Colin Eberhardt: AI Governance, Agentic Coding, and the Future of Open Source

In this episode of Risk-First: Stars of Software, Rob Moffat talks with Colin Eberhardt, CTO of Scott Logic, long-time FINOS contributor, and one of the principal authors of the AI Governance Framework.

Colin has spent years helping financial institutions adopt new technologies safely—without slowing innovation to a crawl. Which makes him exactly the right person to talk to about the biggest technological shift the software industry has seen in decades: AI.

The conversation explores what AI governance actually looks like in practice, why banks struggled to work out whose problem AI even was, and how large organisations can adopt powerful new tools without accidentally causing chaos.

Along the way, Rob and Colin dive into:

• Why AI governance isn’t about bureaucracy, but about helping organisations understand risks they didn’t even know they had
• How non-deterministic systems break many traditional software engineering techniques
• Why testing and feedback loops may become the most important tools in AI-driven development
• The rise of agentic coding loops that can autonomously iterate until tests pass
• How AI could radically change legacy system migration, software delivery, and developer productivity
• Whether AI will flood the world with open-source projects… or quietly make open source less necessary

• Scott Logic
  https://www.scottlogic.com
  UK-based software consultancy focused on complex platforms, trading systems, and large-scale engineering challenges.
• FINOS AI Governance Framework
  https://github.com/finos/ai-governance-framework
  Open-source framework describing risks and mitigations when adopting generative AI in financial services.

• AI Augmented Coding Weekly — Colin’s newsletter
  https://newsletter.scottlogic.com
  Commentary and analysis on how AI is changing software engineering practices.
• The AI Daily Brief podcast
  https://podcasts.apple.com/us/podcast/the-ai-daily-brief/id1669813433
  Regular updates on AI developments, industry trends, and major model releases.

• Claude Code / Anthropic tools
  https://www.anthropic.com
  AI coding agents and autonomous development workflows.
• Next.js
  https://nextjs.org
  Popular React framework used as an example of modern web infrastructure and AI-assisted cloning.
• Ladybird browser project
  https://ladybird.dev
  Experimental open-source browser engine referenced during discussion of AI-assisted codebase recreation.

In this episode of Risk-First: Stars of Software, Rob Moffat speaks with Kunal Kushwaha—Senior Developer Advocate at CAST AI, founder of the global WeMakeDevs community, CNCF Ambassador, and one of the most recognisable voices in today’s cloud-native ecosystem.

Kunal’s work sits at the intersection of cloud infrastructure, developer education, and community-driven learning, focused on helping organisations reduce cloud waste, improve reliability and performance, and navigate the growing complexity of Kubernetes and AI-driven platforms. At its core, his perspective highlights that risk in modern technology is not just technical—it’s human, organisational, and economic.

Together, Rob and Kunal explore:

• Why cloud complexity and over-provisioning create hidden financial and reliability risks
• How developer relations connects human relationships to business outcomes
• Lessons from building data-centre infrastructure and global developer communities early in a career
• Real-world failures—from data-centre fires to open-source contribution overload—and what they teach about resilience
• How open source, AI agents, and autonomous cloud platforms are reshaping the future of software
• Why success in technology still depends on focus, learning-by-doing, and strong human networks

• CAST AI
  https://cast.ai
  Autonomous cloud optimisation platform focused on performance, reliability, and cost efficiency.
• WeMakeDevs community
  https://wemakedevs.org
  Global developer community running hackathons, events, and learning programmes across 20+ countries.

• Tech With Nana (YouTube)
  https://www.youtube.com/c/TechWorldwithNana
  Clear, practical explanations of cloud-native and DevOps concepts.
• TLDR Newsletter
  https://tldr.tech
  Daily curated updates across software engineering, AI, and startups.
• Hacker News
  https://news.ycombinator.com
  Community-driven discussion of technical trends and projects.
• Product Hunt
  https://www.producthunt.com
  Discovery platform for new developer tools and technology products.
• Kubernetes Blog
  https://kubernetes.io/blog
  Official updates and deep dives from the Kubernetes ecosystem.

• Stuff You Should Know
  https://www.iheart.com/podcast/105-stuff-you-should-know-26940277/
  Broad, curiosity-driven explorations of everyday topics.
• Science Vs
  https://gimletmedia.com/shows/science-vs
  Evidence-based deep dives into popular claims, including AI and technology.

Episode 2 — Steve Tendon: Constraints, Flow, and the Human Side of Organisational Risk

In this episode of Risk-First: Stars of Software, Rob Moffat speaks with Steve Tendon—creator of the Tameflow approach and a leading thinker in systems thinking, organisational performance, and flow-based management.

Steve’s work sits at the intersection of theory and real-world change, helping organisations improve economic, operational, organisational, and human performance by focusing on constraints, decision-making, and the social dynamics of collaboration. At its core, Tameflow is about understanding how people communicate, make trade-offs, and ultimately manage risk—whether explicitly or by intuition.

bobmkite9s-studio_risk-first-st…

Together, Rob and Steve explore:

• Why organisational success depends on decision-making and trade-offs, not just process
• How the Theory of Constraints applies to knowledge work and software systems
• The hidden risks in mergers, acquisitions, and organisational culture clashes
• Why certifications signal capability—but real expertise requires evidence and outcomes
• The importance of feedback loops, systems thinking, and human collaboration in avoiding failure
• What it means to “think more differently” in a rapidly changing, AI-shaped future

From last-minute product disasters caught minutes before release to breakthrough organisational turnarounds, this conversation reveals a powerful theme: performance improves when we focus on what truly constrains us—and have the courage to change how we think.

If risk is about navigating uncertainty and trade-offs, then mastering flow, constraints, and human decision-making may be the most important skill of all.

https://www.amazon.co.uk/dp/0884271951
A classic introduction to the Theory of Constraints, presented as a narrative about improving organisational performance. Steve highlights it as a book worth rereading many times because new insights emerge with each pass.

https://www.goldratt.com/resources/books
Further exploration of constraints thinking, flow, and systemic improvement across organisations and industries.

https://patternlanguage.com
Foundational ideas behind patterns, organisational design, and systems thinking, which strongly influence the Tameflow approach.

https://tameflow.com
Steve’s organisational performance and systems-thinking consultancy focused on improving economic, operational, organisational, and human flow.

https://tameflow.com/circle
A discussion community exploring systems thinking, constraints, organisational design, and knowledge-work performance.

https://tameflow.com/career-booster
Steve’s programme aimed at helping individuals improve professional effectiveness using constraints thinking, conflict resolution, and systemic decision-making.