AGNTCon + MCPCon Europe 2026: Full Schedule

17-18 September | Amsterdam, Netherlands
View More Details & Registration

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

09:00 CEST

Keynote: Welcome - Angie Jones, Vice President of Developer Experience, The Agentic AI Foundation

Thursday September 17, 2026 09:00 - 09:05 CEST

Auditorium (Ground Level)

Speakers

Angie Jones

VP, DX, Agentic AI Foundation

Angie Jones is the VP of Developer Experience at the Agentic AI Foundation where she guides how agentic systems are designed, implemented, and adopted across the global developer ecosystem.

Angie is an international keynote speaker who shares her wealth of knowledge at software... Read More →

Thursday September 17, 2026 09:00 - 09:05 CEST
Auditorium (Ground Level)

Keynote Sessions

09:05 CEST

Keynote: Mazin Gilbert, Executive Director, The Agentic AI Foundation

Thursday September 17, 2026 09:05 - 09:15 CEST

Auditorium (Ground Level)

Speakers

Mazin Gilbert

Executive Director, AAIF, The Linux Foundation

Mazin Gilbert is the Executive Director of the Agentic AI Foundation, part of the Linux Foundation. An IEEE Fellow with a Ph.D. in Artificial Intelligence and a Wharton MBA, Mazin brings 25+ years of experience driving AI innovation from research to global-scale deployment. His career... Read More →

Thursday September 17, 2026 09:05 - 09:15 CEST
Auditorium (Ground Level)

Keynote Sessions

09:20 CEST

Keynote: Clare Liguori, Senior Principal Engineer, AWS Agentic AI

Thursday September 17, 2026 09:20 - 09:30 CEST

Auditorium (Ground Level)

Speakers

Clare Liguori

Senior Principal Engineer, AWS Agentic AI

Clare Liguori is a Senior Principal Software Engineer at AWS, focusing on developer tooling and agentic AI. She primarily works on Kiro and Strands Agents SDK. She is also a core maintainer of the Model Context Protocol (MCP) specification. Over 12+ years at Amazon, she has worked... Read More →

Thursday September 17, 2026 09:20 - 09:30 CEST
Auditorium (Ground Level)

Keynote Sessions

09:30 CEST

Keynote: Getting to Stateless MCP: In Production - Shaun Smith, Open Source Agents / MCP, Hugging Face

Thursday September 17, 2026 09:30 - 09:40 CEST

Auditorium (Ground Level)

The latest MCP Specification introduces one of the largest changes to the protocol since launch: a stateless transport.

At Hugging Face we use MCP as infrastructure for Agents, Interactive and Inference workloads.

In this session we will:
- Summarize the MCP Transport story to date
- Use production analytics from Hugging Face's MCP infrastructure to track migration metrics and success
- Explore new opportunities for Client, Server and Gateway implementations offered by the new transport features.
- Share lessons learned from implementing the stateless transport for Clients and Servers

Speakers

Shaun Smith

Open Source Agents / MCP, Hugging Face

Shaun leads Open Source/MCP at Hugging Face, and is an MCP Steering Committee member serving as a Community Moderator and Transports Working Group. He is also the author of `fast-agent` - one of the few clients with comprehensive protocol support and diagnostic capabilities.

Thursday September 17, 2026 09:30 - 09:40 CEST
Auditorium (Ground Level)

Keynote Sessions

10:10 CEST

From Personal Agent To Org Catalog: 13 Specialists, One Orchestrator - Nick Veenhof, GitLab

Thursday September 17, 2026 10:10 - 10:35 CEST

Auditorium (Ground Level)

Every team at our company was building agents from scratch. Duplicated prompts. Duplicated tool configs. No shared memory. I watched five teams present their setups at a meetup in Ghent. Same patterns, reinvented five times.

So I built Paul, an AI chief of staff with 13 specialist agents: analyst, writer, broadcaster, operator, architect, reviewer, and more. Each agent has a defined job family, a cultural perspective, and a skill library. One orchestrator delegates. A reviewer gates quality. The whole system runs on open source tooling with MCP servers for memory, calendar, email, GitLab, and smart home.

The sharing layer is a platform AI catalog. Agent definitions, flows, and MCP server configs become organizational assets. A team publishes an agent. Another team reuses it. Skills are composable. Memory is scoped: user, project, or org.

This talk covers the architecture, the real failures, and the pattern for moving from a personal experiment to an organizational capability. You leave with concrete agent definitions, delegation patterns, and a mental model for building a catalog your whole organization can use.

Speakers

Nick Veenhof

Director, DevRel Engineering, GitLab

Nick Veenhof is Director of Contributor Success at GitLab, where he leads initiatives to enhance open source participation. With 15+ years in open source ecosystems, Nick brings expertise in building contribution frameworks that deliver business value in regulated environments.

... Read More →

Thursday September 17, 2026 10:10 - 10:35 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

10:45 CEST

An Orchestra of Agents: What I Learned Running a Multi-Agent System for 5,000+ Developers - Muhammad Ahsan Ayaz, Scania

Thursday September 17, 2026 10:45 - 11:10 CEST

Auditorium (Ground Level)

Most "AI agents" are a single LLM wrapped in a system prompt. They look great in demos and collapse the moment real users show up. I know because I built one for my 5,000+ member developer community, and the first version broke in ways I didn't see coming.
In this talk, I'll walk through the multi-agent system I run in production: a tree of 12 specialist agents built on Google's ADK, coordinating through sequential pipelines, parallel fan-out, and LLM-driven dynamic routing, each armed with MCP tools to act on the real world. We'll cover the orchestration primitives, then climb into the real architecture: how onboarding chains three agents in sequence, how external knowledge fans out across GitHub, Dev.to, and StackOverflow in parallel, and how the root agent delegates per message.
Then the fun part: the bugs. The drain-loop that cancelled a ParallelAgent mid-flight. The recency drift that surfaced 2020 articles in 2026. The callback layer I had to build for PII sanitization, caching, and observability ; none of which made it into the tutorial.
You'll leave with a mental model for each pattern, production patterns that kept it running, and war stories that'll save you a week.

Speakers

Muhammad Ahsan Ayaz

Software Architect, Scania

Muhammad Ahsan is a Google Developers Expert (GDE) in AI & Angular, an author of 4 world-wide published books, an Educator, and a Software Architect.
https://bio.link/codewithahsan

Thursday September 17, 2026 10:45 - 11:10 CEST
Auditorium (Ground Level)

Multi-Agent & Distributed Systems

11:20 CEST

When NOT To Use an Agent: Choosing Between Workflows, Services, and Agent Systems - Jigyasa Grover, Uber & Rishabh Misra, Atlassian

Thursday September 17, 2026 11:20 - 11:45 CEST

Auditorium (Ground Level)

LLM-powered “agents” are quickly becoming the default architectural pattern for AI-enabled systems.

Need automation? Agent.
Need integration? Agent.
Need reasoning? Agent.

But agents are not an upgrade; they are a trade-off. They introduce non-determinism, larger attack surfaces, evaluation complexity, and operational unpredictability.

In this session, we’ll examine three common architectural patterns for LLM-enabled systems:
- Deterministic workflows (state machines, orchestrated pipelines)
- Service-oriented architectures with LLM augmentation
- Fully agentic orchestration with dynamic tool use

Rather than comparing features, we’ll analyze these patterns across real engineering constraints:
- Failure isolation and blast radius
- Latency and cost predictability
- Observability and debugging complexity
- Security boundaries and permission scoping
- Evaluation and regression testing strategy
- Operational burden over time

This talk offers a practical decision framework grounded in system design principles. You’ll leave with a mental model and checklist to evaluate whether an agent is justified, or whether a simpler architecture will deliver more predictable, resilient outcomes.

Speakers

Jigyasa Grover

ML Tech Lead @ Uber • Google Developer Advisory Board Member • LinkedIn [in]structor • Book Author • Startup Advisor • 12 time AI + Open Source Award Winner • Featured @ Forbes, UN, Google I/O, and more!, Uber

Jigyasa Grover is a 12-time award-winning AI leader and author of Sculpting Data for ML. She drives personalization at Uber, with prior ML leadership at Twitter/X and Meta. A Google I/O speaker and Google Developer Advisory Board member, she works at the intersection of large-scale... Read More →

Rishabh Misra

Principal ML Engineer, Atlassian

I am a Principal ML Engineer & Researcher with over 10 years of experience in the AI and ML space. I am currently driving LLM pretraining, postraining, and personalization efforts at Atlassian, and have previously led Deep Learning & GenAI-powered user personalization at late-stage... Read More →

Thursday September 17, 2026 11:20 - 11:45 CEST
Auditorium (Ground Level)

Agentic Engineering

11:55 CEST

The Other 90%: Agentic AI for the Legacy Codebases Nobody Wants To Touch - Ayush Bhardwaj, Siemens

Thursday September 17, 2026 11:55 - 12:20 CEST

Auditorium (Ground Level)

The AI coding conversation has been almost entirely about greenfield: new features, fresh repos, throwaway scripts. Meanwhile the codebases that quietly run hospitals, factories, and banks are maintained by skeleton crews drowning in tribal knowledge, dead build systems, and 20-year-old decisions. Single-LLM code assistants do not survive contact with them.
Agentic systems can, but only with very different workflow patterns than the ones usually demoed. This session is a field report from modernizing a long-lived industrial codebase: what worked, what catastrophically did not, and the patterns that emerged.
We cover the shift from "LLM completes my code" to "agents reason about my codebase": the two-loop research and execute split, vertical slicing, measurement-first execution, structured unknowns, and rollback discipline. We name the failure modes that wreck naive setups on legacy code, including context overflow, hallucinated APIs, false-positive fixes, and agentic drift, and the practices that prevent them.
It closes with where agents still lose, what OSS tooling is missing, and how the community can treat legacy maintenance as a first-class agentic AI problem.

Speakers

Ayush Bhardwaj

Senior Software Engineer - Agentic AI, Siemens

Senior Software Engineer specializing in Agentic AI, leading development of enterprise-grade multi-agent systems at Siemens. Holds 3 AI patents, published NLP research, and collaborated with Meta's research team on AudioSeal. Pursuing research around information-theoretic frameworks... Read More →

Thursday September 17, 2026 11:55 - 12:20 CEST
Auditorium (Ground Level)

Agentic Engineering

12:30 CEST

We Built AI Agents To Fix Security Findings in Production — Here's What Developers Actually Merged - Amine Boudraa, Ruchita Kshirsagar, Nihit Gupta & Gianfranco Romani, Thomson Reuters

Thursday September 17, 2026 12:30 - 12:55 CEST

Auditorium (Ground Level)

AI is accelerating vulnerability discovery, finding more security issues than any team can fix by hand. The obvious next step is letting AI fix them too, but pushing automated changes into production is difficult, and the trust bar is super high.

Over the past year, we built and shipped two autonomous remediation agents raising PRs against hundreds of production repositories: one for SAST findings in first-party code, and one for SCA findings in third-party libraries. While developers can already fix vulnerabilities by going back and forth with a general-purpose AI assistant, our goal is to make that loop faster and more trustworthy.

That trust came from unglamorous engineering: teaching our agents how to build and test an application, trace data flows to reject risky fixes, and resolve breaking changes when modernizing legacy code. Along the way, we’ll share common patterns we’ve seen across rejected PRs, and what we had to iterate on to get hundreds of them merged.

We are open sourcing both agents for the community. The volume of CVEs keeps growing, automated remediation will become a must, and existing solutions don't yet solve this problem at the level we need.

Speakers

Amine Boudraa

Senior Product Security Engineer, Thomson Reuters

Amine Boudraa is a Senior Product Security Engineer at Thomson Reuters specializing in application security. He builds AI agents, MCP servers, and automation that help engineering teams stay fast while ensuring the time they spend addressing security issues is meaningful and impa... Read More →

Ruchita Kshirsagar

Senior Product Security Engineer, Thomson Reuters

Ruchita Kshirsagar is a cybersecurity professional with 9+ years of experience in application security and software development. A Senior Product Security Engineer at Thomson Reuters, she specializes in SAST/DAST/SCA, DevSecOps, threat modeling, container security, vulnerability management... Read More →

Nihit Gupta

Senior Product Security Engineer, Thomson Reuters

Nihit is a passionate and enthusiastic Product Security Engineer with over 4 years of experience in software development and security. Skilled in SAST and SCA remediation, architecting Secure-SDLC environments, and cloud security. He enjoys working on projects that can enhance software... Read More →

Gianfranco Romani

Senior ML Engineer, Thomson Reuters

Gianfranco Romani is an Senior ML Engineer on Thomson Reuters' Cybersecurity team, leading strategy and delivery of AI security tools. He focuses on automated vulnerabilities discovery/remediation and securing enterprise LLM apps. Previously at Thomson Reuters Labs, he built AI products... Read More →

Thursday September 17, 2026 12:30 - 12:55 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

13:05 CEST

What *IS* an Agent's Identity? - Christian Posta, Solo.io

Thursday September 17, 2026 13:05 - 13:30 CEST

Auditorium (Ground Level)

Enterprises understand human identity fairly well. You could argue they are decent at service accounts. But what about an AI agent? Is it either of these?

Agents are driven by intent, discover/invoke tools, make decisions, and interact with other resources (APIs, databases, other agents, etc). Enterprises will care about "Who is this agent?", "What is it allowed to do?", "What has it done?" and of course "Can we revoke its authority?"

In this talk we'll break down what actually makes up an agent's identity. We'll look at authentication, delegated authority, provenance, trust establishment, and accountability. We'll also examine where technologies like OAuth, OpenID Connect, SPIFFE, and emerging efforts such as AAuth fit into the picture.

You'll leave with a practical framework for thinking about agent identity, which problems have already been solved, and which ones we're still figuring out.

Speakers

Christian Posta

Global Field CTO, Solo.io

Christian Posta (@christianposta) is VP, Global Field CTO at Solo.io. He is the author of "Istio in Action", "AI Gateways in the Enterprise" and many other books on cloud-native architecture. He is well known in the cloud-native community for being an architect, speaker, blogger (https://blog.christianposta.com... Read More →

Thursday September 17, 2026 13:05 - 13:30 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

14:45 CEST

Welcome Back - Angie Jones, Vice President of Developer Experience, The Agentic AI Foundation

Thursday September 17, 2026 14:45 - 14:50 CEST

Auditorium (Ground Level)

Speakers

Angie Jones

VP, DX, Agentic AI Foundation

Thursday September 17, 2026 14:45 - 14:50 CEST
Auditorium (Ground Level)

Keynote Sessions

14:52 CEST

Keynote: David Soria Parra, Member of Technical Staff, Anthropic

Thursday September 17, 2026 14:52 - 15:02 CEST

Auditorium (Ground Level)

Speakers

David Soria Parra

Member of Technical Staff, Anthropic

I am the co-creator of the Model Context Protocol (Modelcontextprotocol.io) and a Member of Technical Staff at Anthropic working on a wide variety of things. Formerly a senior manager at Facebook working on static analysis and simulation based testing. I was responsible of integrating... Read More →

Thursday September 17, 2026 14:52 - 15:02 CEST
Auditorium (Ground Level)

Keynote Sessions

15:25 CEST

Keynote: Arun Gupta, Director, Open Source Ecosystem & Developer Platform, NVIDIA

Thursday September 17, 2026 15:25 - 15:35 CEST

Auditorium (Ground Level)

Speakers

Arun Gupta

Director, Open Source Ecosystem & Developer Platform, NVIDIA

Thursday September 17, 2026 15:25 - 15:35 CEST
Auditorium (Ground Level)

Keynote Sessions

15:45 CEST

Six Months of Proof: Independently-Verifiable Records for Agent Actions Under the EU AI Act - Steven Mih, Action State Group, Inc.

Thursday September 17, 2026 15:45 - 16:10 CEST

Auditorium (Ground Level)

The EU AI Act makes "what did the agent actually do?" a legal obligation: high-risk AI must support automatic record-keeping over its lifetime (Article 12) — for traceability, human oversight, and post-market monitoring — with logs retained at least six months (Article 19). But the Act can only require the logs to exist, not to be trustworthy: a log is only as good as the party that keeps it, and the operator who ran the action is not a disinterested witness — even an immutable one can be incomplete, cherry-picked, or built after the fact. The fix is simple and old: anchoring. Commit each record to a hash, write that hash to an independent, append-only transparency log, and any party can verify what the agent did — without trusting the operator. This session shows how the Agent Action Capsule project uses open transparency-log standards (SCITT/COSE) to produce anchored, independently-verifiable records of agent actions to the letter of the Act, plus the trust it can't legislate.

Live demo of the Agent Action Capsule project: emit a record at an action boundary, anchor it, verify it with an open verifier, then tamper and watch verification fail. You'll leave with an open, framework-agnostic pattern mapped to Article 12/19 — and a running verifier to try.

Speakers

Steven Mih

Founder/CEO ·, Action State Group, Inc.

Steven Mih is Founder/CEO of Action State Group, building the verifiable-record layer for AI agent actions, filed as an IETF Internet-Draft, with an open verifier. Previously he co-founded and led Ahana (acquired by IBM, 2023) and served on Presto Foundation (Linux Foundation) board... Read More →

Thursday September 17, 2026 15:45 - 16:10 CEST
Auditorium (Ground Level)

Interoperability & Standards

16:20 CEST

90 Days To Agentic Engineering - Thomas Schöne, Project Lions Development GmbH

Thursday September 17, 2026 16:20 - 16:45 CEST

Auditorium (Ground Level)

Most software companies are experimenting with AI, yet many struggle to move beyond isolated chat interactions and proof-of-concepts.

This session presents a practical case study of how a traditional software development organization with little prior AI experience adopted agentic engineering practices within 90 days. Guided by an engineer with hands-on experience in AI agents, MCP, RAG systems, and AI-native development workflows, the organization moved from sporadic experimentation to productive use of agentic systems in everyday engineering work.

Attendees will learn how high-value use cases were identified, how MCP-based tools, agent skills, and RAG-powered knowledge systems were introduced, and how trust in agent-driven workflows was established across development teams.

Not every experiment succeeded. Some assumptions proved wrong, some tools disappointed, and several approaches had to be reworked. This session shares the lessons learned, the mistakes made, and the strategies that ultimately accelerated adoption.

The result was a measurable shift from AI curiosity to AI-enabled engineering, establishing the foundations for long-term AI-native development.

Speakers

Thomas Schöne

Lead AI Architect, Project Lions Development GmbH

Thomas Schöne is a software engineer with more than 15 years of experience in web development, software architecture, and digital transformation. He specializes in AI agents, MCP, RAG systems, and AI-native engineering workflows. Thomas regularly speaks at developer conferences and... Read More →

Thursday September 17, 2026 16:20 - 16:45 CEST
Auditorium (Ground Level)

Agentic Engineering

16:55 CEST

Distributed Mess: A Production Guide To Multi-Agent Failures - Oleksandra Bovkun, Databricks

Thursday September 17, 2026 16:55 - 17:20 CEST

Auditorium (Ground Level)

Most agent failures don't happen in a model. They happen in the handoff. When a supervisor agent passes a flawed context downstream (wrong tool output, misrouted state, a hallucination that looked plausible), the receiving agent has no way to know. It continues confidently on a corrupted foundation. In MCP-based systems, this is structural: tool call responses become shared context across agents that never directly communicate. A bad result upstream poisons every agent that touches it downstream. Traditional end-to-end testing misses this because the final output can still look reasonable.

This session is a technical walkthrough of what that failure mode looks like in production and what you need to catch it: tracing context across agent boundaries (not just individual inference calls), distinguishing model errors from routing errors from context corruption, and evaluating the coordination layer — not just outputs.

This session is not about the future of AI, but about the unglamorous work of building agentic systems you can actually trust.

Speakers

Oleksandra Bovkun

Sr. Developer Advocate, Databricks

Oleksandra is a Developer Advocate at Databricks with a background as a Data Engineer, AI Engineer, and Solutions Architect. She's spent her career building real-world AI solutions and architecting data platforms — which means she's made most of the mistakes so you don't have to... Read More →

Thursday September 17, 2026 16:55 - 17:20 CEST
Auditorium (Ground Level)

Multi-Agent & Distributed Systems

17:30 CEST

Verify, Abstain, or Amplify: A Field Guide To Confidently-Wrong Agents - Michal Orzechowski, Sano – Centre for Computational Personalised Medicine

Thursday September 17, 2026 17:30 - 17:55 CEST

Auditorium (Ground Level)

Your coding agent earns trust because it has an oracle: a compiler and tests catch its mistakes. Most agents don't. They pass their evals and still ship confident, wrong answers, because for many tasks, there's nothing to check against.

Two failures hide under "confidently wrong": the model doesn't know (retrieve it), or it knows wrong, a priori it reasserts even against a correct context, which RAG won't fix.

A field guide, three honest moves. Verify, when you can check: deterministic checks on the answer, not the tool calls, run in the harness. Abstain, when you can't: make the agent say "I can't verify this," gated on an external check, not its own confidence. Amplify, when there's no right answer, only judgment: the model collapses toward the average exactly when you want the opposite, so you push it off and amplify the novelty you put in, judged by a human.

We ground all three in our own builds where the model is reliably wrong: a finance agent, a genomics agent that invents false-but-plausible mechanisms, and a microtonal-music agent that keeps dragging toward Western tonality. The move comes down to two questions: can you check the answer, and is there a right one?

Speakers

Michal Orzechowski

Agentic AI & Cloud Architect, Sano – Centre for Computational Personalised Medicine

Agentic AI & Cloud Architect at Sano, affiliated with AGH University of Krakow and ACK Cyfronet. After a decade in Kubernetes and cloud-native distributed systems, and a PhD in the field, he now builds multi-agent pipelines across genomics, healthcare, and microtonal music. He maintains... Read More →

Thursday September 17, 2026 17:30 - 17:55 CEST
Auditorium (Ground Level)

Building Reliable Agent Systems

09:00 CEST

Keynote: Welcome - Welcome - Angie Jones, Vice President of Developer Experience, The Agentic AI Foundation

Friday September 18, 2026 09:00 - 09:10 CEST

Auditorium (Ground Level)

Speakers

Angie Jones

VP, DX, Agentic AI Foundation

Friday September 18, 2026 09:00 - 09:10 CEST
Auditorium (Ground Level)

Keynote Sessions

09:10 CEST

Keynote to be Announced

Friday September 18, 2026 09:10 - 09:20 CEST

Auditorium (Ground Level)

Friday September 18, 2026 09:10 - 09:20 CEST
Auditorium (Ground Level)

Keynote Sessions

09:25 CEST

Keynote: Agents as Actors: Harnessing the Power of Agentic Infrastructure - Idit Levine, Founder & CEO, Solo.io & Keith Babo, Chief Product Officer, Solo.io

Friday September 18, 2026 09:25 - 09:35 CEST

Auditorium (Ground Level)

Harnessed agents have become the dominant interaction and runtime pattern for agentic AI. Claude Code, Codex, and a fast-growing field of open source harnesses integrate models with MCP tools, skills, and plugins. These harnesses provide sandboxed execution, scoped environment access, and human-in-the-loop controls on the desktop. The industry's next shift is already underway: moving harnessed agents from the desktop onto shared infrastructure, where security, observability, and governance are consistent across every agent interaction. In this talk, we will explore how open source infrastructure can deliver secure, scalable harnessed agents beyond the desktop.

Speakers

Idit Levine

Founder & CEO, Solo.io

Idit Levine is the founder and CEO of Solo.io, where she is dedicated to simplifying agentic AI and empowering organizations to embrace cloud-native technologies. With a strong background in distributed systems and cloud infrastructure, Idit is passionate about transforming complex... Read More →

Keith Babo

Chief Product Officer, Solo.io

Keith Babo is the Chief Product Officer at Solo.io, where he leads product strategy and execution, enabling enterprises to build and scale the next generation of cloud-native and agentic infrastructure for AI-driven applications. Prior to Solo.io, Keith held leadership roles in product... Read More →

Friday September 18, 2026 09:25 - 09:35 CEST
Auditorium (Ground Level)

Keynote Sessions

09:35 CEST

Keynote: Dexter Horthy, CEO and Co-Founder, HumanLayer

Friday September 18, 2026 09:35 - 09:45 CEST

Auditorium (Ground Level)

Speakers

Dexter Horthy

CEO and Co-Founder, HumanLayer

Dex is CEO and co-founder at HumanLayer, building an agentic IDE and collaboration platform that helps teams solve hard problems in complex codebases without devolving into slop. Dex coined the term context engineering in April 2025, has keynoted two AI Engineer conferences, and his... Read More →

Friday September 18, 2026 09:35 - 09:45 CEST
Auditorium (Ground Level)

Keynote Sessions

09:50 CEST

Keynote: Three Doors to One Tool: MCP vs WebMCP vs CLI - Frédéric Barthelet, CTO & Co-founder, Alpic & Dominic Farolino, Software Engineer, Google

Friday September 18, 2026 09:50 - 10:00 CEST

Auditorium (Ground Level)

Agents can reach a tool through at least three doors today: an MCP server, a WebMCP browser page, or a plain CLI. They overlap, they compete, and the discourse around them runs hot. This talk cuts through it.

We map the three surfaces along the axes that actually matter: where the code runs (backend, browser, model context, shell), who holds state and auth, latency and trust boundaries, and how much UI context survives the handoff. Then we get practical: a decision framework for picking the right surface per use case, the cases where you genuinely want two stacked together, and the anti-patterns that appear when you pick wrong.

Speakers

Frédéric Barthelet

CTO & Co-founder, Alpic

Dominic Farolino

Software Engineer, Google

I work on agentic web platform APIs in Chrome!

Friday September 18, 2026 09:50 - 10:00 CEST
Auditorium (Ground Level)

Keynote Sessions

10:20 CEST

Agentic AI and Hybrid Architecture - Redefining 100+ Applications at Scale - Pradheepa V, adidas AG

Friday September 18, 2026 10:20 - 10:45 CEST

Auditorium (Ground Level)

At adidas Europe Market Tech, a lean team of architects and engineers are making a big difference, transforming 100+ applications by embedding AI agents into everyday workflows. We leverage AI with clear purpose to shape a new operating model to drive end-to-end efficiency and productivity at enterprise level.

In this session, we share our transformation journey, challenges we addressed and its impact on business, people & process. On the technical stack, we will enlighten you on:
– Production proven patterns for running AI tools in parallel, speedy deployment-ready applications, architecture reasoning and how we are accelerating our path to realising our north star.
– How we benefit from a hybrid AI architecture: cloud models for high-value reasoning, paired with locally hosted LLMs for implementation. How we balance cost, latency and efficiency at scale.
– What way architecture agents enable continuous, scalable visibility across complex application landscapes - turning static data into meaningful insights.

Ultimately, the way “Through sport, we have the power to change lives”, we believe “Through AI, we have the power to change the tech landscape to stay future-ready”

Speakers

Pradheepa V

Europe Market Tech Architecture Lead, adidas AG

Pradheepa Vijayaraghavan is a solution architect and engineering leader at adidas Germany, with 21+ years of international experience across Europe, the Americas, and Asia-Pacific. She has led mission-critical platforms in e-commerce, FinTech, automotive, and enterprise technology... Read More →

Friday September 18, 2026 10:20 - 10:45 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

10:55 CEST

From "Works on My Prompt" To Production SLOs: Building Agent Observability - Manik Khandelwal, Microsoft

Friday September 18, 2026 10:55 - 11:20 CEST

Auditorium (Ground Level)

hen we shipped an AI agent powered by Cosmos DB's MCP server internally at Microsoft, it passed every test we threw at it—until real users found creative ways to break it. The agent would silently degrade: returning plausible-but-wrong query results, calling tools in inefficient loops, or burning through token budgets without completing tasks. Traditional monitoring showed green dashboards while users filed complaints. We needed observability designed for agents.

This talk presents the observability and evaluation stack I built to make agent failures visible, measurable, and catchable before users notice—combining OpenTelemetry instrumentation, LLM-as-judge evaluation, and automated regression gates in CI/CD.

Speakers

Manik Khandelwal

Senior Software engineer, Microsoft

Manik Khandelwal is an Engineer at Microsoft and a core maintainer of the Azure Cosmos DB Node.js SDK. He builds tools that make modern apps more scalable and intelligent—using AI, real-time data, and JavaScript.

Friday September 18, 2026 10:55 - 11:20 CEST
Auditorium (Ground Level)

Agentic Engineering

11:30 CEST

Governance You Can Run: Checkable Properties for Production Agents - Seshu Tolety, Siemens

Friday September 18, 2026 11:30 - 11:55 CEST

Auditorium (Ground Level)

Most agent governance lives in documents nobody can enforce. The agent ships, the policy sits in a wiki, and no one can answer the question that matters in production: is this running system compliant right now?
This talk presents governance built the other way around, as properties you can check on a live agent system rather than promises on a slide. We decompose any agentic system into a small three-object model, define properties that are individually testable against a running deployment, and rank failure modes into the handful of Tier-1 risks that actually cause incidents. Regulatory mappings (EU AI Act, ISO/IEC 42001, GDPR) fall out as a consequence of satisfying those properties, not as the starting point.
You leave with a vendor-neutral framework you can apply to your own agents the same week, independent of stack or model provider.

Speakers

Seshu Tolety

Director - Agentic AI, Siemens

Visionary technology leader | 20+ years engineering transformation at global scale.

Architect of high-performing teams, cloud platforms, IoT, and Agentic AI strategies. I turn legacy systems into resilient delivery engines and engineering cultures into innovation powerhouses.

N... Read More →

Friday September 18, 2026 11:30 - 11:55 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

12:05 CEST

When Agents Run Healthcare: Building Reliable Agentic Systems in Highly Regulated Environments - Janosch Woschitz, BARMER

Friday September 18, 2026 12:05 - 12:30 CEST

Auditorium (Ground Level)

The public statutory health insurance system in Germany faces a dual challenge: demographic change is creating a shortage of skilled professionals while operational pressure continues to rise due to an aging population. Healthcare organisations must therefore automate high-volume processes without compromising reliability, governance, or trust.

This session presents BARMER’s journey from governed data and analytics platforms to production-oriented agentic systems supporting real operational workflows. Rather than focusing on isolated chatbots or copilots, it explores how agentic systems can be embedded into core enterprise processes in highly regulated environments.

The talk highlights key design patterns including workflow orchestration, agent runtime separation, observability, and human-in-the-loop escalation. It also demonstrates why many early agent architectures fail under regulatory constraints and what changes are required to meet enterprise standards for compliance, auditability, and resilience.

Speakers

Janosch Woschitz

Senior AI Architect, BARMER

Janosch Woschitz is a Senior AI Architect at BARMER’s AI innovation unit, BARMER KI, where he builds scalable AI/ML platforms and production-grade agentic systems for healthcare. With a background in software engineering, distributed systems, and enterprise AI architecture, he has... Read More →

Friday September 18, 2026 12:05 - 12:30 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

12:40 CEST

Stateless Agents, Stateful Worlds: Designing for Interruption - Arul Kumaran, Luracast / Portel

Friday September 18, 2026 12:40 - 13:05 CEST

Auditorium (Ground Level)

Anthropic just announced MCP is going stateless. Most agent frameworks assume long-running, uninterrupted sessions. Real deployments face forced interruptions every hour: rate limits, auth refreshes, network partitions, process restarts, the laptop lid closing. When a session dies mid-task, most agents start over. That is not a model problem. It is a runtime design problem.

This talk covers the patterns that make agents resumable: idempotent tool calls that can safely re-execute, checkpoint-first execution that captures decisions before side effects, explicit continuation tokens that let a new session pick up an interrupted task, and the specific primitives a TypeScript runtime on Cloudflare Workers exposes to make all of this cheap. Every pattern shown is running in production on Photon, an open-source agentic tool runtime deployed to edge infrastructure.

Attendees leave with a concrete checklist: five changes to their agent architecture that make it survive the real world, not just the happy path.

Speakers

Arul Kumaran

Founder, Luracast / Portel

Arul Kumaran builds developer infrastructure for the agentic era. He created Photon, a runtime that compiles TypeScript into CLI, web app, and MCP-compatible agent tools simultaneously, and NCP (Natural Context Provider), a meta-MCP unifying 50+ tools behind 2-3 interfaces - cutting... Read More →

Friday September 18, 2026 12:40 - 13:05 CEST
Auditorium (Ground Level)

Building Reliable Agent Systems

13:15 CEST

Agent-Smith: Never Send a Human To Do a Machine’s Job - Glenn ten Cate, The Linux Foundation & Jorge Carvalho, Nedap

Friday September 18, 2026 13:15 - 13:40 CEST

Auditorium (Ground Level)

Most AI security agents are wrappers around fixed scripts. Agent-Smith takes a different approach: reusable skills encode security methodology, while the model determines how to investigate, chain tools, validate findings, and select its next action.

This session presents the architecture and lessons behind Agent-Smith, an open-source, MCP-enabled autonomous penetration-testing agent spanning web, cloud, Active Directory, source-code review, threat modeling, and AI red teaming and more. We will examine MCP tool exposure, methodology-as-code, autonomous skill chaining, model portability, ephemeral Docker sandboxes, and server-side controls for cost, execution time, and tool calls.

A practical demonstration will show Agent-Smith progressing from reconnaissance to a verified finding, reproducible proof of concept, remediation guidance, and code patch. Attendees will leave with concrete patterns for building capable agents without sacrificing isolation, observability, human oversight, or control.

“Never send a human to do a machine’s job.”

Speakers

Glenn ten Cate

Senior Cybersecurity trainer, The Linux Foundation

Glenn Ten Cate is a cybersecurity expert and trainer at the Linux Foundation with more than 20 years of experience as an ethical hacker, educator, and offensive security practitioner. He previously co-created and led the Security Knowledge Framework, an open-source flagship project... Read More →

Jorge Carvalho

Application Security Engineer, Nedap

Jorge Carvalho is an Application Security Engineer at Nedap with a passion for building secure software and exploring the security implications of emerging technologies. Much of his expertise has been developed through self-directed learning, hands-on research, and practical experience... Read More →

Friday September 18, 2026 13:15 - 13:40 CEST
Auditorium (Ground Level)

Building Reliable Agent Systems

14:50 CEST

Welcome Back - Angie Jones, Vice President of Developer Experience, The Agentic AI Foundation

Friday September 18, 2026 14:50 - 14:50 CEST

Auditorium (Ground Level)

Speakers

Angie Jones

VP, DX, Agentic AI Foundation

Friday September 18, 2026 14:50 - 14:50 CEST
Auditorium (Ground Level)

Keynote Sessions

14:50 CEST

Keynote: Marlene Mhangami, Senior Developer Advocate, Microsoft

Friday September 18, 2026 14:50 - 15:10 CEST

Auditorium (Ground Level)

Speakers

Marlene Mhangami

Senior Developer Advocate, Microsoft

Friday September 18, 2026 14:50 - 15:10 CEST
Auditorium (Ground Level)

Keynote Sessions

15:10 CEST

Keynote: Why Organizations Need an AI Control Plane for Security and Governance - Sheng Liang, Co-Founder & CEO, Obot AI

Friday September 18, 2026 15:10 - 15:20 CEST

Auditorium (Ground Level)

How can organizations secure and govern AI agents they do not fully trust? MCP gateways can intercept and filter tool calls, but that alone is not enough. Organizations also need complete visibility into agent activity, consistent policy enforcement, and centralized control. In this talk, we explain how to move beyond MCP gateways and build an AI control plane for enterprise-wide security and governance.

Speakers

Sheng Liang

CEO, Obot AI

Sheng Liang is cofounder and CEO of Obot.ai. Previously, Sheng founded and served as CEO of successful open source software companies, including Rancher Labs and Cloud.com, and served in executive roles at SUSE and Citrix. He started as an engineer at Sun Microsystems, where... Read More →

Friday September 18, 2026 15:10 - 15:20 CEST
Auditorium (Ground Level)

Keynote Sessions

15:25 CEST

Keynote: MCP Made Local Models Viable - Rachel-Lee Nabors, Developer Experience, Arize

Friday September 18, 2026 15:25 - 15:35 CEST

Auditorium (Ground Level)

By building agentic workflows that brick the moment they lose connectivity, we've circled back to the 1980s: the dumb terminal, the mainframe in someone else's building, intelligence rented by the minute. The first capable models were enormous, so we metered them by the token and shipped our context off-device. Tool bloat forced us to engineer economical harnesses: 50 tools can burn ~70k tokens, and selection quality collapses past a few dozen options. So we built progressive tool discovery, the wrapper pattern, retrieval, and routers that load only the tools a task needs. We engineered the problem down to something consumable by SAGE (Small And Good-Enough) models. On-device, free, private, these smaller models are increasingly capable of running agentic workflows and calling tools.

This talk covers the progress SLMs are making, efforts like DS4, and MCP client and server patterns built for the rise of local model adoption.

Speakers

Rachel-Lee Nabors

Developer Experience, Arize

Rachel-Lee Nabors spent the better part of their career on web standards and opensource and has spearheaded developer education at FAANG and startups, on the React Team as well as W3C. Now they work to usher in the Agentic Web with companies like Arcade.dev

Friday September 18, 2026 15:25 - 15:35 CEST
Auditorium (Ground Level)

Keynote Sessions

15:45 CEST

How We Reclaimed 20% of Engineering Capacity at Salesforce With AI Agents - Axel Uhlig, Salesforce

Friday September 18, 2026 15:45 - 16:10 CEST

Auditorium (Ground Level)

We built and deployed an AI Agent at Salesforce designed to triage production alerts using service logs. After months of iteration, we achieved an accuracy level that earned the trust of our DevOps personnel. Today, the agent reclaims approximately 20% of weekly engineering capacity for the teams using it.

Here are our top 5 takeaways for building agents that perform consistently at high accuracy:
1. Specialization beats generalization: For high-accuracy tasks, purpose-built solutions outperform generic models every time.
2. Provide "Proof of Work": Make it effortless for humans to verify the agent's logic. Transparency builds trust.
3. Minimize friction: We used Slack as the primary interface. Don't require local setups to boost adoption and usage
4. Build in public: Operating in shared channels allows for seamless human-agent cooperation (and agent-to-agent orchestration).
5. Hosted > Local: Local scripts are great for individuals, but standardized, team-wide automation requires a hosted environment to scale.

Speakers

Axel Uhlig

Software Engineer, Salesforce

Software Engineer, mostly working on CI/CD systems using Bazel for C++ code bases.

Previously worked on the Bazel migration of BMW.

Currently working for Salesforce, supporting the Hyper Database team to ship their database as part of Tableau and other Salesforce products... Read More →

Friday September 18, 2026 15:45 - 16:10 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

16:20 CEST

Gating High-Risk Agentic Actions at the Relying Party With Exogenous (Out-of-Band) Inputs - Dominic Forrest, iProov

Friday September 18, 2026 16:20 - 16:45 CEST

Auditorium (Ground Level)

A Confused Deputy arises when a trusted system with legitimate authority is induced to use that authority for a high-risk or irreversible action that the Agent's principal did not intend, creating a relying-party (RP) risk of repudiation. The Agent may arrive with valid Tokens, passkeys, inherited session, or tool credentials, even if instructions have been shaped by prompt injection or model miscomprehension. Whilst the request is authenticated, human consent to the means taken is not.

This session develops how RPs can deploy a gatekeeper to distinguish authorised access from authorised actions and produce a legally auditable record. When proving the principal is present and consenting, it assumes that any signal produced by the agent or its device remains endogenous to the compromised context. This requires an exogenous proof that the agent cannot generate, evaluated by the RP before execution.

The talk presents a decentralised, open-source, relying-party pattern that does not require the agent or its operator to have onboarded to or used the scheme. It composes with OAuth, MCP, and passkeys, adding the missing intent boundary for agent-mediated workflows.

Speakers

Dominic Forrest

Chief Technology Officer, iProov

Dominic is responsible for iProov’s technology vision, strategy, and roadmap including the design and development of its cloud-based infrastructure.

Dominic has over 25 years of experience in senior roles in telecommunications and internet service providers. He joined iProov from mBlox Inc., where as Senior Vice President he oversaw the development and scalability of the platform seamlessly running over 6 billion transitions... Read More →

Friday September 18, 2026 16:20 - 16:45 CEST
Auditorium (Ground Level)

Building Reliable Agent Systems

16:55 CEST

Shipping a Production App in 10 Days: A Real Measurement of AI-Assisted Development - Julien Dubois, GitHub

Friday September 18, 2026 16:55 - 17:20 CEST

Auditorium (Ground Level)

We've all seen the AI coding demos. But what does it really cost to ship a production application with an AI agent, and how much time does it actually save?

This talk answers that with hard numbers from a real, open-source project: BootUI ( https://github.com/jdubois/boot-ui ), a multi-module Java project with roughly 40 deeply-integrated feature panels, an embedded Vue 3 console, ~83,000 lines of code, ~116 test suites, and a full release pipeline. It was built through a tagged 1.0.0 release in about 10 calendar days by a single developer driving the GitHub Copilot coding agent, at a sustained pace of ~20 merged pull requests per day.

Using git history, PR metadata, and code metrics, we reconstruct two timelines: what the project actually took with AI (~80-110 hours of human effort), and a grounded estimate of what the same scope would take a senior developer by hand (~6.5-8.5 months).

You'll leave with a realistic mental model of where AI coding delivers 10x-plus leverage on Java projects, where it doesn't, and the practices that let you safely accept high agent throughput.

Speakers

Julien Dubois

Principal Manager, Developer Relations, GitHub

Julien Dubois is a Java Champion and Principal Manager at Microsoft, where he leads the Java Developer Relations team inside the CoreAI and GitHub organizations. With his team of world-class developer advocates, Julien works directly with the engineering groups to improve how Java... Read More →

Friday September 18, 2026 16:55 - 17:20 CEST
Auditorium (Ground Level)

Enterprise Adoption in Practice

09:00 CEST

09:05 CEST

09:20 CEST

09:30 CEST

10:10 CEST

10:45 CEST

11:20 CEST

11:55 CEST

12:30 CEST

13:05 CEST

14:45 CEST

14:52 CEST

15:25 CEST

15:45 CEST

16:20 CEST

16:55 CEST

17:30 CEST

09:00 CEST

09:10 CEST

09:25 CEST

09:35 CEST

09:50 CEST

10:20 CEST

10:55 CEST

11:30 CEST

12:05 CEST

12:40 CEST

13:15 CEST

14:50 CEST

14:50 CEST

15:10 CEST

15:25 CEST

15:45 CEST

16:20 CEST

16:55 CEST

Get help with the event