Keynote: Setting the Standard - Safely Operationalizing OSS Contributions
summary
A regulated fintech can increase Open Source contributions by routing proposals through a gate called Ark that enforces five entry requirements (benefit alignment, CLA, IP scan, permissive license check, lifecycle/version visibility). A six‑person OSPO writes RACI’d procedures, automates enforcement where possible but currently runs many manual checks, and requires near‑real‑time inventory access for reporting. The practical claim: governance plus targeted automation lets the firm meet FHFA constraints while contributing upstream without leaking proprietary IP.
AI-written summary · about
chapters (6)
- 0:00Introduction and background
- 1:48Fannie Mae’s open source program
- 6:22Open Source Program Office role
- 8:28Governance requirements for contributions
- 10:13Procedures and enforcement
- 11:18Reporting and contextualizing data
related talks
31mOperationalizing Open Source Projects: When the Rubber Meets the Road
18mKeynote: Collaboration Beyond Code
16mKeynote: Security in the Open - How Industry and Community Ben...
11mKeynote: A Fireside Chat with Jo Ann Barefoot, Alliance for Innovative Reg & Sultan Meghji, FDIC
28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
14mKeynote: All Your Base Are Belong to Us
19mKeynote Session: FINOS Vice Chair Opening Remarks
