Open Source Summit + Embedded Linux Conference North America 2026

As the cost of generating code continues to decline, open source projects face a transformative shift in the nature of maintainership. The sheer volume of AI contributions – often characterized as "slop" – can easily overwhelm human reviewers. This keynote addresses the current state of development workflows by moving past AI hype toward a pragmatic, optimistic path for project sustainability. Developers need AI implementations that raise engineering standards now while projects anticipate advanced, industry-wide AI agents. 

AI enables maintainers to become more dogmatic about contribution quality. While asking a contributor for a complete refactor or exhaustive testing might have historically been viewed as an unreasonable barrier to entry, it is now a baseline expectation that AI can assist a contributor in meeting within minutes. High-validation requirements are framed not as hurdles, but as necessary filters to maintain a neat, efficient, and microsecond-optimized keyspace.

Drawing from two real-world implementations within the Valkey project for both security and backporting, this keynote will outline how AI agents are being used to combat maintainer burnout by automating tedious, time-intensive tasks now. The keynote will demo use cases for these intelligent bots that handle both 1) “provenance guard” security functions and 2) complex backporting and Continuous Integration (CI) testing across the project. These AI tools save engineers significant hours of manual labor each week while keeping humans in the loop for final sign-offs.

An important point that will be emphasized in the keynote: while AI excels at offloading labor, it cannot produce clarity or define a project's vision. The community remains the sole entity responsible for the strategic direction and soul of a project. Strategic thinking must not be externalized to models; instead, human-led governance must remain the primary source of long-term project trajectory.

Key Takeaways:

• Raising the Bar: The lower cost of code necessitates higher standards for tests and validation to prevent the influx of low-quality submissions.
• Agents as Guards and Guardrails: AI tools serve as the first line of defense in PR reviews, automating the routine labor of version maintenance and standard enforcement.

Intentional Governance: AI acts as a tool for execution, but clarity and project vision must remain entirely human-led and community-driven.

As adoption of the Zephyr RTOS continues to accelerate across industries, the project’s success is increasingly rooted in its commitment to adoption of open source best practices, open collaboration and a security-first mindset.
Equally important is how the project listens (and responds) to its developer community. Through annual surveys, collaborative meetings and ongoing research, the Zephyr community gathers actionable insights to guide technical direction. We’ll share key findings from recent developer surveys, the 10th anniversary milestone and highlight evolution of security practices to support CRA conformance and support analysis.

Attendees will gain a deeper understanding of how community-driven feedback loops translate into real-world improvements, ensuring Zephyr remains responsive to developer needs while advancing best practices across the embedded ecosystem.

The package registries that distribute software across every major open source language ecosystem, from Python and Rust to JavaScript, Java, PHP, and beyond, will collectively serve over 10 trillion downloads in 2026, all of them free. But the infrastructure behind those downloads has never been free, and the small number of donors and volunteers quietly absorbing those costs can no longer keep pace with AI-driven demand and machine-scale supply chain attacks. In response, registry leaders have formally convened under the Linux Foundation to reinvent the model through the newly formed Sustaining Package Registries Working Group. This keynote explains what's breaking, what's changing, and what it means for every organization that builds on open source.