Open Source Summit + Embedded Linux Conference North America 2026

The commerce landscape is undergoing a fundamental shift from a "click-to-buy" web to an "intent-to-execute" agentic ecosystem. At the center of this transformation is the Universal Commerce Protocol (UCP), an open-source standard designed to eliminate fragmentation between AI surfaces and merchant platforms.

This session provides a deep dive into UCP's foundational architecture, exploring its core primitives and its unique capability-based system that allows AI agents to interact seamlessly with diverse retail backends. We will trace the journey of the protocol from its initial launch to its current state, highlighting key milestones in its technical evolution—including expanded support for diverse transport layers and its integration into major AI-native environments.Beyond the technical specifications, the talk will examine the real-world impact of UCP: how it is lowering the barrier to entry for smaller retailers, decentralizing commerce, and enabling a more fluid, secure, and interoperable future for global trade.

Attendees will gain a clear understanding of how this evolving standard is becoming the connective tissue for the next generation of digital transactions.

AI infrastructure is moving faster than any single company can sustainably steward: data formats, vector search, orchestration, inference, evaluation, and agent interoperability all need to evolve in the open to win broad adoption. This panel explores why neutral open source foundations matter for the next decade of AI, and how foundation-backed governance turns promising projects into durable ecosystems.

Topics include how open governance reduces fragmentation and vendor lock-in, why trademarks and clear contribution rules accelerate enterprise adoption, how graduated lifecycle models signal maturity, and how interoperability standards unlock composability across tools and platforms. Panelists will share practical lessons on scaling contributor communities, balancing commercial incentives with community trust, and using foundation structures to create long-term technical roadmaps that outlive any single hype cycle. The audience will leave with concrete patterns for launching, donating, or growing AI projects under a foundation, and for building ecosystems that are both innovative and production-ready.

As the cost of generating code continues to decline, open source projects face a transformative shift in the nature of maintainership. The sheer volume of AI contributions – often characterized as "slop" – can easily overwhelm human reviewers. This keynote addresses the current state of development workflows by moving past AI hype toward a pragmatic, optimistic path for project sustainability. Developers need AI implementations that raise engineering standards now while projects anticipate advanced, industry-wide AI agents. 

AI enables maintainers to become more dogmatic about contribution quality. While asking a contributor for a complete refactor or exhaustive testing might have historically been viewed as an unreasonable barrier to entry, it is now a baseline expectation that AI can assist a contributor in meeting within minutes. High-validation requirements are framed not as hurdles, but as necessary filters to maintain a neat, efficient, and microsecond-optimized keyspace.

Drawing from two real-world implementations within the Valkey project for both security and backporting, this keynote will outline how AI agents are being used to combat maintainer burnout by automating tedious, time-intensive tasks now. The keynote will demo use cases for these intelligent bots that handle both 1) “provenance guard” security functions and 2) complex backporting and Continuous Integration (CI) testing across the project. These AI tools save engineers significant hours of manual labor each week while keeping humans in the loop for final sign-offs.

An important point that will be emphasized in the keynote: while AI excels at offloading labor, it cannot produce clarity or define a project's vision. The community remains the sole entity responsible for the strategic direction and soul of a project. Strategic thinking must not be externalized to models; instead, human-led governance must remain the primary source of long-term project trajectory.

Key Takeaways:

• Raising the Bar: The lower cost of code necessitates higher standards for tests and validation to prevent the influx of low-quality submissions.
• Agents as Guards and Guardrails: AI tools serve as the first line of defense in PR reviews, automating the routine labor of version maintenance and standard enforcement.

Intentional Governance: AI acts as a tool for execution, but clarity and project vision must remain entirely human-led and community-driven.

As adoption of the Zephyr RTOS continues to accelerate across industries, the project’s success is increasingly rooted in its commitment to adoption of open source best practices, open collaboration and a security-first mindset.
Equally important is how the project listens (and responds) to its developer community. Through annual surveys, collaborative meetings and ongoing research, the Zephyr community gathers actionable insights to guide technical direction. We’ll share key findings from recent developer surveys, the 10th anniversary milestone and highlight evolution of security practices to support CRA conformance and support analysis.

Attendees will gain a deeper understanding of how community-driven feedback loops translate into real-world improvements, ensuring Zephyr remains responsive to developer needs while advancing best practices across the embedded ecosystem.

The package registries that distribute software across every major open source language ecosystem, from Python and Rust to JavaScript, Java, PHP, and beyond, will collectively serve over 10 trillion downloads in 2026, all of them free. But the infrastructure behind those downloads has never been free, and the small number of donors and volunteers quietly absorbing those costs can no longer keep pace with AI-driven demand and machine-scale supply chain attacks. In response, registry leaders have formally convened under the Linux Foundation to reinvent the model through the newly formed Sustaining Package Registries Working Group. This keynote explains what's breaking, what's changing, and what it means for every organization that builds on open source.