Open Source Summit Korea 2026

Trusted OSS is an open-source self-certification kit that guides any organization from zero to ISO/IEC 5230 (license compliance) and ISO/IEC 18974 (security assurance) conformance using AI agents.
No prior expertise required.

Built by the OpenChain Korea Work Group and released under CC BY 4.0, the kit features:

• AI agents (Claude Code) that auto-generate company-specific compliance artifacts: OSS policy, SBOM, vulnerability response procedures, training curriculum, and conformance declaration
• DevSecOps pipelines (SAST, SCA, secret detection, IaC) ready to drop into any CI/CD environment
• A 5-level AI Coding Governance Maturity Model — from ad-hoc prompting (Level 1) to AI-augmented defense (findings-driven review, AI fuzzing) and continuous auto-remediation (Level 5).

In this session, I'll walk through how any team can go from no compliance process to a fully documented, self-certifiable program in hours, not months. I'll also share how we're using AI to close the compliance skills gap across Korean enterprises and SMEs — making OpenChain certification accessible to all.

Attendees leave with a working toolkit they can clone and run today.