Open Source Summit Korea 2026

Over the past decade, many organizations have established OSPOs to manage open source usage and compliance. However, building a sustainable open source culture requires more than policies and processes.

This session shares a 14-year journey of an OSPO that evolved from a contribution-focused group into a broader organization encompassing usage, compliance, and internal enablement.

It explores how open source practices were embedded into engineering culture through project incubation, developer engagement, and internal leadership programs. Over time, these efforts led to a shift where open source activities became self-sustaining, with teams proactively initiating projects and contributions.

The session also reflects on an unexpected outcome: talent mobility. As internal open source leaders grew, many moved on to new opportunities, revealing both retention challenges and the broader impact of cultivating open talent.

Key lessons include the balance between control and autonomy, the role of leadership in cultural change, and how open source can be viewed not only as a compliance requirement, but as a long-term investment in culture and organizational brand.

Stateless video decoding has become the standard approach in V4L2 using the Request API, but implementing a stateless decoder driver remains complex. It requires careful handling of codec parameters, buffer management, and coordination between userspace and the kernel.

This session presents a practical overview of implementing a stateless V4L2 decoder driver based on real development experience. It covers how SPS/PPS and per-frame parameters are passed from userspace, how reference frames are managed, and how hardware constraints are handled within a generic V4L2 framework.

We also discuss common pitfalls such as synchronization issues and buffer lifecycle management, and highlight key differences from traditional stateful decoders.

Attendees will gain a clear understanding of stateless decoder architecture and practical insights for developing robust V4L2 drivers.

Trusted OSS is an open-source self-certification kit that guides any organization from zero to ISO/IEC 5230 (license compliance) and ISO/IEC 18974 (security assurance) conformance using AI agents.
No prior expertise required.

Built by the OpenChain Korea Work Group and released under CC BY 4.0, the kit features:

• AI agents (Claude Code) that auto-generate company-specific compliance artifacts: OSS policy, SBOM, vulnerability response procedures, training curriculum, and conformance declaration
• DevSecOps pipelines (SAST, SCA, secret detection, IaC) ready to drop into any CI/CD environment
• A 5-level AI Coding Governance Maturity Model — from ad-hoc prompting (Level 1) to AI-augmented defense (findings-driven review, AI fuzzing) and continuous auto-remediation (Level 5).

In this session, I'll walk through how any team can go from no compliance process to a fully documented, self-certifiable program in hours, not months. I'll also share how we're using AI to close the compliance skills gap across Korean enterprises and SMEs — making OpenChain certification accessible to all.

Attendees leave with a working toolkit they can clone and run today.