SPEAKER
Paul Duvall
Founder, Redacted Ventures | Former AWS Director | Author of Continuous Integration
Paul Duvall is the founder of Redacted Ventures and author of Continuous Integration, winner of a 2008 Jolt Award. He also authored the DevSecOps on AWS series covering continuous security and continuous compliance. Previously, Paul held director roles at AWS spanning DevSecOps, security engineering, and security innovation. Before AWS, he co-founded Stelligent, an AWS-focused DevOps engineering firm acquired twice, and is an AWS Hero alumnus. Since 2023, he has built extensively with AI coding agents and maintains the open-source AI Development Patterns project.
Upcoming sessions
See complete program3 November
12:25 PM · 30 min
Who Gets the Keys? Trust and Authority in Software Factories
As software factories become more autonomous, the hard problem shifts from generating code to deciding who holds authority over what ships. Human review of a diff was never that control, and at agent speed it can't keep up.
This talk follows a change from customer intent to a running system across three feedback latencies: seconds in the agent loop, minutes in CI, and hours in production. Along the way, untrusted input tries to steer the agent, a pattern already behind real-world incidents.
You'll learn which pipeline controls still hold, which ones change, and which agent-specific checks to add. We'll separate authorship from authority. Agents can write code, tests, and fixes. The open question is who decides whether any of it ships.
You'll leave knowing how to verify intent, not just behavior, where human judgment still belongs, and who should hold the keys to production.
