Operations | Monitoring | ITSM | DevOps | Cloud

We’ve just wrapped up London’s 2025 Open Source Finance Forum (OSFF) in London and in this blog I’ll try to capture the key highlights from this year’s event while they’re still fresh. Dominant themes were the increasing prominence of legislation and governance frameworks, and what these mean for developers and practitioners.

There is a huge amount of hype around AI. Companies are growing faster than ever, IT budgets are being redirected, and product roadmaps everywhere are being redrawn. There is no doubt LLM’s are a transformative technology. At the same time, as with any early technology cycle we are far from understanding the patterns of success. And for sure, mis-steps and bad takes abound.

In modern software development, different environments often have different compliance requirements. Your development environment might allow more flexibility, while production demands strict controls around security scans, testing, and code review. Environment Policy helps you codify these requirements and enforce them consistently.

At Kosli, we believe that governance in software delivery shouldn’t be a bottleneck – it should be an extension of how your teams already work. That’s why we’re excited to introduce custom attestations in Kosli. Here’s the short version: What are custom attestations? They let you record facts about your workflows – with evidence – using controls that actually match your processes. Why does this matter? Because generic attestations can miss the mark.