OCX Tracks
How the program is organised
Three days, three steps: Day 1 LEARN, Day 2 BUILD, Day 3 SCALE. Each track runs three blocks a day.
Each track has its own program committee of volunteers from the Eclipse Foundation’s community, who review every proposal submitted to their track.
AI appears inside every track and is applied to each track’s domain.
Track 01: Software-defined systems & mobility
Software is reshaping vehicles, devices, machines, and connected systems. This track covers the architectures, platforms, and engineering practices behind next-generation software-defined vehicles, embedded and edge systems, robotics, autonomous systems, and other intelligent, connected products.
Day 1: Software-Defined Vehicles (SDV Core) — Eclipse SDV community deep dive focusing on cloud-native abstractions, virtual ECUs, shift-left workflows, OpenSOVD diagnostics, and full-stack software delivery.
Block 1
Building on Eclipse SDV: Hands-On Integration with Eclipse S-CORE, OpenSOVD & SDV Blueprints
OUTCOME:
Real-world implementation, code walkthroughs, live architectural demos, diagnostic pipelines, and hands-on integration using Eclipse SDV technology stacks.
TOPICS & FOCUS AREAS:
- Hands-on developer experiences and reference architectures using Eclipse S-CORE, OpenSOVD, Ankaios, Kuksa, uProtocol, Velocitas, and related projects.
- End-to-end SDV blueprints, shift-left simulation, cloud-to-vehicle developer pipelines, and standardized vehicle diagnostics.
- Practical learnings, open-source integration guides, and live software demonstrations.
Block 2
Functional Safety and Security & Open Toolchains: Navigating Regulations with Open Source
OUTCOME:
Bridging open-source development practices with rigorous functional safety, cybersecurity compliance, and regulatory standards.
TOPICS & FOCUS AREAS:
- Compliance strategies for ISO 26262, ISO 61508, the EU Cyber Resilience Act (CRA), and UNECE software update regulations.
- Developing, validating, and certifying open-source toolchains and security mechanisms for safety-critical environments.
- Automated testing, continuous compliance, eBPF security monitoring, and supply chain security (SBOMs) in open automotive platforms.
Block 3
Ecosystem Interoperability: Scalable Blueprints & Commercial Series Adoption
OUTCOME:
Transitioning open-source software abstractions and scalable blueprints from prototype status into production commercial vehicles and enterprise ecosystems.
Topics & Focus Areas
- OEM, Tier-1, and ecosystem case studies on adopting open SDV frameworks and scalable blueprints in production series platforms.
- Interoperability across standards (e.g., VSS, OpenSOVD, AUTOSAR, COVESA) and multi-vendor software stacks.
- Open software ecosystem economics, commercial sustainability, and joint industry initiatives.
Day 2: Silicon & Real-Time Foundations (Breaking Silos) — Bridging SDV with adjacent hardware and RTOS ecosystems (OpenHW Foundation, Eclipse ThreadX, and edge OS environments) to address hardware/software co-design, safety & security regulations, and deterministic execution.
Block 1
Open Silicon in Automotive: Hardware/Software Co-Design with OpenHW
OUTCOME:
Exploring how open hardware architectures and open silicon redefine physical mobility compute platforms.
Topics & Focus Areas
- RISC-V compute cores and open ISA adoption in automotive microcontrollers, ECUs, and zonal processors via OpenHW Foundation integration.
- Hardware/software co-design methodologies for low-power, high-performance automotive platforms.
- Benchmarking, silicon acceleration, and collaborative open hardware development.
Block 2
Operating Systems at the Edge: Bridging Microcontrollers, Cockpits & Gateways
OUTCOME:
Managing heterogeneous compute topologies, edge operating systems, and distributed runtime nodes across connected environments.
Topics & Focus Areas
- Deploying unified edge operating systems (e.g., Eclipse Oniro / OpenHarmony, edge Linux) across microcontrollers, cockpits, and central gateways.
- Multi-kernel OS integration, virtualized runtimes, containerization at the microcontroller edge, and domain isolation.
- Harmonizing consumer edge platforms, smart IoT devices, and embedded mobility gateways.
Block 3
Hard Real-Time Meets Open Source
OUTCOME:
Deep dives into open-source real-time operating systems (RTOS) designed for deterministic, safety-critical execution.
Topics & Focus Areas
- Architecture, performance tuning, and deployment strategies using open safety-critical RTOS frameworks (e.g., Eclipse ThreadX).
- Navigating safety certification pipelines (ISO 26262, IEC 61508) for open-source RTOS environments.
- Mixed-criticality scheduling, interrupt handling, and integration of hard real-time layers with high-level SDV middleware stacks.
Day 3: Explore how software-defined technologies and low-latency communication are transforming rail infrastructure, UAVs, and autonomous mobile robots.
Block 1
Federated Futures: Scaling Sovereign Dataspaces in the Enterprise
Outcome
Examine real-world case studies of organisations successfully operating decentralized dataspaces and sovereign cloud architectures at a massive, industrial scale. We are looking for success stories, deployment lessons learned, and roadmap presentations from massive federated networks built on Eclipse EDC, such as Catena-X and Mobility Data Space.
Topics & Focus Areas
- Real-world case studies of production deployments using Eclipse EDC (e.g., Catena-X, Mobility Data Space).
- Scaling sovereign cloud architectures and federated dataspaces across international supply chains.
- Business models, ROI metrics, and governance strategies for multi-company dataspace participation.
- Overcoming technical and operational scaling bottlenecks in high-throughput enterprise dataspace nodes.
Block 2
How to implement a governance model to build your digital sovereign stack?
Outcome
Discover how leading enterprise Open Source Program Offices (OSPOs) and Public authorities are scaling policy implementation and managing the massive logistical overhead of compliance across thousands of global repositories. Proposals should focus on strategic tooling, organisational change management, and lessons learned from enterprise-wide open-source governance.
Topics & Focus Areas
- Building and expanding an enterprise Open Source Program Office (OSPO) for regulatory readiness.
- Automating policy enforcement and governance across thousands of enterprise repositories (e.g., using GGI, FOSSology, ORT).
- Managing open source contributions, upstream engagement, and risk mitigation in regulated environments.
- Organisational change management: Cultivating a culture of “sovereignty-by-design.”
- Public Procurement
Track 02: Modern software development
Rethinking how software gets built.
How we design, build, and maintain software continues to evolve. This track covers AI-assisted and agentic development, programming languages and runtimes, cloud native, developer tools, DevOps, platform engineering, and the architectures and practices teams are using today.
Block 1
Mastering Evolving Developer Foundations
Outcome
Developers understand how modern languages, runtimes, AI-assisted tooling and autonomous agents are reshaping foundational engineering practices. Teams gain practical knowledge of emerging development approaches and workflows.
Key Challenge
Keeping pace with rapidly evolving developer capabilities, tools, and cognitive workflows.
Topics & Focus Areas
- Programming languages and language evolution
- Java, JakartaEE, and JVM advancements
- Python, JavaScript/TypeScript, Rust, Go, Kotlin, WebAssembly, Kubernetes, MCP
- Runtime technologies and performance
- AI-assisted and agentic development
- Developer fundamentals in an AI-enabled world
Block 2
Designing Resilient Distributed Architectures
Outcome
Teams build modular, resilient, and scalable systems designed for distributed and cloud-ready environments. Architects and developers gain strategies for managing modern application complexity.
Key Challenge
Navigating complexity across microservices, containers, infrastructure-as-code, and AI-supported architecture decisions.
Topics & Focus Areas
- Cloud-native architecture
- Microservices and distributed systems
- Containers and orchestration
- Infrastructure as Code (IaC)
- Architecture modernization
Block 3
Engineering for Performance and Reliability
Outcome
Systems run efficiently under load with predictable behavior and strong observability. Teams improve operational excellence and application performance.
Key Challenge
Diagnosing performance issues, tuning runtimes, and leveraging AI-driven optimization techniques.
Topics & Focus Areas
- Performance tuning
- Observability and monitoring
- Reliability engineering
- Runtime optimisation
- Capacity planning and benchmarking
Block 1
Achieving High-Velocity Software Engineering
Outcome
Teams reduce friction, automate repetitive work, and maximize engineering flow.
Developers spend more time creating value and less time on manual processes.
Key Challenge
Eliminating bottlenecks in debugging, testing, iteration, and delivery, while effectively integrating AI assistants and autonomous agents into engineering workflows.
Topics & Focus Areas
• Continuous integration and delivery
• Automated testing
• Developer experience
• Debugging and troubleshooting
• Engineering productivity
Block 2
Delivering Enterprise-Grade Solutions
Outcome
Engineers build robust, scalable, and standards-aligned enterprise applications.
Organizations successfully apply governance, compliance, automation and AI-enabled engineering practices.
Key Challenge
Applying proven patterns and practices across large, mission-critical systems.
Topics & Focus Areas
• Enterprise Java and Jakarta EE
• Application modernization
• Enterprise architecture
• Platform engineering
• Agentic software engineering
Block 3
Elevating Team Productivity and Collaboration
Outcome
Organisations improve collaboration, planning, and execution through intelligent systems and processes.
Teams achieve greater clarity, coordination, and operational effectiveness.
Key Challenge
Designing systems for planning, reviewing, documenting, automating, and measuring engineering work.
Topics & Focus Areas
• Engineering management
• Collaboration and documentation
• Metrics and measurement
• Agile and team practices
• AI-assisted team workflows
Block 1
Building Future-Proof Tooling Ecosystems
Outcome
Developers create flexible and extensible environments that adapt to changing needs.
Teams successfully integrate diverse tools into cohesive workflows.
Key Challenge
Combining AI assistants, autonomous agents, open-source technologies, and development tools into a seamless ecosystem.
Topics & Focus Areas
• Development tools and platforms
• IDEs and extensions
• Open-source ecosystems
• AI assistants and autonomous agents
• Workflow integration
Block 2
Orchestrating Developer and Agent Workflows at Scale
Outcome
Developers and AI agents operate within intelligent environments that accelerate software delivery.
Organisations establish scalable and efficient development practices.
Key Challenge
Orchestrating development environments, AI agents, remote workspaces, and automation into cohesive workflows at organisational scale.
Topics & Focus Areas
• Modern IDEs
• Remote development
• AI-enhanced and agentic workflows
• Workspace automation
• Developer platform strategy
Track 03: Digital autonomy & technological sovereignty
Building for greater choice, control, and independence.
Digital autonomy depends on the choices we make about architecture, infrastructure, data, standards, and technology dependencies. This track examines how open technologies can help organisations and governments build more adaptable and resilient systems while reducing critical dependencies.
Day 1: Onboard attendees, decode the regulatory landscape, and introduce the foundational concepts of digital autonomy.
Block 1
The regulatory tsunami: the impact of global regulations on open source technologies
Outcome
As Europe pioneers unprecedented digital standards through the CRA, AI Act, NIS2, DORA, and the Cybersecurity Act, global markets are rapidly following suit. Explore the dynamic international regulatory landscape, unpacking the friction of market fragmentation and uncovering the strategic opportunities presented by global compliance.
Topics & Focus Areas
- Overview of the regulatory landscape globally.
- Intersection among multiple regulations and the situations this scenario recreates.
- Coordination initiatives to harmonise regulatory requirements to simplify compliance.
- Cross-border data regulations and their implications for globally distributed open source communities.
Block 2
Shattering the Silos: The Dataspace Revolution for Digital Autonomy
Outcome
Discover the foundational principles of decentralised dataspaces and how they enable secure, sovereign data exchange across industries without vendor lock-in. Proposals should introduce core interoperability standards, Eclipse EDC concepts, and the role of transparency in building trusted, sovereign digital ecosystems.
Topics & Focus Areas
- Foundational principles of decentralised dataspaces and sovereign data sharing.
- Overview of core standards and initiatives (Gaia-X, IDSA, Eclipse Dataspace Working Group, etc.).
- Data sovereignty vs. vendor lock-in: Architectural patterns for multi-cloud and edge environments.
- Trust frameworks, identity federation, and access control in shared data ecosystems.
Block 3
How to identify and fix security blind spots in modern AI pipelines?
Outcome
Modern AI pipelines introduce complex new security vectors, from compromised training data provenance to subtle threats against model integrity. This block searches these unique vulnerabilities and practical frameworks to effectively audit, verify, and secure third-party AI models and datasets.
Topics & Focus Areas
- Risk vector analysis for open source Foundation Models and training datasets.
- Open source AI licensing, data copyright challenges, and dataset provenance.
- Evaluating transparency, bias, and alignment in open source AI implementations.
- Navigating emerging compliance and governance frameworks for open generative AI.
Day 2: Transition from theory to engineering practice with deep technical dives, architectural patterns, and hands-on toolchain implementations.
Block 1
Wiring the Watchdogs: Automating Compliance in the AI Lifecycle
Outcome
Roll up your sleeves and learn how to integrate continuous compliance, bias scanning, and provenance tracking directly into modern AI development pipelines. We are seeking technical deep dives, live demonstrations, and hands-on workshops on open source MLOps tooling that enforces regulatory requirements by default.
Topics & Focus Areas
• Integrating automated compliance checks, license scanning, and bias detection into MLOps CI/CD pipelines.
• Open source tools for AI model auditing, policy enforcement, and continuous evaluation.
• Automated AI Bill of Materials (AIBOM) generation and model provenance tracking.
• Implementing guardrails and policy-as-code before deploying models to production.
• Automated due diligence processes for CRA-regulated products.
Block 2
How do you automate CRA post-market compliance without alert fatigue?
Outcome
Managing continuous dependency security and post-market obligations under the Cyber Resilience Act (CRA) can quickly overwhelm teams with raw scanner noise. This block explores automated techniques for real-time CVE tracking, dependency auditing, and downstream patch management across complex software stacks.
Topics & Focus Areas
• Practical workflows for generating, consuming, and validating SBOMs (SPDX, CycloneDX) in automated build systems.
• Implementing Vulnerability Exploitability eXchange (VEX) to reduce alert fatigue and meet CRA compliance.
• Automating open source vulnerability scanning and license compliance in enterprise pipelines.
• Cryptographic signing and attestation workflows for securing software supply chains.
Block 3
The Dataspace Engine Room: Implementing EDC and Tractus-X
Outcome
Move beyond theory and learn how to physically wire up secure, sovereign data exchanges using Eclipse Dataspace Components (EDC) and Tractus-X reference implementations. This block features technical deep-dives and workshops on deploying EDC connectors, utilizing the Tractus-X SDK, and integrating the Industry Core Hub to orchestrate cross-company digital twins without vendor lock-in.
Topics & Focus Areas
• Deploying, configuring, and extending Eclipse Dataspace Components (EDC) connectors in production.
• Utilizing the Tractus-X SDK and reference implementations for custom dataspace applications.
• Integrating the Industry Core Hub and managing digital twin passports across federated networks.
• Technical implementation of contract negotiation, runtime data usage policies, and sovereign access control.
Day 3: Demonstrate production adoption, showcase enterprise scaling, and explore the intersection of open source with public sector mandates.
Block 1
Federated Futures: Scaling Sovereign Dataspaces in the Enterprise
Outcome
Examine real-world case studies of organisations successfully operating decentralized dataspaces and sovereign cloud architectures at a massive, industrial scale. We are looking for success stories, deployment lessons learned, and roadmap presentations from massive federated networks built on Eclipse EDC, such as Catena-X and Mobility Data Space.
Topics & Focus Areas
• Real-world case studies of production deployments using Eclipse EDC (e.g., Catena-X, Mobility Data Space).
• Scaling sovereign cloud architectures and federated dataspaces across international supply chains.
• Business models, ROI metrics, and governance strategies for multi-company dataspace participation.
• Overcoming technical and operational scaling bottlenecks in high-throughput enterprise dataspace nodes.
Block 2
How to implement a governance model to build your digital sovereign stack?
Outcome
Discover how leading enterprise Open Source Program Offices (OSPOs) and Public authorities are scaling policy implementation and managing the massive logistical overhead of compliance across thousands of global repositories. Proposals should focus on strategic tooling, organizational change management, and lessons learned from enterprise-wide open-source governance.
Topics & Focus Areas
• Building and expanding an enterprise Open Source Program Office (OSPO) for regulatory readiness.
• Automating policy enforcement and governance across thousands of enterprise repositories (e.g., using GGI, FOSSology, ORT).
• Managing open source contributions, upstream engagement, and risk mitigation in regulated environments.
• Organizational change management: Cultivating a culture of “sovereignty-by-design.”
• Public Procurement
Track 04: Cybersecurity & regulatory compliance
From requirements to real-world readiness.
Building secure software now means navigating both technical risks and regulatory requirements. This track covers secure development, software supply chain security, vulnerability management, SBOMs, open source compliance, and the practical impact of regulations such as the Cyber Resilience Act and AI Act.
Day 1: Policy-to-Code & Regulatory Engineering
Block 1
CRA Implementation: Mapping CRA implementation into product design and maintenance to CI/CD and release engineering
Topics & Focus Areas
Integrating CRA compliance requirements in the different product phases; design, developer toolchains, commit rules, build systems, and open source release pipelines.
Block 2
EU AI Act compliance: Auditing data provenance, models, and MLOps pipelines
Topics & Focus Areas
Implementing automated data lineage tracking, model auditing, and continuous risk-checking within production MLOps workflows.
Block 3
Managing global encryption and export compliance in open repositories
Topics & Focus Areas
Handling dual-use export rules, national cryptographic standards, and post-quantum migration within global codebases.
Day 2: Supply chain security & pipeline hardening
Block 1
SBOM Ingestion, validation, and VEX integration in CI/CD
Topics & Focus Areas
Building pipelines for parsing machine-readable SBOM formats, validating dependencies, and consuming VEX statements automatically.
Block 2
Secret detection, secret management, and cryptographic agility in Git workflows
Topics & Focus Areas
Preventing hardcoded credentials, automating secret scanning, managing environment keys, and refactoring legacy crypto implementations.
Block 3
Preventing dependency poisoning, malicious commits, and build tampering Advanced Software Supply Chain Defense & Automated Remediation
Topics & Focus Areas
Securing upstream dependencies, cryptographic signing, binary transparency, and isolated execution. Securing upstream dependencies through cryptographic signing and binary transparency, preventing dependency poisoning/build tampering via isolated execution, and reducing false positives using call-graph vulnerability reachability analysis to safely automate dependency updates in large stacks.
Day 3: Cloud-Native Ops & Engineering at Scale
Block 1
Enforcing security Policy-as-Code across multi-repo codebases
Topics & Focus Areas
Scaling automated security policies, implementation of monitoring of cybersecurity policy compliance for open source software stewards under the CRA.
Block 2
Deploying confidential computing, secure enclaves, and in-memory encryption
Topics & Focus Areas
Building and running open source workloads inside hardware Trusted Execution Environments and confidential clusters.
Block 3
Automated vulnerability reachability analysis and dependency patching
Topics & Focus Areas
Filtering scanner false positives via call-graph reachability testing and deploying automated dependency updates in large stacks.
Track 05: Research & innovation
The Research and Innovation track bridges public European research initiatives (e.g., Horizon Europe, IPCEI-CIS) with open-source ecosystems to transform theoretical architectures into resilient, open infrastructure. This track focuses on moving scientific outputs from pilot to platform, fostering open shared infrastructure, project craft, standards, and interoperability.
Day 1: Onboard attendees, decode the regulatory landscape, and introduce the foundational concepts of digital autonomy.
Block 1
Open Source Projects: How Europe Builds Open and Shared Infrastructure
Key Topics
Open source in europe: models, programs and results
Session Focus
A primer on the role of commons-based development in EU research programs. Covers governance models, funding mechanisms, and how collaborative ecosystems accelerate innovation.
Block 2
Fundamentals of the Standards & Interoperability
Key Topics
Standards and open source
Session Focus
Unpacking standards landscape and european projects applications. Translating project deliverables into formal international standards and ensuring cross-vendor hardware/software compliance.
Block 3
Open Source Project Craft: Governance, Roadmaps, and Community Engineering
Key Topics
Open Source principles application and best examples
Session Focus
How to structure sustainable OSS projects: contribution models, maintainership, licensing, and long-term sustainability.
Day 2: Transition from theory to engineering practice with deep technical dives, architectural patterns, and hands-on toolchain implementations.
Block 1
AI Agents & Distributed Intelligence
Key Topics
Agent-to-agent communication protocols, task-offloading APIs, localized vector datastores, self-organizing agent swarms.
Session Focus
Building event-driven AI agents that collaborate across continuum nodes to handle localized decision-making.
Block 2
Scientific Research Infrastructure & Prototyping: Turning Research Into Working Code
Key Topics
Reference implementations, open-source demos from EU consortia
Session Focus
Hands-on code walkthroughs for deploying workloads using open-source
Block 3
Human Skills & Digital Future
Key Topics
Human Skills in development environments.
Session Focus
Building a sustainable future balancing human skills supply and demand in present and future technology
Day 3: Demonstrate production adoption, showcase enterprise scaling, and explore the intersection of open source with public sector mandates.
Block 1
Continuum Thinking: From Edge to Cloud at Scale
Key Topics
Computing Continuum
Session Focus
Interoperability, orchestration, workload portability, security, and data management across the computing continuum.
Block 2
From Pilot to Platform: Scaling Open Source EU Research Outputs
Key Topics
Smart manufacturing (Industry 4.0), smart grid energy management, autonomous logistics, agriculture, smart cities, mobility, water management, cybersecurity, etc.
Session Focus
How research prototypes evolve into production-grade platforms used across sectors and member states.
AI across every track
AI sits inside each track, applied to that track’s problems, so the sessions are about AI in the development workflow, AI in sovereign and compliant systems, AI in security and regulation, and AI in research. Examples from the program:
Software-defined systems & mobility
Modern software development:
AI-assisted team workflows and orchestrating developer and agent workflows at scale
Digital autonomy & technological sovereignty:
security blind spots in AI pipelines and automating compliance across the AI lifecycle
Cybersecurity & regulatory compliance:
EU AI Act compliance for data provenance, models and MLOps pipelines and AI-driven secret detection in Git workflows
Research & innovation:
AI agents and distributed intelligence and how Europe builds open, shared infrastructure and AI
Have something worth sharing?
Bring your experience, ideas, and lessons learned to Europe’s leading open source developer conference
