🌀 OpenAB Series · 4 articles · English edition

Enterprise AI Governance in Historical Rhythm

What dropped is boilerplate, not complex business logic. A front-end engineer's view — not "the singularity," just the latest beat in a long rhythm.

The series itself is also a story. The W1 polish was actually done in 2 hours while I was at the hospital with my family — 5 AI agents relayed the work. So these 4 pieces sit on top of the same 2-hour timeline, with one fragment opening each piece (W1 at 12:03 when Erwin took over the grok thread; W2 at 13:10 with DB ground truth correction; W3 at 13:30 with voice polish; W4 at 14:00 with the hub deploy). Read in order, they make up the full 2-hour story.

1. Historical rhythm: why this isn't "the singularity"

✓ Live

'Coding has no cost' is the wrong question — A front-end engineer's view on AI in historical rhythm

From front-end work — what dropped is the typing-boilerplate cost. "Should this endpoint exist, how does it integrate, will it leak data" — complex business-logic costs barely moved, some went up. The latest wave in a long rhythm, not a singularity.

W1 · 2026-05-24

2. The trust bottleneck: three unanswered questions

✓ Live

The Next Bottleneck for AI Agent Adoption Isn't Tech — It's Trust

The real bottleneck for AI agent adoption isn't tech — it's trust. CIOs have three unanswered questions: who commanded it, who's accountable, and where the data goes. Since v0.8.4 NVIDIA OpenShell moves Permission Control and Data Sovereignty from config down to sandbox + policy enforcement.

W2 · 2026-06-02

3. Gateway four principles: the architectural answer

Coming soon

Enterprise AI Gateway: Four Architectural Principles

Enterprise AI Gateway requires four architectural principles done together: Control by Configuration, Security by Architecture, Accountability by Default, Portability by Design. v0.8.4 OpenShell extends Config and Architecture down to sandbox-level egress policy with Landlock filesystem / seccomp process isolation.

W3 · planned 2026-06-08

4. Config-driven governance: making it work at the team level

Coming soon

OpenAB Enterprise Governance — From Config to Department-Level Deployment

OpenAB's config-driven design fits enterprise AI governance naturally. One config.toml handles channel restriction, permission control, session management, multi-team deployment. Since v0.8.4 there's also a deployment-level choice — POD mode vs NVIDIA OpenShell sandbox mode — locked at deploy time; sandbox egress allowlist remains runtime-managed by host policy (agent can't change it).

W4 · planned 2026-06-15

Recent OpenAB updates

The backbone evolution behind this series

2026-05-20

v0.8.3 stable

Multi-platform: WeCom / Google Chat / Feishu support; Hermes Agent (xAI) + Grok Build CLI; Turn-boundary batching v2

2026-05-22

v0.8.4-beta.2

Google Antigravity CLI support (agy-acp Rust adapter); Goal-Driven Cronjob (jobs auto-stop on goal met) shipped same day

2026-05-26

v0.8.4-beta.4

openab-auth-proxy generalized to OAuth sidecar; Helm serviceAccountName / imagePullSecrets; Feishu/Lark chart

2026-05-26

Pi Coding Agent

pi-acp adapter — native subscription auth (Claude Pro/Max + ChatGPT OAuth); branching session tree; 15+ model swap

2026-05-26

v0.8.4-beta.5

openab-agent — brand-new native Rust coding agent (7MB per session, 28x lighter than Pi, 55x lighter than Kiro)

2026-05-27

v0.8.4-beta.6

Lifecycle hooks: [hooks.pre_boot] and [hooks.pre_shutdown] for agent boot / shutdown custom commands

2026-05-28

ghpool open-sourced

Sibling project — cloud-native GitHub API Proxy: PAT pooling, mutation pass-through, secrets manager integration (AWS / GCP / K8s Secrets)

2026-06-01

Computex 2026 — Jensen keynote

NVIDIA Jensen framed enterprise AI agent adoption's real blocker as the security review, not model capability — OpenShell unveiled as the sandboxed-runtime answer (agent capability declaration + human sign-off). ASUS Ascent GX10 announced OpenShell sandbox support the same week. This series' three-layer architecture lands on the same framework, from a working engineer's day-to-day.

2026-06-01

v0.8.4 stable + NVIDIA OpenShell

OpenShell sandbox mode shipped — Landlock filesystem + seccomp / unprivileged process + policy-enforced default-deny egress + gateway-managed credential placeholder (agent never sees raw secret). POD mode preserved; choose at deploy time.

Full release notes: github.com/openabdev/openab/releases

Subscribe to Blake Labs Newsletter

Engineering deep dives, AI development insights, and notes from the Taipei tech scene.No spam — only content worth reading.

We respect your privacy and will never share your information with third parties.
You can unsubscribe at any time.

OpenAB is a lightweight, cloud-native ACP bridging layer that connects Discord / Slack / Telegram messages to AI coding agents. The same org also open-sourced ghpool — the same gateway pattern applied to the GitHub API.