Practitioner thinking, from the people doing the work.

On 3 July, the Monetary Authority of Singapore, together with a group of financial institutions and FinTechs, published Safeguards for Agentic Finance at Runtime, or SAFR. It was developed under MAS’s BuildFin.ai initiative, and it sets out how AI agents in financial services should be authorised, how human oversight is triggered, and what is recorded at the point of every action. It is an industry white paper, not a regulation. That is the right way to read it. But it matter

KubeCon + CloudNativeCon India 2026 in Mumbai was a natural stop for Midships. As we deepen our commitment to open-source IAM - Keycloak - being in the room with the CNCF community at this moment in our journey was exactly where we needed to be. The event's theme was Agentic AI, and while the keynotes were wide-ranging, what we're taking home is something more practical: sharper thinking on the technologies we're already using, a clearer view on the ones we're adding to our s

At Midships we have made a conscious decision to cap the team at forty. Not forty people, forty excellent engineers. Every seat matters and every seat has been earned. In a year when most of my peers are talking about how many people AI lets them remove, I want to explain why we are doing something that looks, on the surface, like the opposite. It started with nostalgia. I was thinking back to the architecture courses I was sent on early in my career, the ones that genuinely

There is a version of the AI story that every enterprise has now heard. Autonomous agents can understand what a customer is trying to achieve and orchestrate across systems to deliver it. Intent in. Outcome out. It is being sold as a technology you buy and connect. Plug it into your existing products, channels and processes, and it works. That is the misread. And it is a big one. Customer intent driven workflow is not a tool that slots neatly into the organisation you already

Abstract Production identity failures do not always begin with infrastructure outages. Many begin with early token and session design decisions that become difficult to reverse later. Long-lived access tokens, introspection-heavy service designs, weak revocation paths, and inconsistent session binding can create security and availability risks that only become visible after applications have already integrated with the identity platform. Keycloak can support secure authentica

For decades, enterprise automation has followed a simple principle. If a business process could be mapped in advance, it could be automated. Workflow engines, business rules, approval systems, and orchestration platforms transformed how organisations operate by taking predictable work and executing it consistently at scale. That model remains incredibly effective. But it has limits. Many of the most valuable activities inside an enterprise cannot be fully mapped in advance. F