7-9 October, 2026 Prague, Czechia View More Details & Registration Important Note:Timing of sessions and room locations are subject to change.
The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.
Sign up or log in to add sessions to your schedule and sync them to your phone or calendar.
AI agents are moving from chat interfaces into workflows that read files, call tools, modify state, and coordinate multiple services. In cloud-hosted designs, this often creates a fragile trust boundary: private data leaves the device, tools are authorized through broad API keys, and the user has limited visibility into what the agent can do. This talk presents an open-source, local-first architecture for permissioned AI agents that can operate offline on Linux edge or personal infrastructure. We will break down the architecture into model serving, retrieval, tool invocation, capability scoping, identity, audit logs, sandboxing, human approval, and fallback synchronization when connectivity returns. The session is not about a specific agent framework; it is about the system boundary around agents. Attendees will learn how to separate reasoning from action, how to map tools to least-privilege permissions, how to keep sensitive context local, and how to evaluate agent workflows when network access is unavailable or intentionally disabled.
