Software Development
Secure SSDLC in the age of generative AI
Implementing AI assistants requires shifting from blind trust in tools to architectural data control and mandatory code ...
// author
Serhiy Boyko
Enterprise Systems & Automation Architect
Designs enterprise systems on UnityBase and Scriptum platforms: BPM automation, low-code development, RPA integrations, AI agents in workflows. Brings client's disparate systems into a managed whole — from process modelling to production deployment.
Process Automation
Managed autonomy: architectural control of AI agents in BPM processes
How to minimize 'Excessive Agency' risk when implementing AI? Using BPMN orchestration and RLS/RBAC mechanisms to protec...
Process Automation
Managing AI agent risks in enterprise business processes
How to grant AI agents autonomy without losing data control? We examine architectural barriers, OWASP and NIST standards...
Process Automation
Trust architecture in automated processes: Digital Provenance as a NIS2 requirement
How to implement trust architecture and Digital Provenance in business process automation to meet NIS2 requirements and ...
Process Automation
Controlling AI agents in BPM: preventing excessive agency
Protecting corporate BPM processes from excessive AI agent autonomy (OWASP LLM08:2025) using strict BPMN 2.0 orchestrati...
Process Automation
BPM as a tool for NIS2 compliance
NIS2 requirements are reshaping cybersecurity, shifting from static policies to a Compliance-by-Design approach where pr...
Process Automation
Governance of multi-agent BPM systems: scaling autonomous processes
Balancing AI agent autonomy and compliance requirements in enterprise architecture using BPMN, DMN, and UnityBase platfo...
Process Automation
Managing AI risks in enterprise BPMN processes
Protecting enterprise workflows from excessive AI agency using domain model architectural constraints to turn AI agents ...
Process Automation
Architectural choices 2026: why complex processes require Domain-Driven design
In 2026, the shift to AI-native architectures makes rigid SaaS platforms a risk to unique business logic. We explore why...
Process Automation
Securing AI agents in enterprise BPM processes
Preventing excessive AI agency in corporate processes using BPMN and DMN standards and strict architectural platform-lev...
Software Development
Implementing ISO/IEC 42001 in enterprise AI development
Transforming ISO/IEC 42001 requirements into engineering controls within the SDLC to ensure automated evidence for succe...
Software Development
Managing excessive agency in enterprise AI systems
Traditional RBAC cannot mitigate Excessive Agency risks. We explore architectural methods to constrain autonomous AI age...