chainday.live
Software & AI supply chain security
One day. One room. The whole software supply chain. 12 speakers, one track, 7 hours — in front of 250 reviewed seats, with nothing published afterwards. That is what lets people be specific.
- Date
- Wednesday, 13 January 2027
- Time
- 08:00 – 15:00 UTC
- Admission
- Free · 250 reviewed seats
Doors open in
Six tracks
Every link in the chain, from commit to compliance
One shared track through the day, so the whole room follows the same thread rather than splitting across parallel stages.
SBOM & Transparency
Generating, exchanging, validating and actually using bills of materials — CycloneDX, SPDX, VEX and the operational reality of ingesting them at scale.
Browse sessionsBuild Integrity & Provenance
SLSA levels, reproducible builds, signing and attestation, hardening CI/CD, and keeping the path from source to artifact tamper-evident.
Browse sessionsOpen Source Risk
Dependency confusion, typosquatting, maintainer burnout, package registry defence and the economics of the commons everyone builds on.
Browse sessionsAI Supply Chain
Model and dataset provenance, AIBOM, poisoned weights, agent tool chains, and what happens when the dependency you shipped is a model.
Browse sessionsRegulation & Assurance
EU CRA, NIS2, secure-by-design pledges, FDA and automotive expectations, procurement language and evidence that survives an audit.
Browse sessionsDetection & Response
Finding compromise in your pipeline, triaging the next xz, incident comms, and rebuilding trust after a supplier is breached.
Browse sessions
Headline sessions
Two keynotes and one panel
The anchor points of the day. Everything between them is a talk chosen by blind review.
- keynoteProvenance08:00–08:30 UTC
Opening Keynote: The Supply Chain Is the Product
Where supply chain security actually stands going into 2027 — what three years of incidents changed, what they did not, and the honest scorecard for the decade so far.
- Satish LakshminarayanMeridian Industrial Group
- panelSBOM11:35–12:15 UTC
Panel: Has SBOM Delivered on Its Promise?
Four practitioners who ship, ingest and audit bills of materials argue about whether the ecosystem is genuinely better off than it was in 2023 — and what would have to change for the answer to be an unqualified yes.
- Sai IyerHarbourline Bank
- Ingrid HalvorsenFjordline Marine
- Martina SchusterRheinwerk Automation
- Vikram ChandraDeccan Assurance
- keynoteResponse14:30–15:00 UTC
Closing Keynote: What We Fix Before Next January
A synthesis of the day: the things the room agreed on, the ones it did not, and the work that carries into 2028.
- SamCascadia Robotics
The line-up
12 speakers, chosen blind
Names and employers are stripped before the judging panel scores a single proposal. What you see below is what survived that.
Satish Lakshminarayan
Chief Product Security Officer
Meridian Industrial Group
Opening Keynote: The Supply Chain Is the Product
ProvenanceSam
Head of Incident Response
Cascadia Robotics
Closing Keynote: What We Fix Before Next January
ResponseJay Mody
Staff Engineer, AI Platform
Northwind Intelligence
Who Built This Model? Provenance for Fine-Tunes
AISai Iyer
Principal Security Architect
Harbourline Bank
Ten Million SBOMs Later: What Actually Breaks at Scale
SBOMIngrid Halvorsen
Security Data Engineer
Fjordline Marine
Building an SBOM Lake: Storage, Query, Retention
SBOMDaniel Brennan
Principal DevEx Engineer
Shannon Aerospace
Reproducible Builds: Three Years, Four Languages, One Diff
ProvenanceGregor Pavlovic
Open Source Security Lead
Foundation for Open Infrastructure
Anatomy of a Maintainer Takeover, Step by Step
Open SourceAmara Diallo
Security Programme Manager
Sahel Digital Bank
Triage at Volume: 400 Advisories a Week, Four People
Open Source
Call for speakers
Blind-reviewed by a panel of judges
Every proposal is anonymised before review. Six track chairs score independently against a published rubric, then the panel meets to balance the line-up. Declined proposals get their scores and real feedback — not a form letter.
- 01SubmitProposals close 5 December 2026
- 02AnonymiseNames and employers stripped within 48 hours
- 03Blind scoreThree judges minimum, published rubric
- 04NotifyEveryone hears back by 21 December 2026
Partners
Funded by vendors, programmed by practitioners
Sponsors keep the event free and get clearly-labelled slots of their own. They have no say over the CFP, the judges, who is admitted, or any other session.
Diamond2
Platinum4
Latest
News from the programme team
- Partners · 7 October 2026
Sponsorship without strings, and what that costs us
Sponsors fund the event and get labelled slots of their own. They get no say over the CFP, the judges, or any other session — and we have already turned down money over it.
Read - Programme · 18 September 2026
Why one day, one track, and a room we cap at 250
An online event has no venue constraint, so every limit we impose is a choice. Here is the reasoning behind a single track, a single day and a hard seat cap.
Read - CFP · 1 September 2026
The call for speakers is open — and the rubric is public
Proposals are open until 5 December. Here is exactly how they get scored, who scores them, and why we publish the rubric before anyone submits.
Read
250 seats. No ticket price. Nothing published.
Sessions are recorded and shared with confirmed attendees only. Nothing is published publicly, which is the reason speakers can be specific about what actually went wrong.