Haris Habib

What I do

• ->Designing safe, compliant AI agent rollouts inside regulated environments
• ->Modernizing cloud architecture for resilience, cost, and change velocity
• ->Building engineering operating models that ship safely and predictably
• ->Translating regulatory programs (CPS 230, AUSTRAC Tranche 2) into engineering evidence
• ->Helping technology leaders make defensible AI and architecture decisions

Hands-on with AI

I spend hours every day working directly in AI tools — shipping, not just strategizing. My daily stack includes:

• OpenClaw
• Genspark
• Claude Code
• Antigravity
• Cursor
• Codex

Latest writing

• The 2026 Budget Changed the ESOP Question For startup employees holding options, Australia's proposed CGT reform turns a familiar ESOP promise into a harder question: if the company wins, what do we actually keep?
• The MCP Supply Chain Crisis: Why Every CTO Needs a Gateway 200,000 vulnerable instances. 60-72% poisoning success rates. ASI04 on the OWASP Agentic Top 10. The Model Context Protocol is having its 'log4j moment' — and the response is not a patch, it is a gateway.
• The Supply Chain Moved Upstream: GitHub, Canvas, and Trivy From 19 March to 26 May 2026, three incidents hit three trusted software surfaces: the editor, the scanner, and the platform. The lesson is not only to patch faster. It is to govern the toolchain.
• APRA CPS 230: The 90-Day Engineering Framework Why many CPS 230 programs are still 5-star, and how engineering teams can get to 10-star proof in 90 days with clearer RTO/RPO mapping, incident triggers, and Board-ready evidence.
• AU Fintech Compliance Stack: Four AI Clocks, One Architecture Problem ASIC's cyber 'minute to midnight' warning, APRA's AI governance gaps, the EU AI Act's 2 August 2026 transparency date, and the DTA's 15 June 2026 mandate all point to the same fintech challenge: one control stack for governed AI.

All articles ->

Work with me

If you are leading AI adoption, modernizing cloud architecture, or building an engineering team that has to ship safely under regulatory pressure, I can help.