<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Haris Habib</title>
    <link>https://harishabib.au/</link>
    <atom:link href="https://harishabib.au/feed.xml" rel="self" type="application/rss+xml" />
    <description>AI adoption, cloud architecture, and engineering leadership from Sydney.</description>
    <language>en-AU</language>
    <lastBuildDate>Mon, 01 Jun 2026 22:56:14 GMT</lastBuildDate>
    <item>
      <title>The 2026 Budget Changed the ESOP Question</title>
      <link>https://harishabib.au/blog/esop-cgt-2026-budget-implications/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/esop-cgt-2026-budget-implications/</guid>
      <pubDate>Sat, 30 May 2026 00:00:00 GMT</pubDate>
      <description>For startup employees holding options, Australia&apos;s proposed CGT reform turns a familiar ESOP promise into a harder question: if the company wins, what do we actually keep?</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>The MCP Supply Chain Crisis: Why Every CTO Needs a Gateway</title>
      <link>https://harishabib.au/blog/mcp-supply-chain-crisis-why-every-cto-needs-a-gateway/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/mcp-supply-chain-crisis-why-every-cto-needs-a-gateway/</guid>
      <pubDate>Thu, 28 May 2026 00:00:00 GMT</pubDate>
      <description>200,000 vulnerable instances. 60-72% poisoning success rates. ASI04 on the OWASP Agentic Top 10. The Model Context Protocol is having its &apos;log4j moment&apos; — and the response is not a patch, it is a gateway.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>The Supply Chain Moved Upstream: GitHub, Canvas, and Trivy</title>
      <link>https://harishabib.au/blog/the-supply-chain-moved-upstream/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/the-supply-chain-moved-upstream/</guid>
      <pubDate>Wed, 27 May 2026 00:00:00 GMT</pubDate>
      <description>From 19 March to 26 May 2026, three incidents hit three trusted software surfaces: the editor, the scanner, and the platform. The lesson is not only to patch faster. It is to govern the toolchain.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>APRA CPS 230: The 90-Day Engineering Framework</title>
      <link>https://harishabib.au/blog/apra-cps-230-90-day-engineering-framework/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/apra-cps-230-90-day-engineering-framework/</guid>
      <pubDate>Mon, 25 May 2026 00:00:00 GMT</pubDate>
      <description>Why many CPS 230 programs are still 5-star, and how engineering teams can get to 10-star proof in 90 days with clearer RTO/RPO mapping, incident triggers, and Board-ready evidence.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>AU Fintech Compliance Stack: Four AI Clocks, One Architecture Problem</title>
      <link>https://harishabib.au/blog/au-fintech-compliance-stack-four-clocks-one-architecture-problem/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/au-fintech-compliance-stack-four-clocks-one-architecture-problem/</guid>
      <pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate>
      <description>ASIC&apos;s cyber &apos;minute to midnight&apos; warning, APRA&apos;s AI governance gaps, the EU AI Act&apos;s 2 August 2026 transparency date, and the DTA&apos;s 15 June 2026 mandate all point to the same fintech challenge: one control stack for governed AI.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>EU AI Act Countdown: Human Oversight Cannot Be A Checkbox</title>
      <link>https://harishabib.au/blog/eu-ai-act-human-oversight-countdown/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/eu-ai-act-human-oversight-countdown/</guid>
      <pubDate>Tue, 19 May 2026 00:00:00 GMT</pubDate>
      <description>With the EU AI Act&apos;s 2 August 2026 application date approaching, fintechs need to test whether their human-in-the-loop controls are real, usable, and evidenced.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>AI Washing Is The New Greenwashing</title>
      <link>https://harishabib.au/blog/ai-washing-is-the-new-greenwashing/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/ai-washing-is-the-new-greenwashing/</guid>
      <pubDate>Fri, 15 May 2026 00:00:00 GMT</pubDate>
      <description>The SEC&apos;s AI-washing actions show a simple pattern for fintech leaders: if you claim AI advantage, you need evidence, governance, and disclosures that match the claim.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>I Gave an AI Agent the Keys to My Life. Here Is the Trust Architecture.</title>
      <link>https://harishabib.au/blog/i-gave-an-ai-agent-the-keys/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/i-gave-an-ai-agent-the-keys/</guid>
      <pubDate>Tue, 12 May 2026 00:00:00 GMT</pubDate>
      <description>My personal AI agent can read my email, manage my calendar, run scripts, and message people. Handing that much access to an autonomous system is reckless — unless you build the right boundaries first. Here is the architecture that makes it safe.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>One Model Is the Wrong Default</title>
      <link>https://harishabib.au/blog/one-model-is-the-wrong-default/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/one-model-is-the-wrong-default/</guid>
      <pubDate>Tue, 05 May 2026 00:00:00 GMT</pubDate>
      <description>Most people pick one AI model and route everything through it. That is like hiring one person to be your strategist, your developer, and your data-entry clerk. A well-built agent uses the right model for each job — and the cost difference is enormous.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Your AI Agent Needs a Soul File</title>
      <link>https://harishabib.au/blog/your-ai-agent-needs-a-soul-file/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/your-ai-agent-needs-a-soul-file/</guid>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
      <description>Large language models are stateless — they wake up with no memory of who they are or who you are. The fix is not a bigger context window. It is a handful of plain text files that give an agent continuity, personality, and judgement across sessions.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>MCP Tool Poisoning: The Attack Vector Nobody Is Talking About</title>
      <link>https://harishabib.au/blog/mcp-tool-poisoning-agent-attack-surface/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/mcp-tool-poisoning-agent-attack-surface/</guid>
      <pubDate>Tue, 28 Apr 2026 00:00:00 GMT</pubDate>
      <description>AI agents trust their tools. That trust is now being exploited. The new attack surface is not your servers — it is the instructions your agents receive.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Australia&apos;s $160 Billion Compliance Tax</title>
      <link>https://harishabib.au/blog/australia-160-billion-compliance-tax/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/australia-160-billion-compliance-tax/</guid>
      <pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate>
      <description>Australian businesses spend $160 billion a year on compliance. That is 6% of GDP. Most of it is manual, fragmented, and completely automatable. Here is where the software opportunity sits.</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>Who Signs the Contract When Your AI Agent Does It?</title>
      <link>https://harishabib.au/blog/agent-identity-who-signs-the-contract/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/agent-identity-who-signs-the-contract/</guid>
      <pubDate>Fri, 17 Apr 2026 00:00:00 GMT</pubDate>
      <description>AI agents are now managing budgets, filing reports, and executing transactions. Australia&apos;s financial law has not caught up. That gap is both a risk and an opportunity.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Where The Best Startup Opportunities In Australia Are Now</title>
      <link>https://harishabib.au/blog/startup-opportunities-in-australia/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/startup-opportunities-in-australia/</guid>
      <pubDate>Tue, 14 Apr 2026 00:00:00 GMT</pubDate>
      <description>The strongest Australian startup opportunities are not smaller copies of US software categories. They sit where local pain, strategic capability, trust, and export potential overlap.</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>Australia&apos;s Company-Formation Drain</title>
      <link>https://harishabib.au/blog/australia-company-formation-drain/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/australia-company-formation-drain/</guid>
      <pubDate>Tue, 07 Apr 2026 00:00:00 GMT</pubDate>
      <description>Australia is excellent at forming AI and deep-tech startups. The harder national test is whether strategic companies can keep an Australian centre of gravity when they scale.</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>Australia&apos;s AI Incubator Problem</title>
      <link>https://harishabib.au/blog/australia-ai-incubator-us-companies/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/australia-ai-incubator-us-companies/</guid>
      <pubDate>Fri, 03 Apr 2026 00:00:00 GMT</pubDate>
      <description>Australia is forming serious AI startups, but a thin growth-stage layer means the best companies can be pulled offshore just as they begin to matter.</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>The Docker Moment for AI Agents</title>
      <link>https://harishabib.au/blog/the-docker-moment-for-ai-agents/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/the-docker-moment-for-ai-agents/</guid>
      <pubDate>Tue, 31 Mar 2026 00:00:00 GMT</pubDate>
      <description>AI agents are moving from clever demos to production systems. The important question is no longer only which model to use, but what scaffolding makes agents reliable, observable, and safe.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Architecting Cloud-Native Systems with DDD and EDA: AWS vs GCP</title>
      <link>https://harishabib.au/blog/architecting-cloud-native-aws-gcp/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/architecting-cloud-native-aws-gcp/</guid>
      <pubDate>Fri, 27 Mar 2026 00:00:00 GMT</pubDate>
      <description>A strategic guide to using Domain-Driven Design and Event-Driven Architecture on AWS and GCP, with practical service choices, trade-offs, and decision tests.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>Event-Driven Architecture in Practice: AWS vs GCP</title>
      <link>https://harishabib.au/blog/event-driven-architecture-aws-gcp/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/event-driven-architecture-aws-gcp/</guid>
      <pubDate>Tue, 24 Mar 2026 00:00:00 GMT</pubDate>
      <description>A practical guide to building event-driven systems on AWS and GCP, covering EventBridge, Pub/Sub, Eventarc, contracts, failure handling, and real-world operating trade-offs.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>Resilience Engineering in the Cloud: Building Systems That Survive</title>
      <link>https://harishabib.au/blog/resilience-engineering-cloud/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/resilience-engineering-cloud/</guid>
      <pubDate>Fri, 20 Mar 2026 00:00:00 GMT</pubDate>
      <description>A practical guide to designing resilient cloud systems on AWS and GCP, with failure modes, circuit breakers, bulkheads, chaos testing, and recovery patterns.</description>
      <category>system-design</category>
    </item>
    <item>
      <title>Where Are You on the AI Journey? The 4 Stages of AI Maturity</title>
      <link>https://harishabib.au/blog/ai-maturity-stages/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/ai-maturity-stages/</guid>
      <pubDate>Tue, 17 Mar 2026 00:00:00 GMT</pubDate>
      <description>A practical maturity model for moving from scattered AI experimentation to governed, measurable, production AI adoption.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>The Human-AI Partnership: A Framework for Safe Adoption</title>
      <link>https://harishabib.au/blog/human-ai-partnership/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/human-ai-partnership/</guid>
      <pubDate>Tue, 10 Mar 2026 00:00:00 GMT</pubDate>
      <description>A practical framework for AI adoption that separates where AI should assist, where humans must decide, and how organisations can build trust through verification.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Beyond the Hype: A Pragmatist&apos;s Guide to AI Adoption</title>
      <link>https://harishabib.au/blog/beyond-the-hype/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/beyond-the-hype/</guid>
      <pubDate>Fri, 06 Mar 2026 00:00:00 GMT</pubDate>
      <description>An optimistic but realistic guide to AI adoption: where AI creates genuine leverage, where it introduces risk, and how leaders can adopt it without losing control.</description>
      <category>ai-adoption</category>
    </item>
    <item>
      <title>Architecting the Future: A New Chapter</title>
      <link>https://harishabib.au/blog/welcome-neural/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/welcome-neural/</guid>
      <pubDate>Tue, 03 Mar 2026 00:00:00 GMT</pubDate>
      <description>Welcome to a practical knowledge base on modern software architecture, cloud infrastructure, pragmatic AI adoption, and technology leadership.</description>
      <category>tech-leadership</category>
    </item>
    <item>
      <title>The 10-Star Experience: Why Product and Engineering Need Legendary Test Cases</title>
      <link>https://harishabib.au/blog/10-star-experience-and-test-cases/</link>
      <guid isPermaLink="true">https://harishabib.au/blog/10-star-experience-and-test-cases/</guid>
      <pubDate>Fri, 27 Feb 2026 00:00:00 GMT</pubDate>
      <description>Most software is built to pass a 5-star functional checklist. But the products that win design for a 10-star legendary experience, then build the technical test cases to make it feel inevitable.</description>
      <category>tech-leadership</category>
    </item>
  </channel>
</rss>
