Kolega Labs/Writing
Writing

Everything we write down.

Articles, security advisories, release notes and short notes from the middle of a job. Written while it is still fresh, kept in one place. Filter by format or by subject.

Article26 AUG 2026 · 9 MIN

Choosing an AI Coding Assistant for Enterprise Teams

An AI coding assistant becomes infrastructure the moment a developer accepts its first suggestion. Score security, governance, telemetry, and code quality.

John·secure ai code generation
Article21 AUG 2026 · 8 MIN

Document Intake Automation and Case Triage for Banks

document intake automation · John

Article19 AUG 2026 · 9 MIN

Legacy System Modernization for Banks: Mainframe to Core

legacy system modernization · Jost

The security log

Advisories and findings have their own log.

Vulnerabilities we disclosed to maintainers, and vulnerabilities we caught in client code before they shipped. The log is where they are complete: severity, CVSS, affected versions, remediation.

Open the security log
AdvisoryAgentic AI Framework Security: OpenClaw as a Case Study for Industry-Wide Standards25 FEBFindingOpenClaw Security Assessment14 FEBFindingAgenta Security Assessment13 JAN
2 advisories · 9 findings/devsec/advisories/ →
Subject
39 pieces, newest firstkolega.ai/blog/
26 AUG
2026
Article

Choosing an AI Coding Assistant for Enterprise Teams

An AI coding assistant becomes infrastructure the moment a developer accepts its first suggestion. Score security, governance, telemetry, and code quality.

secure ai code generation·9 min·John
21 AUG
2026
Article

Document Intake Automation and Case Triage for Banks

Document intake automation clears bank onboarding backlogs: extract, classify, and route KYC documents with a full audit trail and measurable outcomes.

document intake automation·8 min·John
19 AUG
2026
Article

Legacy System Modernization for Banks: Mainframe to Core

Legacy system modernization for banks is a spectrum, not one big bang. Rehost, refactor, replace, or retire: data migration is the linchpin either way.

legacy system modernization·9 min·Jost
14 AUG
2026
Article

Model Risk Management: The AI Audit Trust Moat

Model risk management predates LLMs, and that is your advantage. Extend SR 11-7 discipline to AI and learn what a practical AI audit checks, line by line.

model risk management·8 min·Jost
12 AUG
2026
Article

How Do Banks Use AI Today: Patterns That Survive Production

How do banks use AI? Fraud detection, AML, KYC, and document processing run in production today. The showy pilots die. Here are the patterns that survive.

how do banks use ai·9 min·Jost
7 AUG
2026
Article

DevSecOps for AI: Shift Left on Model and Prompt Security

AI breaks the DevSecOps pipeline. Shift left on prompts, models, evals, and generated code to reduce prompt injection and supply chain risk before release.

ai security·9 min·Evan
5 AUG
2026
Article

AI Agent Governance: Audit Trails and Human-in-the-Loop

AI agent governance is what makes autonomous software safe to run in regulated firms. Audit trails, permissions, and human approval loops do the work.

ai agent governance·9 min·Evan
29 JUL
2026
Article

Core Banking Migration Without the Outage: Provable Approach

Core banking migration is the highest-stakes IT program a bank runs. Provable, verified migration de-risks data quality, reconciliation, and the parallel run.

core banking migration·11 min·Jost

Reading is cheaper than a failed cutover.

If something here lands close to what you're facing, the fastest next step is a conversation with the people who wrote it.

The research library