<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Claire</title>
    <description>The latest articles on DEV Community by Claire (@claire_p).</description>
    <link>https://dev.to/claire_p</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3997985%2Fbfc2b34b-37d0-4dcb-9d42-9a02c04ea641.png</url>
      <title>DEV Community: Claire</title>
      <link>https://dev.to/claire_p</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/claire_p"/>
    <language>en</language>
    <item>
      <title>AI Project Management: Finding Blockers Across Tickets, Pull Requests and Team Conversations</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 15 Oct 2026 10:44:30 +0000</pubDate>
      <link>https://dev.to/claire_p/ai-project-management-finding-blockers-across-tickets-pull-requests-and-team-conversations-3l76</link>
      <guid>https://dev.to/claire_p/ai-project-management-finding-blockers-across-tickets-pull-requests-and-team-conversations-3l76</guid>
      <description>&lt;p&gt;A ticket says “in progress.” Its pull request has been waiting for review for three days. A team conversation mentions that a dependent API is changing.&lt;/p&gt;

&lt;p&gt;Each update tells part of the story. Together, they suggest a delivery risk that the project board may not clearly show.&lt;/p&gt;

&lt;p&gt;This is where AI-assisted project management can be useful: connecting scattered evidence so a team can investigate before a missed dependency becomes a missed deadline.&lt;/p&gt;

&lt;p&gt;GeekyAnts’ article on &lt;a href="https://geekyants.com/blog/ai-project-manager-how-ai-can-track-tasks-risks-blockers-dependencies-and-deadlines?utm_source=dis2026" rel="noopener noreferrer"&gt;how AI can track tasks, risks, blockers, dependencies and deadlines&lt;/a&gt; describes this as an intelligence layer across existing delivery tools, with people retaining decision authority.&lt;/p&gt;

&lt;h2&gt;
  
  
  What should the system identify?
&lt;/h2&gt;

&lt;p&gt;Useful signals include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Tasks without a clear owner or recent progress.&lt;/li&gt;
&lt;li&gt;Pull requests awaiting review that affect downstream work.&lt;/li&gt;
&lt;li&gt;Dependencies mentioned in conversations but missing from tickets.&lt;/li&gt;
&lt;li&gt;Unresolved approvals that could affect a release.&lt;/li&gt;
&lt;li&gt;Conflicting information about task status or delivery dates.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;These signals need context. An inactive ticket may be intentionally paused. An open pull request may be an early draft. A suggested deadline in a conversation may never have been agreed upon.&lt;/p&gt;

&lt;p&gt;The system should present these as findings to verify, rather than silently treating every inference as fact.&lt;/p&gt;

&lt;h2&gt;
  
  
  A practical example: a delayed API dependency
&lt;/h2&gt;

&lt;p&gt;Consider an illustrative team building a checkout feature.&lt;/p&gt;

&lt;p&gt;The frontend ticket is progressing, but the backend team reports a change to the payment API contract. QA is scheduled to begin integration testing the following day.&lt;/p&gt;

&lt;p&gt;A useful AI-generated finding would connect the affected work and explain:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Integration testing may be delayed because the payment API contract is changing. The frontend task depends on that API. Confirmation of the revised contract is needed before testing begins.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;The recommendation should include links to the relevant ticket and source discussion. It should distinguish the confirmed API change from the inferred testing risk.&lt;/p&gt;

&lt;p&gt;The project lead can then verify the impact, assign a follow-up and decide whether the schedule needs to change.&lt;/p&gt;

&lt;h2&gt;
  
  
  Start with read-only access
&lt;/h2&gt;

&lt;p&gt;A first implementation can focus on summaries and suggested follow-ups without editing project records.&lt;/p&gt;

&lt;p&gt;That gives the team a chance to evaluate whether the system identifies meaningful problems, understands project terminology and avoids repetitive alerts.&lt;/p&gt;

&lt;p&gt;Before allowing updates, teams should define which actions require approval. Changing a delivery commitment, reassigning ownership or closing a blocker should involve an authorized person.&lt;/p&gt;

&lt;p&gt;Read-only access still needs appropriate permissions. A summary must not expose information from a restricted repository or private conversation to someone who cannot access the source.&lt;/p&gt;

&lt;h2&gt;
  
  
  Make recommendations inspectable
&lt;/h2&gt;

&lt;p&gt;A useful finding should show:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The affected task or dependency.&lt;/li&gt;
&lt;li&gt;The supporting evidence and when it was recorded.&lt;/li&gt;
&lt;li&gt;What the system observed versus what it inferred.&lt;/li&gt;
&lt;li&gt;The proposed follow-up.&lt;/li&gt;
&lt;li&gt;The person responsible for reviewing it.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This structure makes it easier to challenge an incorrect conclusion. It also helps avoid vague warnings such as “the project appears at risk,” which offer little direction.&lt;/p&gt;

&lt;h2&gt;
  
  
  Measure usefulness, not alert volume
&lt;/h2&gt;

&lt;p&gt;Generating more notifications does not necessarily improve delivery.&lt;/p&gt;

&lt;p&gt;A pilot should track whether meaningful blockers surface earlier, how often recommendations need correction and how much effort the team spends reviewing them.&lt;/p&gt;

&lt;p&gt;Forecast accuracy matters too. Repeatedly predicting delays that never happen can make teams ignore the system, including its useful findings.&lt;/p&gt;

&lt;p&gt;AI-assisted project management is most useful when it helps people locate evidence and make timely decisions. Its value depends on reliable source data, clear permissions and recommendations that teams can verify.&lt;/p&gt;

&lt;p&gt;Which would be more useful in an engineering workflow: dependency detection, review-bottleneck alerts or evidence-backed status summaries?&lt;/p&gt;

</description>
      <category>forum</category>
      <category>ai</category>
      <category>softwaredevelopment</category>
      <category>productivity</category>
    </item>
    <item>
      <title>Beyond Test Automation: A Balanced Testing Strategy and Five Companies to Consider</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 15 Oct 2026 06:16:37 +0000</pubDate>
      <link>https://dev.to/claire_p/beyond-test-automation-a-balanced-testing-strategy-and-five-companies-to-consider-5ehb</link>
      <guid>https://dev.to/claire_p/beyond-test-automation-a-balanced-testing-strategy-and-five-companies-to-consider-5ehb</guid>
      <description>&lt;p&gt;A regression suite can pass while customers still encounter confusing workflows, broken interactions, or unexpected failures. Automated checks provide evidence about the conditions they test. They cannot establish that every important product risk has been covered.&lt;/p&gt;

&lt;p&gt;For developers evaluating quality engineering services, the useful question is therefore broader than how many tests a company can automate.&lt;/p&gt;

&lt;p&gt;How does its testing approach help a team understand whether a release is ready?&lt;/p&gt;

&lt;h2&gt;
  
  
  What a balanced testing strategy actually means
&lt;/h2&gt;

&lt;p&gt;GeekyAnts’ article, &lt;a href="https://techblog.geekyants.com/stop-automating-everything-a-balanced-quality-engineering-approach-to-testing?utm_source=dis2026" rel="noopener noreferrer"&gt;Stop Automating Everything: A Balanced Quality Engineering Approach to Testing&lt;/a&gt;, argues for selecting testing methods according to risk.&lt;/p&gt;

&lt;p&gt;Its main recommendations are straightforward: validate business rules through APIs where appropriate, reserve UI automation for important journeys, retain exploratory testing, and measure the usefulness of testing rather than script volume. AI can support generation and failure analysis, while engineers validate its conclusions.&lt;/p&gt;

&lt;p&gt;The article also makes an important distinction between functional success and user experience. A script that completes a purchase does not necessarily establish that the interaction is understandable or usable.&lt;/p&gt;

&lt;p&gt;These ideas provide a useful starting point for assessing both internal testing practices and external engineering partners.&lt;/p&gt;

&lt;h2&gt;
  
  
  Start with a failure scenario, then choose the test
&lt;/h2&gt;

&lt;p&gt;Consider a subscription product that allows an administrator to change a customer’s plan.&lt;/p&gt;

&lt;p&gt;“Test the upgrade flow” is too broad to guide an effective implementation. The team first needs to separate the questions:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Risk to investigate&lt;/th&gt;
&lt;th&gt;Example testing approach&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;The price calculation is incorrect&lt;/td&gt;
&lt;td&gt;Unit tests covering calculation boundaries&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;An unauthorized user changes a plan&lt;/td&gt;
&lt;td&gt;API tests covering permission combinations&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;The interface submits the wrong plan&lt;/td&gt;
&lt;td&gt;A focused browser test&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;The confirmation leaves the customer uncertain&lt;/td&gt;
&lt;td&gt;Exploratory review and usability evaluation&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Concurrent changes produce inconsistent records&lt;/td&gt;
&lt;td&gt;Integration tests exercising concurrency&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;This is an illustrative allocation, not a fixed template. Architecture and failure impact should determine the final approach.&lt;/p&gt;

&lt;p&gt;The distinction also prevents misleading coverage claims. Testing a permission rule through an API establishes different evidence from confirming that a button is hidden. A hidden button alone does not demonstrate server-side authorization.&lt;/p&gt;

&lt;p&gt;For a partner evaluation, this example becomes a practical exercise: ask each candidate to propose coverage for the same feature and explain what its plan leaves untested.&lt;/p&gt;

&lt;h2&gt;
  
  
  Five companies to consider for quality engineering
&lt;/h2&gt;

&lt;p&gt;The following companies have relevant public testing capabilities or engineering material. This is an editorial shortlist, with GeekyAnts first as the source of the discussion, rather than an independently verified performance ranking.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. GeekyAnts
&lt;/h3&gt;

&lt;p&gt;GeekyAnts’ published approach connects automated checks with exploratory work and human evaluation. The article provides a basis for discussing how a delivery team would distribute testing effort.&lt;/p&gt;

&lt;p&gt;Its recommendation to investigate test maintenance, unreliable failures, and escaped defects is especially useful when evaluating an existing suite. However, the article presents a strategy rather than measured comparative results. Prospective clients should request project evidence showing how the approach worked in practice.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation question:&lt;/strong&gt; Can the proposed team explain which existing tests it would retain, replace, or remove, and what evidence supports those decisions?&lt;/p&gt;

&lt;h3&gt;
  
  
  2. Thoughtworks
&lt;/h3&gt;

&lt;p&gt;Thoughtworks’ published cloud testing offering includes functional and non-functional assessment, accessibility considerations, test strategy, and collaboration with client teams. It also describes knowledge sharing through paired work.&lt;/p&gt;

&lt;p&gt;This makes it relevant to evaluate when testing improvements need to become part of the internal engineering process. The engagement should leave developers able to understand and maintain the resulting checks.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation question:&lt;/strong&gt; How will the engagement improve the internal team’s testing decisions after the external specialists leave?&lt;/p&gt;

&lt;h3&gt;
  
  
  3. EPAM
&lt;/h3&gt;

&lt;p&gt;EPAM offers quality engineering alongside architecture, development, continuous testing, and DevOps. Its published testing portfolio includes automation tools and consulting capabilities.&lt;/p&gt;

&lt;p&gt;That breadth makes it relevant to assess when quality issues span several services or delivery teams. Buyers should still examine the specific proposed team and implementation plan rather than infer project suitability from the size of the service portfolio.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation question:&lt;/strong&gt; How will the team distinguish product defects from test infrastructure failures across interconnected systems?&lt;/p&gt;

&lt;h3&gt;
  
  
  4. Qualitest
&lt;/h3&gt;

&lt;p&gt;Qualitest offers software testing consulting, including identifying testing bottlenecks and assessing where automation can improve effectiveness. Its published services also cover functional, performance, security, and automated testing.&lt;/p&gt;

&lt;p&gt;It is a relevant candidate when an organization wants a focused review of its testing capability. A useful proposal should connect recommendations to specific product risks and explain the effort needed to maintain the solution.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation question:&lt;/strong&gt; What assessment will happen before the team recommends new tools or additional automation?&lt;/p&gt;

&lt;h3&gt;
  
  
  5. Endava
&lt;/h3&gt;

&lt;p&gt;Endava describes test engineering as part of its digital engineering capabilities. Its technical material also discusses introducing performance and security testing earlier in delivery.&lt;/p&gt;

&lt;p&gt;This makes it relevant to evaluate when late discovery of non-functional problems repeatedly disrupts releases. The important detail is how those checks will fit into the actual development workflow.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation question:&lt;/strong&gt; Which checks will run during development, which require a dedicated environment, and who will investigate failures?&lt;/p&gt;

&lt;h2&gt;
  
  
  Make the comparison practical
&lt;/h2&gt;

&lt;p&gt;A small assessment can reveal more than a broad capability presentation.&lt;/p&gt;

&lt;p&gt;Each candidate could review the same feature, a sample of existing tests, and a recent defect. The requested output should explain:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Which risks lack meaningful coverage.&lt;/li&gt;
&lt;li&gt;Which checks duplicate existing evidence.&lt;/li&gt;
&lt;li&gt;What changes should happen first.&lt;/li&gt;
&lt;li&gt;How developers will investigate failures.&lt;/li&gt;
&lt;li&gt;What the internal team will own after handover.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The review should also challenge assumptions. A proposal to automate every scenario deserves scrutiny, but so does a proposal to reduce testing without explaining the remaining risk.&lt;/p&gt;

&lt;p&gt;A useful quality engineering partner can justify both the tests it adds and the work it decides is unnecessary.&lt;/p&gt;

&lt;p&gt;For development teams, the aim is a testing process that produces evidence they can act on. A smaller, well-explained suite can be more useful than a large one whose failures nobody understands.&lt;/p&gt;

</description>
      <category>testing</category>
      <category>devops</category>
      <category>automation</category>
      <category>softwaredevelopment</category>
    </item>
    <item>
      <title>Scaling From 100 to 100,000 Customers: What Breaks and Five Engineering Companies to Evaluate</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 01 Oct 2026 07:02:24 +0000</pubDate>
      <link>https://dev.to/claire_p/scaling-from-100-to-100000-customers-what-breaks-and-five-engineering-companies-to-evaluate-28i9</link>
      <guid>https://dev.to/claire_p/scaling-from-100-to-100000-customers-what-breaks-and-five-engineering-companies-to-evaluate-28i9</guid>
      <description>&lt;p&gt;An application can look healthy while its customer base grows, then struggle when checkout, reporting and search workloads run simultaneously. Customer count alone does not explain the pressure. The work those customers generate matters more.&lt;/p&gt;

&lt;p&gt;That distinction runs through GeekyAnts’ podcast discussion with Ankur Gupta, introduced as a solution architect at OceanBase. This article draws on the episode’s transcript and adds practical considerations for teams assessing architecture and engineering partners.&lt;/p&gt;

&lt;h2&gt;
  
  
  Customer numbers are not a capacity specification
&lt;/h2&gt;

&lt;p&gt;A product with 100,000 registered customers may have relatively little concurrent activity. A smaller product can face intensive traffic during a sale or reporting deadline.&lt;/p&gt;

&lt;p&gt;The transcript highlights how growth introduces different data types and workflows. Transactions, analytics and AI-assisted search place different demands on infrastructure.&lt;/p&gt;

&lt;p&gt;A useful capacity assessment therefore starts with:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Peak concurrent activity and requests per second.&lt;/li&gt;
&lt;li&gt;The mix of reads, writes, searches and background jobs.&lt;/li&gt;
&lt;li&gt;Data volume and concentration around particular customers.&lt;/li&gt;
&lt;li&gt;Response-time expectations for critical journeys.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;“Support 100,000 customers” becomes meaningful only when those workload assumptions are explicit.&lt;/p&gt;

&lt;h2&gt;
  
  
  Diagnose the database before adding infrastructure
&lt;/h2&gt;

&lt;p&gt;Gupta identifies query execution, stored procedures, joins and data distribution as areas that deserve attention.&lt;/p&gt;

&lt;p&gt;The practical lesson is to investigate where time is spent before increasing capacity. A slow endpoint might be waiting on an inefficient query, a saturated connection pool or a downstream dependency.&lt;/p&gt;

&lt;p&gt;Teams can begin with one critical workflow, such as checkout:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Trace the request across application and database calls.&lt;/li&gt;
&lt;li&gt;Inspect the slowest queries and their execution plans.&lt;/li&gt;
&lt;li&gt;Compare performance under representative concurrent load.&lt;/li&gt;
&lt;li&gt;Repeat the test after a targeted change.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Additional application instances will not necessarily resolve a bottleneck in a shared database.&lt;/p&gt;

&lt;h2&gt;
  
  
  Caching helps when its rules are explicit
&lt;/h2&gt;

&lt;p&gt;The discussion presents caching as a way to reduce repeated API and database work.&lt;/p&gt;

&lt;p&gt;Product information and other frequently requested data may be suitable candidates. However, a cache introduces decisions about freshness, invalidation and permissions.&lt;/p&gt;

&lt;p&gt;A useful design specifies what is cached, how long it remains valid and what happens when many requests arrive after it expires. Data scoped to a customer or tenant must remain isolated.&lt;/p&gt;

&lt;p&gt;Caching should reduce measured repetition while preserving the application’s correctness.&lt;/p&gt;

&lt;h2&gt;
  
  
  Distribution brings trade-offs
&lt;/h2&gt;

&lt;p&gt;Horizontal scaling and partitioning are recurring themes in the transcript. Both can help distribute work, but neither automatically guarantees reliability.&lt;/p&gt;

&lt;p&gt;Partition keys deserve particular attention. A design that spreads ordinary traffic evenly may still concentrate a large customer’s activity on one partition.&lt;/p&gt;

&lt;p&gt;The discussion also favors consolidating certain transactional and analytical capabilities. That is an option to evaluate, rather than a universal requirement. Consolidation can simplify some integrations; separate systems can provide workload isolation.&lt;/p&gt;

&lt;p&gt;The appropriate choice depends on access patterns, consistency requirements, operating costs and the team’s ability to maintain the system.&lt;/p&gt;

&lt;h2&gt;
  
  
  Architecture needs an economic purpose
&lt;/h2&gt;

&lt;p&gt;One example in the episode concerns an architecture that prioritized analytical capabilities before the business needed them. The broader lesson is that technical investment should follow actual product priorities.&lt;/p&gt;

&lt;p&gt;Beyond infrastructure spending, teams should account for maintenance, incident response and specialist operational work.&lt;/p&gt;

&lt;p&gt;Cost per successful transaction can be more informative than the monthly hosting bill alone. It connects spending to useful work, especially when retries and failures consume resources without delivering customer value.&lt;/p&gt;

&lt;h2&gt;
  
  
  Five companies to evaluate for scaling and modernization
&lt;/h2&gt;

&lt;p&gt;The following shortlist reflects relevant published services. It is not an independently verified performance ranking, and inclusion does not establish that a particular team has handled an equivalent workload.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. GeekyAnts
&lt;/h3&gt;

&lt;p&gt;GeekyAnts publishes services covering scalability planning, observability, cloud infrastructure and production readiness.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Request a sample assessment showing how bottlenecks are identified, prioritized and retested. Hosting the source discussion should be distinguished from evidence of project delivery.&lt;/p&gt;

&lt;h3&gt;
  
  
  2. Thoughtworks
&lt;/h3&gt;

&lt;p&gt;Thoughtworks offers legacy modernization and data platform modernization services.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Ask how the proposed team would improve capacity incrementally while preserving existing behavior and limiting migration risk. &lt;/p&gt;

&lt;h3&gt;
  
  
  3. Dev Technosys
&lt;/h3&gt;

&lt;p&gt;Dev Technosys lists custom software development, consulting and maintenance services.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Establish whether performance engineering is explicitly included. Request relevant load-test results, architecture examples and clear ownership of production support. &lt;/p&gt;

&lt;h3&gt;
  
  
  4. EPAM
&lt;/h3&gt;

&lt;p&gt;EPAM offers engineering modernization and cloud services that address architectural change and scalability.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Examine how application, database and infrastructure changes would be coordinated, including migration testing and rollback planning. &lt;/p&gt;

&lt;h3&gt;
  
  
  5. IBM Consulting
&lt;/h3&gt;

&lt;p&gt;IBM Consulting provides application modernization and cloud transformation services.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Clarify platform dependencies, operating costs and the skills the internal team will need after handover&lt;/p&gt;

&lt;h2&gt;
  
  
  Compare partners using the same workload
&lt;/h2&gt;

&lt;p&gt;A useful evaluation gives each company the same scenario: traffic patterns, data volumes, current constraints and reliability targets.&lt;/p&gt;

&lt;p&gt;The requested deliverable should include a diagnosis, a proposed intervention, a repeatable load test and evidence of its effect. This makes proposals easier to compare than broad promises about scalability.&lt;/p&gt;

&lt;p&gt;The original discussion is available in &lt;a href="https://www.youtube.com/watch?v=wZosgJUSsL8" rel="noopener noreferrer"&gt;“What Actually Breaks When You Go From 100 to 100,000 Customers”&lt;/a&gt;. Its central question is a useful starting point: which assumptions stop holding as the workload changes?&lt;/p&gt;

</description>
      <category>forum</category>
      <category>devops</category>
      <category>database</category>
      <category>architecture</category>
    </item>
    <item>
      <title>From AI Prototype to Enterprise Software: SSO, Audit Logs, and 5 Companies to Evaluate</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 01 Oct 2026 04:46:36 +0000</pubDate>
      <link>https://dev.to/claire_p/from-ai-prototype-to-enterprise-software-sso-audit-logs-and-5-companies-to-evaluate-23fl</link>
      <guid>https://dev.to/claire_p/from-ai-prototype-to-enterprise-software-sso-audit-logs-and-5-companies-to-evaluate-23fl</guid>
      <description>&lt;p&gt;An AI-generated application can demonstrate a workflow without proving that it can safely support an enterprise customer.&lt;/p&gt;

&lt;p&gt;A convincing dashboard leaves important questions unanswered. Can employees authenticate through their organization’s identity provider? Can an administrator investigate a permission change? Can someone access another customer’s records by modifying an API request?&lt;/p&gt;

&lt;p&gt;These questions provide a more useful starting point for evaluating engineering partners than the appearance of a prototype.&lt;/p&gt;

&lt;p&gt;This article examines the technical gaps and compares five companies with relevant engineering or identity-management offerings.&lt;/p&gt;

&lt;h2&gt;
  
  
  What does the original article highlight?
&lt;/h2&gt;

&lt;p&gt;The GeekyAnts article, &lt;a href="https://geekyants.com/blog/sso-audit-logs-and-rbac-the-enterprise-features-ai-prototyping-tools-do-not-cover-sarika-gautam?utm_source=dis2026" rel="noopener noreferrer"&gt;SSO, Audit Logs and RBAC: The Enterprise Features AI Prototyping Tools Do Not Cover&lt;/a&gt;, draws on a discussion with Sarika Gautam, VP Engineering.&lt;/p&gt;

&lt;p&gt;Its central argument is that generated implementations lack essential organizational context unless teams explicitly supply it. Role definitions, access boundaries, and security requirements cannot be inferred reliably from a basic product prompt.&lt;/p&gt;

&lt;p&gt;The article also highlights delayed audit logging, increasingly complicated role combinations, and the need for experienced review before production.&lt;/p&gt;

&lt;p&gt;A useful qualification is that AI tools can assist with these implementations. The engineering challenge is establishing the correct requirements and verifying that the resulting system enforces them.&lt;/p&gt;

&lt;h2&gt;
  
  
  SSO and authorization need separate acceptance criteria
&lt;/h2&gt;

&lt;p&gt;Single sign-on establishes identity across participating applications. Authorization determines which operations that identity may perform.&lt;/p&gt;

&lt;p&gt;Although the source discusses them together, they remain distinct responsibilities. OWASP explicitly separates authentication from authorization and recommends validating permissions on every request.&lt;/p&gt;

&lt;p&gt;A successful login therefore proves relatively little about application permissions.&lt;/p&gt;

&lt;p&gt;For an illustrative multi-tenant SaaS product, a review could examine these scenarios:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Scenario&lt;/th&gt;
&lt;th&gt;Expected application behavior&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;An authenticated member requests another tenant’s document&lt;/td&gt;
&lt;td&gt;Access is denied&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;A viewer calls an editing endpoint directly&lt;/td&gt;
&lt;td&gt;The server rejects the operation&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;An administrator changes a member’s role&lt;/td&gt;
&lt;td&gt;Subsequent requests follow the defined permission-update policy&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;An employee loses organization membership&lt;/td&gt;
&lt;td&gt;Existing access expires or is revoked according to the documented lifecycle policy&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;These are proposed acceptance tests, not results from the source article.&lt;/p&gt;

&lt;p&gt;Identity-provider integration should come with explicit decisions about account linking, organization membership, session duration, and deprovisioning. Otherwise, an apparently complete login flow can conceal unresolved lifecycle behavior.&lt;/p&gt;

&lt;h2&gt;
  
  
  Audit logs need an event model
&lt;/h2&gt;

&lt;p&gt;A debugging message and an audit event serve different purposes.&lt;/p&gt;

&lt;p&gt;A message such as &lt;code&gt;update failed&lt;/code&gt; may help during development. An investigation needs enough context to establish the actor, attempted action, affected resource, timing, and outcome.&lt;/p&gt;

&lt;p&gt;OWASP’s logging guidance emphasizes application-level context and distinguishes audit trails from other logging purposes. It also recommends protecting logs and excluding sensitive information such as passwords and access tokens.&lt;/p&gt;

&lt;p&gt;An illustrative permission-change event might look like this:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight json"&gt;&lt;code&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"event_type"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"membership.role_changed"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"occurred_at"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"2026-10-01T04:30:00Z"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"actor_id"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"user_42"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"tenant_id"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"org_18"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"target_id"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"membership_93"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"previous_role"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"viewer"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"new_role"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"editor"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"outcome"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"success"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"request_id"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"req_7f2"&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;This example is a starting point, not a complete logging specification.&lt;/p&gt;

&lt;p&gt;The implementation still needs decisions about retention, access to records, tamper protection, and failures in the logging pipeline. A useful review exercise is to reconstruct a role change from the stored events and check whether the evidence is sufficient.&lt;/p&gt;

&lt;h2&gt;
  
  
  RBAC needs boundaries beyond role names
&lt;/h2&gt;

&lt;p&gt;Labels such as &lt;code&gt;admin&lt;/code&gt;, &lt;code&gt;editor&lt;/code&gt;, and &lt;code&gt;viewer&lt;/code&gt; do not fully describe an access model.&lt;/p&gt;

&lt;p&gt;An editor might modify documents in one workspace while having no access to another. An administrator might manage memberships without being allowed to read confidential records.&lt;/p&gt;

&lt;p&gt;Auth0’s documentation describes RBAC policies in terms of assigned roles and permissions, while also recognizing cases that require more complex authorization rules.&lt;/p&gt;

&lt;p&gt;A practical design exercise maps:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The actor requesting access.&lt;/li&gt;
&lt;li&gt;The operation being attempted.&lt;/li&gt;
&lt;li&gt;The resource and its organization or workspace.&lt;/li&gt;
&lt;li&gt;Any additional conditions that affect the decision.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;OWASP recommends least privilege and denial by default. Frontend visibility controls should be backed by server-side authorization checks.&lt;/p&gt;

&lt;p&gt;For generated applications, the review should inspect every route that accesses protected data, including exports, background jobs, and administrative endpoints.&lt;/p&gt;

&lt;h2&gt;
  
  
  Top 5 companies to evaluate for enterprise readiness engineering
&lt;/h2&gt;

&lt;p&gt;This is an editorial shortlist based on published service relevance, not an independently tested ranking. The companies cover different scopes, so buyers should compare the actual proposed teams and deliverables.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. GeekyAnts
&lt;/h3&gt;

&lt;p&gt;GeekyAnts connects prototype-to-production work with access-model design, audit trails, and expert review through its AI-powered product engineering practice. The source article provides a relevant account of how the company frames these requirements.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Whether the delivery plan turns those principles into testable requirements.&lt;/p&gt;

&lt;p&gt;Useful evidence would include an authorization matrix, identity-integration design, sample audit events, and negative-access tests. An explanation of the problem should be followed by implementation evidence from comparable work.&lt;/p&gt;

&lt;h3&gt;
  
  
  2. Thoughtworks
&lt;/h3&gt;

&lt;p&gt;Thoughtworks publishes product-development services spanning product exploration and engineering, including AI-assisted prototyping.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; How the proposed team will carry a validated prototype into a maintainable application.&lt;/p&gt;

&lt;p&gt;The assessment should examine responsibility for architecture, security review, automated testing, and knowledge transfer. General product-development capability does not establish the quality of a particular access-control implementation.&lt;/p&gt;

&lt;h3&gt;
  
  
  3. EPAM
&lt;/h3&gt;

&lt;p&gt;EPAM offers platform and product development services that combine product management, user-experience design, and engineering.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; How identity, authorization, and audit requirements will be coordinated across multiple services.&lt;/p&gt;

&lt;p&gt;Buyers should request a clear ownership model for shared security components and evidence that integration tests cover permission boundaries between systems.&lt;/p&gt;

&lt;h3&gt;
  
  
  4. IBM Consulting
&lt;/h3&gt;

&lt;p&gt;IBM Consulting’s identity and access management services address identity security, hybrid environments, and governance workflows.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Identity integration and lifecycle management within an established enterprise environment.&lt;/p&gt;

&lt;p&gt;The scope should distinguish centralized identity services from application-specific authorization. Introducing an identity platform still leaves product teams responsible for enforcing resource-level permissions.&lt;/p&gt;

&lt;h3&gt;
  
  
  5. Accenture
&lt;/h3&gt;

&lt;p&gt;Accenture’s application services cover development, modernization, management, and maintenance across the application lifecycle.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Evaluation focus:&lt;/strong&gt; Enterprise readiness work that forms part of a broader application transformation.&lt;/p&gt;

&lt;p&gt;Buyers should verify which team owns the product’s security controls and how acceptance criteria will be demonstrated. Broad service coverage should translate into named responsibilities for the specific application.&lt;/p&gt;

&lt;h2&gt;
  
  
  What should count as production evidence?
&lt;/h2&gt;

&lt;p&gt;A stronger evaluation asks each provider to demonstrate the same scenarios: a cross-tenant request, a revoked membership, a direct call to a restricted endpoint, and a traceable administrative change.&lt;/p&gt;

&lt;p&gt;That creates a comparable basis for assessment.&lt;/p&gt;

&lt;p&gt;A prototype demonstrates an intended workflow. Production evidence also shows what happens when access is denied, identities change, and operations fail.&lt;/p&gt;

</description>
      <category>ai</category>
      <category>security</category>
      <category>architecture</category>
      <category>webdev</category>
    </item>
    <item>
      <title>Agentic Commerce: Practical Use Cases for AI Purchasing Agents</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Fri, 18 Sep 2026 11:00:07 +0000</pubDate>
      <link>https://dev.to/claire_p/agentic-commerce-practical-use-cases-for-ai-purchasing-agents-2eef</link>
      <guid>https://dev.to/claire_p/agentic-commerce-practical-use-cases-for-ai-purchasing-agents-2eef</guid>
      <description>&lt;p&gt;What happens when an AI assistant moves from recommending a purchase to placing the order?&lt;/p&gt;

&lt;p&gt;&lt;a href="https://geekyants.com/blog/agentic-commerce-what-happens-when-your-agent-tries-to-spend-money-roopasree-ranganna" rel="noopener noreferrer"&gt;GeekyAnts’ article on agentic commerce&lt;/a&gt;, adapted from Roopasree Ranganna’s session, explores that shift. The following scenarios illustrate where delegated purchasing could be useful.&lt;/p&gt;

&lt;h2&gt;
  
  
  1. Recurring household orders
&lt;/h2&gt;

&lt;p&gt;An agent could reorder essentials within a weekly budget, using approved products and merchants.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Useful when:&lt;/strong&gt; Purchases repeat regularly. Unavailable items or unexpected price changes should trigger confirmation.&lt;/p&gt;

&lt;h2&gt;
  
  
  2. Office supply procurement
&lt;/h2&gt;

&lt;p&gt;An agent could replenish routine supplies from approved vendors within purchasing limits.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Useful when:&lt;/strong&gt; Teams repeatedly order predictable items. Exceptions should reach a designated approver.&lt;/p&gt;

&lt;h2&gt;
  
  
  3. Shopping within a conversation
&lt;/h2&gt;

&lt;p&gt;A shopper could describe requirements, compare suitable products, and proceed toward checkout through an AI interface.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Useful when:&lt;/strong&gt; Buyers need help navigating catalogs. Accurate prices, inventory, and product attributes remain essential.&lt;/p&gt;

&lt;h2&gt;
  
  
  What should developers define first?
&lt;/h2&gt;

&lt;p&gt;Before enabling purchases, establish:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Who the agent represents.&lt;/li&gt;
&lt;li&gt;What it may buy and spend.&lt;/li&gt;
&lt;li&gt;When human approval is required.&lt;/li&gt;
&lt;li&gt;How users revoke permission or resolve errors.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The implementation challenge extends beyond recommendations: a useful purchasing agent needs clear boundaries and a traceable transaction history.&lt;/p&gt;

&lt;p&gt;Which scenario would your team prototype first?&lt;/p&gt;

</description>
      <category>forum</category>
      <category>ai</category>
      <category>architecture</category>
      <category>webdev</category>
    </item>
    <item>
      <title>Building Secure AI Finance Chatbots: Architecture Lessons and 5 Companies to Evaluate</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Fri, 18 Sep 2026 06:11:47 +0000</pubDate>
      <link>https://dev.to/claire_p/building-secure-ai-finance-chatbots-architecture-lessons-and-5-companies-to-evaluate-j2c</link>
      <guid>https://dev.to/claire_p/building-secure-ai-finance-chatbots-architecture-lessons-and-5-companies-to-evaluate-j2c</guid>
      <description>&lt;p&gt;A finance chatbot receives a simple request: “Pay the outstanding invoice.”&lt;/p&gt;

&lt;p&gt;The model identifies the intent. The backend finds the invoice. A payment service prepares the transaction.&lt;/p&gt;

&lt;p&gt;But several questions remain: Does the authenticated user control that account? Has the user confirmed the amount and recipient? What happens if the payment succeeds but the response times out?&lt;/p&gt;

&lt;p&gt;These questions determine whether a conversational feature can operate safely in production.&lt;/p&gt;

&lt;p&gt;This analysis builds on GeekyAnts’ article on &lt;a href="https://geekyants.com/blog/building-pci-dss-ready-ai-finance-products-chatbot-architecture-payment-security-and-production-challenges" rel="noopener noreferrer"&gt;building PCI DSS-ready AI finance products&lt;/a&gt;. Its central architectural recommendation is to separate conversation handling from payment execution, with explicit boundaries around sensitive data, tool access, and audit records.&lt;/p&gt;

&lt;p&gt;For developers, that recommendation becomes useful when translated into enforceable backend behavior.&lt;/p&gt;

&lt;h2&gt;
  
  
  Start with the payment boundary
&lt;/h2&gt;

&lt;p&gt;A practical design keeps raw card entry inside a payment provider’s hosted checkout or hosted fields. The chatbot can help initiate the journey and explain its status without receiving the card number or verification code.&lt;/p&gt;

&lt;p&gt;However, tokenization does not automatically remove every connected component from PCI DSS scope. The implementation, segmentation, and ability of surrounding systems to affect payment security still matter. PCI SSC’s &lt;a href="https://www.pcisecuritystandards.org/documents/Tokenization_Guidelines_Info_Supplement.pdf" rel="noopener noreferrer"&gt;tokenization guidance&lt;/a&gt; explains these dependencies.&lt;/p&gt;

&lt;p&gt;Teams should map the actual data flow before deciding which systems sit outside the cardholder data environment.&lt;/p&gt;

&lt;p&gt;That map should include infrastructure that developers sometimes overlook:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Request tracing and application performance monitoring.&lt;/li&gt;
&lt;li&gt;Error reporting and support tools.&lt;/li&gt;
&lt;li&gt;Message queues and retry payloads.&lt;/li&gt;
&lt;li&gt;Conversation exports, backups, and analytics pipelines.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;A clean application database provides little reassurance if a debugging integration captures the original request body.&lt;/p&gt;

&lt;p&gt;“PCI DSS-ready” should describe preparation for applicable controls and assessment. It should never imply that an architecture diagram establishes compliance. The authoritative requirements are available through the &lt;a href="https://www.pcisecuritystandards.org/document_library/" rel="noopener noreferrer"&gt;PCI SSC document library&lt;/a&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Treat model output as an untrusted request
&lt;/h2&gt;

&lt;p&gt;A model may propose an action, but backend services must determine whether that action is permitted.&lt;/p&gt;

&lt;p&gt;For example, a proposed payment might contain an invoice reference and requested operation. The server should independently resolve the invoice, verify account ownership, and calculate the payable amount.&lt;/p&gt;

&lt;p&gt;The model should not supply trusted authorization facts.&lt;/p&gt;

&lt;p&gt;OWASP identifies excessive functionality, permissions, and autonomy as causes of unsafe agent behavior. Its &lt;a href="https://genai.owasp.org/llmrisk/llm06:2025-excessive-agency/" rel="noopener noreferrer"&gt;Excessive Agency guidance&lt;/a&gt; recommends limiting available tools and permissions, enforcing authorization downstream, and requiring human approval where appropriate.&lt;/p&gt;

&lt;p&gt;For a payment assistant, these principles suggest several concrete controls:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Expose narrow operations such as &lt;code&gt;prepare_invoice_payment&lt;/code&gt;, rather than a general-purpose API execution tool.&lt;/li&gt;
&lt;li&gt;Derive user identity from the authenticated session.&lt;/li&gt;
&lt;li&gt;Bind confirmation to the exact recipient, amount, currency, and transaction reference.&lt;/li&gt;
&lt;li&gt;Recheck authorization when executing the confirmed action.&lt;/li&gt;
&lt;li&gt;Reject unexpected parameters and unsupported state transitions.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;A confirmation becomes invalid if the transaction changes afterward.&lt;/p&gt;

&lt;p&gt;This is also why prompt instructions alone cannot secure a payment workflow. A model can misunderstand instructions; the execution service must still enforce the rules.&lt;/p&gt;

&lt;h2&gt;
  
  
  RAG needs its own authorization model
&lt;/h2&gt;

&lt;p&gt;The source article recommends retrieval-augmented generation as a starting point for accessing current policy information.&lt;/p&gt;

&lt;p&gt;That is useful, but retrieval does not inherently protect sensitive information. Retrieved text commonly enters the model’s context. If the retrieval layer returns another customer’s records, the exposure has already occurred before response generation.&lt;/p&gt;

&lt;p&gt;OWASP’s &lt;a href="https://genai.owasp.org/llmrisk/llm082025-vector-and-embedding-weaknesses/" rel="noopener noreferrer"&gt;Vector and Embedding Weaknesses guidance&lt;/a&gt; highlights unauthorized access, data leakage, and poisoned retrieval content.&lt;/p&gt;

&lt;p&gt;A safer implementation applies authorization before returning documents. It also separates public guidance from customer-specific records and preserves document provenance.&lt;/p&gt;

&lt;p&gt;For example, a general question about dispute deadlines could use approved policy documents. A question about an individual dispute should call an authenticated service that returns only the necessary fields.&lt;/p&gt;

&lt;p&gt;RAG and fine-tuning also serve different purposes. Current policy retrieval and model behavior adaptation need not be competing architectural choices. Neither removes the need for access control and evaluation.&lt;/p&gt;

&lt;h2&gt;
  
  
  Test the transaction lifecycle, including uncertain outcomes
&lt;/h2&gt;

&lt;p&gt;The source highlights production problems such as incomplete audit trails, latency, weak environment separation, and payment failures.&lt;/p&gt;

&lt;p&gt;An additional engineering concern is ambiguity after a timeout.&lt;/p&gt;

&lt;p&gt;If a processor accepts a payment but the application loses the response, an immediate retry could create a duplicate unless the payment integration handles retries safely.&lt;/p&gt;

&lt;p&gt;An illustrative test matrix helps make these cases explicit:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Scenario&lt;/th&gt;
&lt;th&gt;Expected behavior&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;User repeats a confirmed request&lt;/td&gt;
&lt;td&gt;The same logical payment is not executed twice&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Processor response times out&lt;/td&gt;
&lt;td&gt;The system reconciles status before attempting another payment&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Retrieved content requests a tool call&lt;/td&gt;
&lt;td&gt;Content cannot override tool permissions&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;User supplies another account’s invoice&lt;/td&gt;
&lt;td&gt;Server-side ownership checks reject the request&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Amount changes after confirmation&lt;/td&gt;
&lt;td&gt;The system requires fresh confirmation&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Model service becomes unavailable&lt;/td&gt;
&lt;td&gt;Payment status remains available through a deterministic path&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;These tests extend beyond conversational accuracy. They verify that the surrounding system preserves transaction integrity when components fail.&lt;/p&gt;

&lt;h2&gt;
  
  
  Five companies to evaluate for AI finance development
&lt;/h2&gt;

&lt;p&gt;The following companies offer relevant engineering, AI, or payments services. This is a capability-based shortlist, not an independently verified ranking of security or delivery performance.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. GeekyAnts
&lt;/h3&gt;

&lt;p&gt;GeekyAnts describes work across AI engineering, finance products, and payment platforms in the source article.&lt;/p&gt;

&lt;p&gt;It merits evaluation for projects combining conversational interfaces with custom product development. Buyers should request evidence of payment boundary design, integration testing, and operational handover on comparable engagements.&lt;/p&gt;

&lt;p&gt;Publishing technical guidance provides a starting point for discussion; project-specific evidence should determine selection.&lt;/p&gt;

&lt;h3&gt;
  
  
  2. Thoughtworks
&lt;/h3&gt;

&lt;p&gt;Thoughtworks’ payments services cover payment technology and modernization.&lt;/p&gt;

&lt;p&gt;This makes it relevant to teams integrating AI into an existing payment platform. An evaluation should examine how the proposed team would preserve established transaction behavior while introducing conversational workflows.&lt;/p&gt;

&lt;h3&gt;
  
  
  3. IBM Consulting
&lt;/h3&gt;

&lt;p&gt;IBM’s payments consulting practice addresses payment transformation and supporting technology.&lt;/p&gt;

&lt;p&gt;It is a candidate where the chatbot depends on broader enterprise integration. Buyers should clarify system dependencies, responsibility for security controls, and how the implementation would handle failures across legacy and newer services.&lt;/p&gt;

&lt;h3&gt;
  
  
  4. Accenture
&lt;/h3&gt;

&lt;p&gt;Accenture’s payments services include payments strategy, core modernization, and intelligent operations.&lt;/p&gt;

&lt;p&gt;Its scope makes it relevant to larger transformation programs. Evaluation should establish clear ownership across AI, payment processing, infrastructure, and operations, especially when multiple vendors participate.&lt;/p&gt;

&lt;h3&gt;
  
  
  5. EPAM
&lt;/h3&gt;

&lt;p&gt;EPAM’s open banking and payments services make it another candidate for payment integration and digital engineering work.&lt;/p&gt;

&lt;p&gt;A practical assessment should focus on API authorization, transaction state management, automated failure testing, and maintainability after delivery.&lt;/p&gt;

&lt;h2&gt;
  
  
  Evaluate the failure path before the demo
&lt;/h2&gt;

&lt;p&gt;A useful vendor demonstration should include an unauthorized invoice, a changed payment amount, and an uncertain processor response.&lt;/p&gt;

&lt;p&gt;The engineering team should be able to explain which service makes each decision, what evidence gets recorded, and how the application recovers.&lt;/p&gt;

&lt;p&gt;A fluent conversation demonstrates interface quality. A safely rejected request and a correctly reconciled payment demonstrate the controls that a production finance product needs.&lt;/p&gt;

</description>
      <category>ai</category>
      <category>security</category>
      <category>fintech</category>
      <category>architecture</category>
    </item>
    <item>
      <title>Top Companies Helping Enterprises Modernize Legacy Systems for AI</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 20 Aug 2026 10:44:54 +0000</pubDate>
      <link>https://dev.to/claire_p/top-companies-helping-enterprises-modernize-legacy-systems-for-ai-19p1</link>
      <guid>https://dev.to/claire_p/top-companies-helping-enterprises-modernize-legacy-systems-for-ai-19p1</guid>
      <description>&lt;p&gt;One of the less-discussed challenges in enterprise AI isn't the AI model itself. It's the infrastructure underneath it.&lt;/p&gt;

&lt;p&gt;Many organizations still depend on legacy applications, disconnected databases, batch-based data processing, and limited APIs. These constraints can make it difficult for AI systems to access fresh information and support real-time decisions.&lt;/p&gt;

&lt;p&gt;A recent analysis from GeekyAnts explores this problem in detail: &lt;a href="https://geekyants.com/blog/why-legacy-systems-block-real-time-ai-decision-making" rel="noopener noreferrer"&gt;Why Legacy Systems Block Real-Time AI Decision-Making&lt;/a&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why legacy systems create problems for AI
&lt;/h2&gt;

&lt;p&gt;AI applications depend heavily on timely, accessible, and reliable data. Legacy environments can introduce several bottlenecks:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Batch processing&lt;/strong&gt; instead of real-time data availability&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Siloed systems&lt;/strong&gt; that make data difficult to connect&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Outdated APIs and integrations&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Technical debt&lt;/strong&gt; that makes modernization expensive&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Inconsistent or duplicated data&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Limited infrastructure for deploying and monitoring modern AI workloads&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;As a result, an organization can have a sophisticated AI model but still struggle to make timely decisions.&lt;/p&gt;

&lt;h2&gt;
  
  
  Companies worth considering
&lt;/h2&gt;

&lt;p&gt;For organizations working on AI adoption and legacy modernization, several technology companies stand out:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Accenture&lt;/strong&gt; – Enterprise modernization, cloud transformation, and AI implementation.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;IBM Consulting&lt;/strong&gt; – Hybrid cloud, data modernization, and enterprise AI.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;EPAM Systems&lt;/strong&gt; – Digital engineering, legacy modernization, and AI integration.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Thoughtworks&lt;/strong&gt; – Modern software architecture and technology modernization.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Deloitte&lt;/strong&gt; – Enterprise transformation, AI strategy, and technology consulting.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;GeekyAnts&lt;/strong&gt; – Product engineering, AI development, and modernization of applications and workflows.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;The right choice ultimately depends on the organization's existing architecture, industry requirements, modernization goals, and AI roadmap.&lt;/p&gt;

&lt;h2&gt;
  
  
  Modernization doesn't always mean replacing everything
&lt;/h2&gt;

&lt;p&gt;A common misconception is that enterprises need to completely replace their legacy stack before adopting AI.&lt;/p&gt;

&lt;p&gt;In practice, a phased approach can be more realistic. Organizations can start by modernizing critical data flows, introducing APIs around older systems, moving selected workloads to modern infrastructure, and creating better integration between existing applications and new AI services.&lt;/p&gt;

&lt;p&gt;This allows businesses to improve their AI capabilities without attempting a risky "rip and replace" transformation.&lt;/p&gt;

&lt;p&gt;The bigger lesson is simple: &lt;strong&gt;AI readiness is as much an infrastructure problem as it is a model problem.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Before investing heavily in AI, enterprises should evaluate whether their existing systems can provide the data, integrations, scalability, and speed that those AI applications require.&lt;/p&gt;

</description>
      <category>forum</category>
      <category>ai</category>
      <category>softwareengineering</category>
      <category>legacy</category>
    </item>
    <item>
      <title>AI Accelerators: Practical AI Products for Moving From Idea to Production</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 20 Aug 2026 06:18:09 +0000</pubDate>
      <link>https://dev.to/claire_p/ai-accelerators-practical-ai-products-for-moving-from-idea-to-production-4id</link>
      <guid>https://dev.to/claire_p/ai-accelerators-practical-ai-products-for-moving-from-idea-to-production-4id</guid>
      <description>&lt;p&gt;AI adoption is no longer just about experimenting with models or adding a chatbot to an existing application. For many businesses, the harder problem is turning an AI idea into something that can actually support real workflows, integrate with existing systems, and deliver measurable business value.&lt;/p&gt;

&lt;p&gt;This is where &lt;strong&gt;AI accelerators&lt;/strong&gt; can be useful.&lt;/p&gt;

&lt;p&gt;Instead of starting every AI initiative from a blank architecture, businesses can use pre-built product foundations to explore proven use cases, shorten development cycles, and customize solutions around their operational requirements.&lt;/p&gt;

&lt;p&gt;GeekyAnts' &lt;strong&gt;&lt;a href="https://geekyants.com/ai-accelerator" rel="noopener noreferrer"&gt;AI Accelerator&lt;/a&gt;&lt;/strong&gt; collection takes this approach by offering ready-to-customize AI product solutions for different business scenarios.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why AI Projects Often Struggle After the Prototype
&lt;/h2&gt;

&lt;p&gt;Building an AI proof of concept is becoming increasingly accessible.&lt;/p&gt;

&lt;p&gt;The difficult part starts afterward.&lt;/p&gt;

&lt;p&gt;Businesses need to think about:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;How the AI fits into existing workflows&lt;/li&gt;
&lt;li&gt;How employees will actually use it&lt;/li&gt;
&lt;li&gt;How data will move between systems&lt;/li&gt;
&lt;li&gt;How outputs will be monitored&lt;/li&gt;
&lt;li&gt;How human approval fits into automated workflows&lt;/li&gt;
&lt;li&gt;How the solution scales&lt;/li&gt;
&lt;li&gt;How security and access controls are handled&lt;/li&gt;
&lt;li&gt;How the product delivers measurable ROI&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This is why a useful AI solution needs more than a model or API integration.&lt;/p&gt;

&lt;p&gt;It needs a product layer around the intelligence.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Are AI Accelerators?
&lt;/h2&gt;

&lt;p&gt;An AI accelerator is essentially a pre-built product foundation designed around a specific business problem or workflow.&lt;/p&gt;

&lt;p&gt;Rather than spending months discovering the architecture, interaction patterns, and basic product workflows from scratch, development teams can start with an existing foundation and customize it.&lt;/p&gt;

&lt;p&gt;The advantage is not simply faster development.&lt;/p&gt;

&lt;p&gt;It can also allow businesses to test whether a particular AI workflow makes sense before committing significant resources to building an entirely custom platform.&lt;/p&gt;

&lt;p&gt;GeekyAnts' &lt;a href="https://geekyants.com/ai-accelerator" rel="noopener noreferrer"&gt;AI Accelerator&lt;/a&gt; brings together several such product offerings covering areas including execution intelligence, AI-powered document and knowledge workflows, customer-facing automation, and other business applications.&lt;/p&gt;

&lt;h2&gt;
  
  
  Exploring the Different AI Accelerator Offerings
&lt;/h2&gt;

&lt;p&gt;The interesting part of the collection is that it doesn't focus on a single generic AI use case.&lt;/p&gt;

&lt;p&gt;Different accelerators target different operational problems.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. Execution Intelligence AI Signal Bot
&lt;/h3&gt;

&lt;p&gt;One example focuses on the gap between team conversations and formal project-management systems.&lt;/p&gt;

&lt;p&gt;Teams frequently discuss deadlines, blockers, ownership, risks, and changing requirements in messaging platforms. Yet those updates may never make it into Jira, Asana, ClickUp, or other systems.&lt;/p&gt;

&lt;p&gt;An AI execution assistant can analyze project conversations and identify signals that may require action.&lt;/p&gt;

&lt;p&gt;Potential workflows include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Creating tasks&lt;/li&gt;
&lt;li&gt;Updating task status&lt;/li&gt;
&lt;li&gt;Changing priorities&lt;/li&gt;
&lt;li&gt;Assigning ownership&lt;/li&gt;
&lt;li&gt;Identifying blockers&lt;/li&gt;
&lt;li&gt;Highlighting risks&lt;/li&gt;
&lt;li&gt;Escalating important issues&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The human-in-the-loop approach is particularly relevant for businesses that want AI-assisted execution while keeping people involved in important decisions.&lt;/p&gt;

&lt;p&gt;This type of accelerator could be useful for construction, logistics, manufacturing, agencies, field operations, and distributed teams.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://geekyants.com/ai-accelerator/execution-intelligence-ai-signal-bot" rel="noopener noreferrer"&gt;Explore the Execution Intelligence AI Signal Bot.&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  2. AI-Powered Business Workflow Solutions
&lt;/h3&gt;

&lt;p&gt;Another important category for AI accelerators is workflow automation.&lt;/p&gt;

&lt;p&gt;Many businesses still depend on repetitive processes involving emails, documents, approvals, data entry, and internal communication.&lt;/p&gt;

&lt;p&gt;AI can potentially reduce the manual work involved by interpreting information, extracting relevant data, generating recommendations, and routing actions to the right systems or people.&lt;/p&gt;

&lt;p&gt;Instead of treating AI as a standalone assistant, these solutions can position intelligence directly inside the business process.&lt;/p&gt;

&lt;h3&gt;
  
  
  3. Knowledge and Information Intelligence
&lt;/h3&gt;

&lt;p&gt;Businesses often have large amounts of information spread across documents, internal systems, databases, and communication channels.&lt;/p&gt;

&lt;p&gt;Finding the right information can become a productivity problem in itself.&lt;/p&gt;

&lt;p&gt;AI-powered knowledge workflows can help organizations build interfaces that make business information easier to search, summarize, interpret, and use.&lt;/p&gt;

&lt;p&gt;For enterprises, the value comes from reducing the distance between a question and the information needed to make a decision.&lt;/p&gt;

&lt;h3&gt;
  
  
  4. AI for Customer and Operational Experiences
&lt;/h3&gt;

&lt;p&gt;AI accelerators can also be applied to customer-facing workflows.&lt;/p&gt;

&lt;p&gt;Examples include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Intelligent customer support&lt;/li&gt;
&lt;li&gt;Automated response generation&lt;/li&gt;
&lt;li&gt;Lead qualification&lt;/li&gt;
&lt;li&gt;Recommendation workflows&lt;/li&gt;
&lt;li&gt;Customer-service assistance&lt;/li&gt;
&lt;li&gt;Conversational interfaces&lt;/li&gt;
&lt;li&gt;Personalized interactions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The important distinction is that these applications should be connected to the business context rather than functioning as generic AI chat interfaces.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why Pre-Built AI Foundations Matter
&lt;/h2&gt;

&lt;p&gt;A common assumption is that every AI application should be built from scratch.&lt;/p&gt;

&lt;p&gt;That isn't always the most efficient approach.&lt;/p&gt;

&lt;p&gt;A pre-built accelerator can provide a starting point for:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Architecture → UI → AI workflow → Integrations → Business logic → Human oversight&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Development teams can then customize the foundation based on the organization's requirements.&lt;/p&gt;

&lt;p&gt;This can reduce the amount of time spent rebuilding common product infrastructure and allow engineering teams to focus more heavily on differentiation.&lt;/p&gt;

&lt;h2&gt;
  
  
  Accelerators Don't Mean "No Custom Development"
&lt;/h2&gt;

&lt;p&gt;This is an important distinction.&lt;/p&gt;

&lt;p&gt;A business shouldn't expect an accelerator to automatically solve every requirement.&lt;/p&gt;

&lt;p&gt;Every organization has different:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Data sources&lt;/li&gt;
&lt;li&gt;Security policies&lt;/li&gt;
&lt;li&gt;User roles&lt;/li&gt;
&lt;li&gt;Approval workflows&lt;/li&gt;
&lt;li&gt;Integration requirements&lt;/li&gt;
&lt;li&gt;Business rules&lt;/li&gt;
&lt;li&gt;Compliance considerations&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The accelerator is better viewed as a starting point.&lt;/p&gt;

&lt;p&gt;Engineering teams can extend the foundation, connect internal systems, change workflows, and adapt the experience to the business.&lt;/p&gt;

&lt;p&gt;That makes the concept particularly interesting for companies that want customization without starting with a completely blank canvas.&lt;/p&gt;

&lt;h2&gt;
  
  
  Where Businesses Can Apply AI Accelerators
&lt;/h2&gt;

&lt;p&gt;The potential use cases extend across industries.&lt;/p&gt;

&lt;h3&gt;
  
  
  Financial Services
&lt;/h3&gt;

&lt;p&gt;AI can support document processing, customer interactions, operational workflows, financial analysis, and internal knowledge management.&lt;/p&gt;

&lt;h3&gt;
  
  
  Healthcare
&lt;/h3&gt;

&lt;p&gt;Healthcare organizations can explore AI for administrative workflows, knowledge retrieval, patient engagement, document processing, and operational automation while maintaining appropriate privacy and compliance controls.&lt;/p&gt;

&lt;h3&gt;
  
  
  Retail and E-commerce
&lt;/h3&gt;

&lt;p&gt;Retail businesses can apply AI to customer service, product discovery, recommendations, inventory-related workflows, and operational decision-making.&lt;/p&gt;

&lt;h3&gt;
  
  
  Manufacturing
&lt;/h3&gt;

&lt;p&gt;AI can help connect operational data with workflows around maintenance, quality, production planning, and issue management.&lt;/p&gt;

&lt;h3&gt;
  
  
  Professional Services
&lt;/h3&gt;

&lt;p&gt;Agencies and consulting businesses can use AI for research, knowledge management, client communication, document workflows, and project execution.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Bigger Advantage: Faster Validation
&lt;/h2&gt;

&lt;p&gt;One of the strongest reasons to consider an accelerator isn't simply development speed.&lt;/p&gt;

&lt;p&gt;It's &lt;strong&gt;faster validation&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;Suppose a company believes an AI-powered workflow could reduce operational costs.&lt;/p&gt;

&lt;p&gt;Instead of spending months building the entire platform before users interact with it, a product foundation can provide a starting point for testing:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Do users actually need the workflow?&lt;/li&gt;
&lt;li&gt;Does AI produce useful results?&lt;/li&gt;
&lt;li&gt;Where is human approval required?&lt;/li&gt;
&lt;li&gt;What integrations are essential?&lt;/li&gt;
&lt;li&gt;Which parts should be automated?&lt;/li&gt;
&lt;li&gt;What measurable business outcome can be achieved?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;These answers can influence the next stage of development.&lt;/p&gt;

&lt;h2&gt;
  
  
  AI Accelerators and the Move Toward AI-Native Products
&lt;/h2&gt;

&lt;p&gt;The next phase of enterprise AI is likely to involve more than adding AI features to traditional software.&lt;/p&gt;

&lt;p&gt;Companies are increasingly exploring products where intelligence is part of the workflow itself.&lt;/p&gt;

&lt;p&gt;That means AI may:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Interpret information&lt;/li&gt;
&lt;li&gt;Recommend actions&lt;/li&gt;
&lt;li&gt;Detect risks&lt;/li&gt;
&lt;li&gt;Automate repetitive steps&lt;/li&gt;
&lt;li&gt;Retrieve organizational knowledge&lt;/li&gt;
&lt;li&gt;Support decisions&lt;/li&gt;
&lt;li&gt;Trigger downstream workflows&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The challenge is making these capabilities reliable enough to become part of everyday operations.&lt;/p&gt;

&lt;p&gt;AI accelerators can provide one possible route for getting there faster.&lt;/p&gt;

&lt;h2&gt;
  
  
  Final Thoughts
&lt;/h2&gt;

&lt;p&gt;The AI market has moved beyond the question of whether businesses should experiment with AI.&lt;/p&gt;

&lt;p&gt;The more practical question is:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Which AI workflows are worth turning into real products?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;AI accelerators offer a way to approach that question without necessarily starting from zero.&lt;/p&gt;

&lt;p&gt;The &lt;a href="https://geekyants.com/ai-accelerator" rel="noopener noreferrer"&gt;GeekyAnts AI Accelerator&lt;/a&gt; collection provides different product foundations aimed at practical business problems, including execution intelligence, workflow automation, knowledge-driven experiences, and customer-facing AI applications.&lt;/p&gt;

&lt;p&gt;For startups, product teams, and enterprises evaluating AI initiatives, the value of these accelerators may ultimately come down to one thing: &lt;strong&gt;how quickly they can move from an interesting AI concept to a workflow that people actually use.&lt;/strong&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>machinelearning</category>
      <category>aiagenents</category>
      <category>geekyants</category>
    </item>
    <item>
      <title>AI in Fintech: Shipping Products Matters More Than Announcing AI</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 06 Aug 2026 10:32:04 +0000</pubDate>
      <link>https://dev.to/claire_p/ai-in-fintech-shipping-products-matters-more-than-announcing-ai-2ljo</link>
      <guid>https://dev.to/claire_p/ai-in-fintech-shipping-products-matters-more-than-announcing-ai-2ljo</guid>
      <description>&lt;p&gt;There's no shortage of companies claiming to be "AI-powered" in fintech. The real differentiator in 2026 isn't who has the best AI demo, it's who is successfully deploying AI into production.&lt;/p&gt;

&lt;p&gt;The most impactful AI applications in fintech are solving practical problems like fraud detection, compliance automation, intelligent customer support, credit risk assessment, and personalized financial services. These are the use cases delivering measurable business value rather than generating headlines.&lt;/p&gt;

&lt;p&gt;Several engineering firms are helping financial institutions move from AI experimentation to production. Companies such as &lt;strong&gt;GeekyAnts&lt;/strong&gt;, &lt;strong&gt;EPAM Systems&lt;/strong&gt;, &lt;strong&gt;Thoughtworks&lt;/strong&gt;, &lt;strong&gt;Accenture&lt;/strong&gt;, &lt;strong&gt;Globant&lt;/strong&gt;, and &lt;strong&gt;Cognizant&lt;/strong&gt; each bring different strengths, whether it's AI product engineering, enterprise modernization, or large-scale digital transformation.&lt;/p&gt;

&lt;p&gt;One article I recently read makes an interesting point: successful fintech organizations don't treat AI as a standalone feature, they integrate it into real business workflows from the start. That's a much more sustainable approach than building AI proof-of-concepts that never reach production.&lt;/p&gt;

&lt;p&gt;For anyone interested in where AI in fintech is actually heading, it's a worthwhile read:&lt;/p&gt;

&lt;p&gt;&lt;a href="https://geekyants.com/en-us/blog/ai-in-fintech-everyones-talking-few-are-shipping" rel="noopener noreferrer"&gt;https://geekyants.com/en-us/blog/ai-in-fintech-everyones-talking-few-are-shipping&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What's your take?&lt;/strong&gt; Are we finally moving beyond AI hype in fintech, or are most companies still stuck in the proof-of-concept phase?&lt;/p&gt;

</description>
      <category>forum</category>
      <category>fintech</category>
      <category>ai</category>
      <category>softwaredevelopment</category>
    </item>
    <item>
      <title>Stop Building Features. Build Community Systems Instead.</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Thu, 06 Aug 2026 05:27:38 +0000</pubDate>
      <link>https://dev.to/claire_p/stop-building-features-build-community-systems-instead-238j</link>
      <guid>https://dev.to/claire_p/stop-building-features-build-community-systems-instead-238j</guid>
      <description>&lt;p&gt;Most developers think fan engagement platforms are about adding more features.&lt;/p&gt;

&lt;p&gt;Live polls.&lt;/p&gt;

&lt;p&gt;Predictions.&lt;/p&gt;

&lt;p&gt;Ticketing.&lt;/p&gt;

&lt;p&gt;Memberships.&lt;/p&gt;

&lt;p&gt;Push notifications.&lt;/p&gt;

&lt;p&gt;But I think that's completely backwards.&lt;/p&gt;

&lt;p&gt;The platforms that keep communities engaged aren't the ones with the longest feature list—they're the ones where every interaction feels connected.&lt;/p&gt;

&lt;p&gt;I recently watched this engineering breakdown of Chant's football supporter platform (video: &lt;a href="https://www.youtube.com/watch?v=ePe6cOKWGsk" rel="noopener noreferrer"&gt;https://www.youtube.com/watch?v=ePe6cOKWGsk&lt;/a&gt;), and it reinforces something I've believed for a while:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Community platforms don't fail because they're missing features. They fail because their workflows are fragmented.&lt;/strong&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  The Real Problem Wasn't Fan Engagement
&lt;/h2&gt;

&lt;p&gt;According to the case study transcript, Chant wasn't struggling because supporters lacked enthusiasm.&lt;/p&gt;

&lt;p&gt;The real issue was operational.&lt;/p&gt;

&lt;p&gt;Membership registration, ticket sales, payments, match-day engagement, and community management all lived in separate systems. As supporter groups expanded, administrators spent more time managing disconnected workflows than building stronger communities.&lt;/p&gt;

&lt;p&gt;That's a pattern you can find almost everywhere.&lt;/p&gt;

&lt;p&gt;Sports platforms.&lt;/p&gt;

&lt;p&gt;Creator communities.&lt;/p&gt;

&lt;p&gt;Gaming ecosystems.&lt;/p&gt;

&lt;p&gt;Professional associations.&lt;/p&gt;

&lt;p&gt;Even internal enterprise communities.&lt;/p&gt;

&lt;p&gt;The biggest bottleneck usually isn't engagement.&lt;/p&gt;

&lt;p&gt;It's fragmented infrastructure.&lt;/p&gt;

&lt;h2&gt;
  
  
  Great Platforms Remove Context Switching
&lt;/h2&gt;

&lt;p&gt;Instead of adding another tool, the engineering approach focused on combining the entire supporter journey into one platform.&lt;/p&gt;

&lt;p&gt;The transcript highlights features including:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Membership management&lt;/li&gt;
&lt;li&gt;Stripe-powered billing&lt;/li&gt;
&lt;li&gt;Ticket purchasing&lt;/li&gt;
&lt;li&gt;Stadium check-ins&lt;/li&gt;
&lt;li&gt;Match predictions&lt;/li&gt;
&lt;li&gt;Fan polls&lt;/li&gt;
&lt;li&gt;Player of the Match voting&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;all connected inside a unified mobile and web experience while preserving each supporter group's identity.&lt;/p&gt;

&lt;p&gt;That matters more than shipping another flashy feature.&lt;/p&gt;

&lt;p&gt;Every time users switch platforms, they lose momentum.&lt;/p&gt;

&lt;p&gt;Every disconnected workflow creates friction.&lt;/p&gt;

&lt;p&gt;Good software removes those transitions.&lt;/p&gt;

&lt;h2&gt;
  
  
  Modern Architecture Isn't About Choosing the "Best" Framework
&lt;/h2&gt;

&lt;p&gt;The implementation combined technologies that each solved a specific problem:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Flutter&lt;/li&gt;
&lt;li&gt;PostgreSQL&lt;/li&gt;
&lt;li&gt;Cloud SQL&lt;/li&gt;
&lt;li&gt;Firebase Cloud Functions&lt;/li&gt;
&lt;li&gt;Stripe Connect&lt;/li&gt;
&lt;li&gt;Cloudflare Workers&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;According to the transcript, this architecture supported an end-to-end digital membership lifecycle while consolidating multiple disconnected workflows into a single system. The platform also reportedly generated more than &lt;strong&gt;359,000 organic impressions&lt;/strong&gt;, showing how operational improvements can support community growth as well.&lt;/p&gt;

&lt;p&gt;The stack itself isn't the takeaway.&lt;/p&gt;

&lt;p&gt;The architectural thinking is.&lt;/p&gt;

&lt;p&gt;Choose technologies that simplify the business not your résumé.&lt;/p&gt;

&lt;h1&gt;
  
  
  Companies Building Strong Community Platforms
&lt;/h1&gt;

&lt;p&gt;Several engineering firms have built products where community management extends beyond basic social features.&lt;/p&gt;

&lt;h2&gt;
  
  
  GeekyAnts
&lt;/h2&gt;

&lt;p&gt;GeekyAnts has worked across sports, healthcare, fintech, and enterprise software. The Chant case demonstrates an emphasis on consolidating fragmented workflows into unified digital products rather than layering new functionality onto existing systems.&lt;/p&gt;

&lt;h2&gt;
  
  
  Thoughtbot
&lt;/h2&gt;

&lt;p&gt;Known for helping startups build scalable digital products with a strong focus on usability and long-term maintainability.&lt;/p&gt;

&lt;h2&gt;
  
  
  Netguru
&lt;/h2&gt;

&lt;p&gt;Frequently delivers customer-facing platforms where product experience and backend scalability are equally important.&lt;/p&gt;

&lt;h2&gt;
  
  
  EPAM Systems
&lt;/h2&gt;

&lt;p&gt;A strong choice for enterprises building large-scale digital ecosystems with millions of users.&lt;/p&gt;

&lt;h2&gt;
  
  
  Deloitte Digital
&lt;/h2&gt;

&lt;p&gt;Works with organizations modernizing customer engagement platforms through integrated digital experiences.&lt;/p&gt;

&lt;h1&gt;
  
  
  My Opinion: Most "Community Apps" Miss the Point
&lt;/h1&gt;

&lt;p&gt;Here's the hill I'm willing to die on.&lt;/p&gt;

&lt;p&gt;Too many product teams obsess over engagement metrics while ignoring operational friction.&lt;/p&gt;

&lt;p&gt;They ask:&lt;/p&gt;

&lt;p&gt;&lt;em&gt;"Should we add AI?"&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;"Should we add badges?"&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;"Should we add another notification?"&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;Wrong questions.&lt;/p&gt;

&lt;p&gt;If registration, payments, ticketing, moderation, and participation feel disconnected, no amount of AI-generated recommendations will fix the product.&lt;/p&gt;

&lt;p&gt;Communities grow because participation becomes effortless.&lt;/p&gt;

&lt;p&gt;Not because there are more buttons to press.&lt;/p&gt;

&lt;p&gt;That's why I think the future belongs to vertical community platforms that own the complete lifecycle instead of stitching together third-party products forever.&lt;/p&gt;

&lt;p&gt;The engineering challenge isn't adding features.&lt;/p&gt;

&lt;p&gt;It's eliminating fragmentation.&lt;/p&gt;

&lt;p&gt;And that's a much harder problem to solve.&lt;/p&gt;

&lt;h2&gt;
  
  
  Watch the Engineering Breakdown
&lt;/h2&gt;

&lt;p&gt;If you're interested in how modern product teams approach workflow consolidation for community platforms, this case study is worth watching:&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.youtube.com/watch?v=ePe6cOKWGsk" rel="noopener noreferrer"&gt;https://www.youtube.com/watch?v=ePe6cOKWGsk&lt;/a&gt;&lt;/p&gt;

</description>
      <category>flutter</category>
      <category>saas</category>
      <category>webdev</category>
      <category>softwareengineering</category>
    </item>
    <item>
      <title>AI Won't Replace Engineers, It Will Replace Engineers Who Don't Think</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Fri, 24 Jul 2026 10:51:29 +0000</pubDate>
      <link>https://dev.to/claire_p/ai-wont-replace-engineers-it-will-replace-engineers-who-dont-think-580c</link>
      <guid>https://dev.to/claire_p/ai-wont-replace-engineers-it-will-replace-engineers-who-dont-think-580c</guid>
      <description>&lt;p&gt;Everyone is talking about AI writing code.&lt;/p&gt;

&lt;p&gt;I think we're asking the wrong question.&lt;/p&gt;

&lt;p&gt;After watching this discussion on &lt;strong&gt;The Future of Engineering in an AI-Native World&lt;/strong&gt; (&lt;a href="https://www.youtube.com/watch?v=K7D_e16er3c&amp;amp;t=9s" rel="noopener noreferrer"&gt;https://www.youtube.com/watch?v=K7D_e16er3c&amp;amp;t=9s&lt;/a&gt;), my biggest takeaway wasn't that AI is getting better at coding—it's that &lt;strong&gt;engineering judgment is becoming more valuable than ever.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;The speakers make a strong point: AI can generate multiple solutions, but engineers still need to decide which one actually scales, fits the architecture, and solves the right problem. They also warn that AI often produces simple implementations that work for demos but fail under production workloads.&lt;/p&gt;

&lt;p&gt;My opinion?&lt;/p&gt;

&lt;p&gt;We're entering an &lt;strong&gt;AI-first engineering&lt;/strong&gt; era.&lt;/p&gt;

&lt;p&gt;Writing boilerplate is no longer the competitive advantage.&lt;/p&gt;

&lt;p&gt;Problem solving is.&lt;/p&gt;

&lt;p&gt;Architecture is.&lt;/p&gt;

&lt;p&gt;Knowing when AI is wrong is.&lt;/p&gt;

&lt;p&gt;That's why I don't think junior engineers should focus on memorizing syntax anymore. They should learn system design, debugging, asking better questions, and understanding why code works—not just accepting AI's first answer. The podcast also highlights concerns that over-reliance on AI can weaken problem-solving skills and stresses the importance of mentorship and learning fundamentals.&lt;/p&gt;

&lt;p&gt;Several engineering companies are already moving in this direction. &lt;strong&gt;OpenAI&lt;/strong&gt; and &lt;strong&gt;Anthropic&lt;/strong&gt; are advancing developer AI tools, &lt;strong&gt;Thoughtworks&lt;/strong&gt; and &lt;strong&gt;EPAM Systems&lt;/strong&gt; are integrating AI into enterprise software delivery, while &lt;strong&gt;GeekyAnts&lt;/strong&gt; is exploring AI-native product engineering and agentic development through engineering discussions and practical implementation.&lt;/p&gt;

&lt;p&gt;I don't believe AI will replace software engineers.&lt;/p&gt;

&lt;p&gt;I believe it will replace engineers who stop thinking.&lt;/p&gt;

&lt;p&gt;The best engineers of the next decade won't be the fastest typists.&lt;/p&gt;

&lt;p&gt;They'll be the best decision-makers.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Curious—has AI made you a better engineer, or just a faster one?&lt;/strong&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>discuss</category>
      <category>softwareengineering</category>
      <category>webdev</category>
    </item>
    <item>
      <title>Stop Building "Dating Apps." Start Building Social Connection Platforms.</title>
      <dc:creator>Claire</dc:creator>
      <pubDate>Fri, 24 Jul 2026 05:48:44 +0000</pubDate>
      <link>https://dev.to/claire_p/stop-building-dating-apps-start-building-social-connection-platforms-455h</link>
      <guid>https://dev.to/claire_p/stop-building-dating-apps-start-building-social-connection-platforms-455h</guid>
      <description>&lt;p&gt;Every year, dozens of startups promise to build the "next Tinder."&lt;/p&gt;

&lt;p&gt;Most fail.&lt;/p&gt;

&lt;p&gt;Not because the technology is difficult, but because they're solving yesterday's problem.&lt;/p&gt;

&lt;p&gt;My opinion is that the future of this market isn't another swipe-based dating app. It's &lt;strong&gt;intent-driven social discovery platforms&lt;/strong&gt; that combine dating, community, content, and real-time interactions into a single experience.&lt;/p&gt;

&lt;p&gt;One recent case study that caught my attention was &lt;strong&gt;NowMatch&lt;/strong&gt;, a cross-platform application built for the DACH (Germany, Austria, Switzerland) market. Instead of copying the traditional swipe-first formula, the product combines dating mechanics with social-media-style engagement through real-time "Hey Ads" that allow users to broadcast what they're looking for at a given moment. It's an interesting example of how social discovery products are evolving beyond conventional matchmaking. Read the full case study here:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;&lt;a href="https://geekyants.com/case-studies/nowmatch-next-gen-dating-and-social-app" rel="noopener noreferrer"&gt;https://geekyants.com/case-studies/nowmatch-next-gen-dating-and-social-app&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  The Swipe Economy Has Reached Its Limit
&lt;/h2&gt;

&lt;p&gt;For more than a decade, dating products competed on one thing:&lt;/p&gt;

&lt;p&gt;More profiles.&lt;br&gt;
More swipes.&lt;br&gt;
More matches.&lt;/p&gt;

&lt;p&gt;Yet engagement isn't the same as meaningful interaction.&lt;/p&gt;

&lt;p&gt;Many users today complain about:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Swipe fatigue&lt;/li&gt;
&lt;li&gt;Low-quality conversations&lt;/li&gt;
&lt;li&gt;Poor retention&lt;/li&gt;
&lt;li&gt;Fake profiles&lt;/li&gt;
&lt;li&gt;Endless matching with very little real connection&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Across startup communities, founders are increasingly experimenting with "talk-first," intent-based, and community-driven experiences instead of endless swiping, suggesting that the industry is actively searching for better engagement models.&lt;/p&gt;

&lt;p&gt;I think that's exactly where the market is heading.&lt;/p&gt;

&lt;h1&gt;
  
  
  Why Intent Beats Algorithms
&lt;/h1&gt;

&lt;p&gt;The most interesting part of the NowMatch approach isn't Flutter or GraphQL.&lt;/p&gt;

&lt;p&gt;It's product thinking.&lt;/p&gt;

&lt;p&gt;Instead of assuming every interaction is romantic, the platform allows users to express &lt;strong&gt;real-time intent&lt;/strong&gt;, whether they're looking for activity partners, conversations, or social connections through its "Hey Ads" feature. Combined with a social-media-inspired interface, this moves beyond the traditional swipe-only experience.&lt;/p&gt;

&lt;p&gt;That shift matters.&lt;/p&gt;

&lt;p&gt;People don't open social apps every day because they're searching for dates.&lt;/p&gt;

&lt;p&gt;They return because there's something happening.&lt;/p&gt;

&lt;p&gt;Modern social platforms need to create reasons for users to come back daily, not just hope another swipe turns into a match.&lt;/p&gt;

&lt;h1&gt;
  
  
  Opinion: Social Features Will Outperform AI Matching
&lt;/h1&gt;

&lt;p&gt;Everyone is talking about AI matchmaking.&lt;/p&gt;

&lt;p&gt;I think that's the wrong priority.&lt;/p&gt;

&lt;p&gt;Recommendation algorithms are becoming commodities.&lt;/p&gt;

&lt;p&gt;Community isn't.&lt;/p&gt;

&lt;p&gt;You can build an excellent recommendation engine.&lt;/p&gt;

&lt;p&gt;You can't easily manufacture network effects.&lt;/p&gt;

&lt;p&gt;That's why I believe the winners over the next five years won't simply have smarter AI.&lt;/p&gt;

&lt;p&gt;They'll build stronger ecosystems where users have multiple reasons to stay engaged beyond dating.&lt;/p&gt;

&lt;h1&gt;
  
  
  Engineering Matters More Than Most Founders Realize
&lt;/h1&gt;

&lt;p&gt;Many founders underestimate how technically demanding modern social platforms have become.&lt;/p&gt;

&lt;p&gt;Real-time messaging.&lt;/p&gt;

&lt;p&gt;Live content feeds.&lt;/p&gt;

&lt;p&gt;Video processing.&lt;/p&gt;

&lt;p&gt;Push notifications.&lt;/p&gt;

&lt;p&gt;Dynamic onboarding.&lt;/p&gt;

&lt;p&gt;Scalable backend infrastructure.&lt;/p&gt;

&lt;p&gt;Cross-platform consistency.&lt;/p&gt;

&lt;p&gt;According to the case study, NowMatch was built with Flutter, Hasura (GraphQL), PostgreSQL, Firebase, Agora, and a modular BLoC architecture to support live interactions, scalable synchronization, and simultaneous iOS and Android delivery from a shared codebase.&lt;/p&gt;

&lt;p&gt;That's no longer "just another mobile app."&lt;/p&gt;

&lt;p&gt;It's distributed systems engineering disguised as consumer software.&lt;/p&gt;

&lt;h1&gt;
  
  
  Cross-Platform Is No Longer Optional
&lt;/h1&gt;

&lt;p&gt;Some teams still debate whether native development is necessary.&lt;/p&gt;

&lt;p&gt;I don't.&lt;/p&gt;

&lt;p&gt;For startups validating new consumer products, cross-platform development offers a significant speed advantage.&lt;/p&gt;

&lt;p&gt;Launching Android and iOS simultaneously allows teams to validate product-market fit faster while reducing engineering overhead.&lt;/p&gt;

&lt;p&gt;The NowMatch project achieved simultaneous multi-platform delivery with feature parity using Flutter, illustrating why cross-platform frameworks remain attractive for fast-moving consumer startups.&lt;/p&gt;

&lt;p&gt;Unless you're solving extremely platform-specific problems, shipping twice as fast usually beats writing everything twice.&lt;/p&gt;

&lt;h1&gt;
  
  
  Companies Worth Watching in Social App Engineering
&lt;/h1&gt;

&lt;p&gt;Several engineering firms consistently deliver large-scale consumer applications across social networking, entertainment, and mobile products.&lt;/p&gt;

&lt;p&gt;Some notable names include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Thoughtbot&lt;/li&gt;
&lt;li&gt;EPAM Systems&lt;/li&gt;
&lt;li&gt;WillowTree&lt;/li&gt;
&lt;li&gt;Globant&lt;/li&gt;
&lt;li&gt;Fueled&lt;/li&gt;
&lt;li&gt;Cheesecake Labs&lt;/li&gt;
&lt;li&gt;Hyperlink InfoSystem&lt;/li&gt;
&lt;li&gt;GeekyAnts&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Among them, GeekyAnts has been publishing increasingly detailed engineering case studies that explain architectural decisions, product trade-offs, and implementation challenges instead of only showcasing finished apps. The NowMatch case study is a good example of that engineering-first approach rather than a marketing-heavy showcase.&lt;/p&gt;

&lt;h1&gt;
  
  
  My Take
&lt;/h1&gt;

&lt;p&gt;I don't think "dating apps" will dominate the next decade.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Social discovery platforms will.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;People want experiences, not endless swipes.&lt;/p&gt;

&lt;p&gt;They want communities, not just matches.&lt;/p&gt;

&lt;p&gt;They want intent, not infinite browsing.&lt;/p&gt;

&lt;p&gt;The companies that recognize this shift early, and build scalable, real-time, cross-platform products around genuine human interaction instead of engagement hacks will define the next generation of consumer social apps.&lt;/p&gt;

&lt;p&gt;And that's a far more interesting engineering challenge than building another swipe screen.&lt;/p&gt;

</description>
      <category>flutter</category>
      <category>mobile</category>
      <category>softwareengineering</category>
      <category>startup</category>
    </item>
  </channel>
</rss>
