When Speed Breaks Compliance: DORA in the Age of AI Agents

AI is now writing enterprise software. With 25–40% of code AI-generated or assisted, autonomous coding agents are committing, building, and deploying without human approval. This challenges DORA’s core assumption that every production change ties back to an accountable human decision.

Meanwhile, regulators have hardened their stance. They’ve shifted from “do you have a framework?” to “show me your controls operating continuously for the last six months.” As financial institutions accelerate pipelines faster than governance can follow, that gap becomes a regulatory liability.

In this session, JFrog’s Global Field CISO Nir Peleg is joined by Sophie Starchenko, Senior Product Manager for JFrog AppTrust, for a live demo on closing the gaps DORA exposes across the software supply chain: from third-party risk to change management.

What you’ll take away:

▸ The DORA Reality Check: what regulators demand now, and why manual compliance fails at AI velocity.

▸ The Agentic Governance Gap: how AI coding agents break DORA’s accountability chain, and how to close it.

▸ Automated DORA Evidence: how policy gates physically block non-compliant software at every stage of delivery.