On-demand

Your Team Is Building With AI. Now You Need to Govern It

As Claude Code, Codex, and Cursor collapse the cost of building, anyone can wire up integrations and ship AI agents. Watch Paul Turner and Luke Smith explain how to put guardrails around that explosion without slowing your team down.

Industry event ·5:00 PM PDT / 8:00 PM EDT

Your Team Is Building With AI. Now You Need to Govern It

Presented at the AI Deployment Virtual Summit, July 2026.

The ability to build has massively outrun the ability to govern. Claude Code, Codex, and Cursor have collapsed the cost of building integrations and AI agents — but most of what gets built has no identity attached, no review process, no audit trail, and no way for IT to see it. Shadow AI is shadow IT at a scale that wasn’t possible before.

In this session, Paul Turner walked through what’s actually at risk and why the answer isn’t slowing teams down. Luke Smith then took a real integration from prompt to production, with governance enforced at every stage.

What was covered

  • Why the governance gap is widening. Coding assistants democratized building, but governance frameworks haven’t kept pace. The result: ungoverned agents, abandoned workflows, and an expanding attack surface — plus EU AI Act fines of up to 3% of global turnover coming into force in 2027.
  • Four questions IT can’t answer. Was it built correctly? Whose credentials is it running under? Is there an audit trail? What happens when the API changes? Paul walked through each one and what it costs when the answer is “we don’t know.”
  • What governed building actually looks like. Standards enforced at build time, not bolted on after. Identity tied to every integration. Least-privileged access. Centralized audit trail that streams to Datadog, Splunk, or your SIEM.
  • A live build from prompt to production. Luke demonstrated how Tray Headless lets teams build from Claude Code or Codex while the platform manages connectors, field mapping, validation, deployment, and runtime — so nothing ships outside IT’s visibility.

Who should watch

  • IT and integration leaders dealing with a growing inventory of AI-built artifacts they didn’t authorize
  • Engineering managers trying to enable AI development without creating unmanaged risk
  • Security and compliance teams facing AI Act or SOC 2 exposure from ungoverned AI builds
  • Anyone evaluating how to govern agentic development at scale
Paul Turner

Paul Turner

VP of Market Strategy

Luke Smith

Luke Smith

Principal Sales Engineer, Tray.ai