Dev Summit 2026

While scrolling on Reddit, I found this interesting (yet frightening) post: “$82,000 in 48H from a stolen Gemini API key. My monthly usage is $180. Facing bankruptcy.” This story is a powerful reminder of why an AI gateway is a critical component in ADEO's AI governance.

In this talk, we will dive into the 'why' and 'how' of building an AI Gateway. We will share the inside story of how ADEO tackled this challenge through a strategic collaboration between the AI Services and DevPortal teams to create a secure, multi-provider entry point for our developers.

We offer a retrospective on two years of hard work to revolutionize order picking in Decathlon warehouses with the Pick’it app. Originally designed to replace "Paper picking" in bulky item sectors, our mission was to turn it into the universal standard for order preparation.
This talk is not just a product presentation; it’s the story of a total field immersion and a fight for the survival of a product vision.

As developers, we are constantly asked to "Shift Left," follow "Secure by Design" principles, and fix endless lists of vulnerabilities. But here is the reality: we are rarely taught how these flaws actually work or how an attacker exploits them. How can you effectively fix a vulnerability you can't even reproduce? How can you tell a critical threat from a false positive?

It’s time to bridge that gap.

In this session, Decathlon’s Offensive Security team pulls back the curtain. After a deep dive into Red Team methodologies and real-world attack vectors, it’s your turn to strike. Using professional tools like Burp Suite, you will be deployed onto a private e-commerce instance. Your mission? Stop being the target and become the attacker.

The Goal: By learning how to "pwn" the shop, you will finally understand the "why" behind security patches. Join the competition, climb the leaderboard, and win prizes while becoming the ultimate guardian of our ecosystem.

At Decathlon, we have customer-facing applications, including one you all know: our e-commerce website.
This is based on our open-source design system : Vitamin Play.

But we also have many internal front-end applications.
The needs of these applications are very different from those of an e-commerce site.
Take navigation, for example. They are two completely different requirements.

Furthermore, these applications were built organically, and no guidelines exist to standardize them.
Imagine the tab titles in your browser: do you think simply displaying the application name is sufficient for a user to understand the page that is behind it?
And even worse, what if each application used by the same user is different in terms of design, user experience, etc.?

That's why we launched an initiative to produce guidelines and components that will standardize our internal applications for a better experience for our internal teammates, all without an allocated budget!

In this talk, we'll explain how we built this community, what our objective is, and what our initial achievements are.

What do sports, home improvement, and modern AI have in common? None of them work well when handoffs are messy, foundations are shaky, or every new initiative starts by tearing down what already exists. This keynote explores how data products and data contracts help organizations create clearer ownership, stronger collaboration, and data that is truly ready for products, analytics, and AI through a practical, frugal, and brownfield-friendly approach.



In many organizations, the challenge is no longer collecting quality data. It is making that data trustworthy enough, with sufficient context, to be reused across teams, embedded in products, and pushed all the way into AI systems that actually reach production.

In this keynote, Jean-Georges “jgp” Perrin explores how data products and data contracts help organizations build stronger foundations for collaboration, delivery, and AI success. Using simple analogies from sport and construction, he shows why better outcomes depend on clean handoffs, explicit expectations, and assets designed to be reused rather than rediscovered every quarter.

The session also introduces Bitol, the Linux Foundation project advancing open standards for modern data engineering, including the Open Data Contract Standard (ODCS) and the Open Data Product Standard (ODPS). These standards are not abstract theory: they reflect a growing, proven practice in which data contracts and data products help teams reduce ambiguity, improve quality, and move AI initiatives from promising prototypes to production with greater confidence.

Most importantly, this is not a rip-and-replace story. It is a frugal, brownfield approach for real organizations: improve what exists, strengthen trust step by step, and create measurable value without wasting time, effort, or money. Built the way strong teams in sport, on worksites, and in the Nord often succeed best: with coordination, clarity, and something sturdy enough to last.

The e-commerce landscape is entering a long-term transition. While humans still hold the credit card, AI agents are increasingly taking over the discovery, comparison, and decision-making phases. With projections suggesting a significant portion of commerce will be agent-mediated by 2030, the shift for retailers starts now.

In this dual-voice session, a **Manager from the world of the Data** and a **Staff Software Engineer** bridge their perspectives to provide a pragmatic state of the union on Agentic Commerce. We will move beyond the hype to look at the incremental reality of this hybrid era:
* **Strategic Perspective**: How to remain relevant when an agent is filtering your catalog? We’ll discuss the shift in brand loyalty and the challenge of serving both human shoppers and their digital assistants.
* **Technical Foundations**: Preparing your stack for machine-to-machine interactions. We will cover the evolution of MACH architectures, the importance of goal-oriented APIs, and the role of standardized protocols like *MCP*.
* **Practical Scenarios**: From automated replenishment of consumables to "Intent-based" shopping, where agents orchestrate complex purchases across multiple categories.
Join us to explore the architectural patterns and strategic shifts that will bridge the gap between today’s web and tomorrow’s agentic ecosystem.

Think digital accessibility is an impenetrable maze of complex rules? Think again. We live in a golden age of tooling where ensuring your site is inclusive has never been more achievable.

- Kickstarting Accessibility: A quick introduction to accessibility, covering the creation of an accessibility statement and initial remediation efforts. Discover how to rapidly integrate accessibility tools into your product using AI and ready-to-use solutions.
- The Power of Automation: Discover how to leverage static and dynamic "safety nets" directly in your workflow to catch (a good) majority of errors before they even reach production.
- The Human Reality Check: Tools are powerful, but they aren't perfect. We will conclude with a practical, streamlined "First-Check" methodology designed to bridge the gap between automated scans and a full-scale expert audit. And prepare your product for legal compliance!

Key Takeaways: Don't aim for 100% perfection on day one. Instead, walk away with a toolkit to build a "healthy HTML base," automate your testing, and prepare your product for a future full audit with confidence.

Accessibility isn't a mountain—it's a series of smart, automated steps. Let’s take the first ones together.

From Decathlon SIG Digital Accessibility Team

In the fast-paced digital world of ADEO and Decathlon, we strive for "seamless" journeys. But for millions of users, whether they have permanent disabilities or are just trying to shop one-handed while holding a toddler, our "seamless" UX is often full of invisible walls.

Accessibility is too often misunderstood as a final technical checklist before deployment. In reality, it is a shared responsibility that begins with a design intent and comes to life through code. In this 30-minute session, we’ll dive into the 7 most frequent accessibility hurdles found in e-commerce today.

Digital transformation often dies in the boardroom, waiting for a budget that never comes. But what if the lack of funding was actually your greatest competitive advantage?
In this session, we deconstruct the journey of a supply chain transformation that scaled from a zero-budget POV to a global platform supporting 1,500+ cross-functional users.
Faced with a heavy legacy process where a each day of excess stock cost millions in cashflow and shortages risked 3.5% of sales growth, our team bypassed the friction of traditional budget allocation by adopting a Kaizen-led, value-first approach
By repurposing legacy data and leveraging a "Digital squad" (UX, Product, Engineering, Data), we proved that factual impact silences political debate.
We will share:
- the exact blueprint used to define a high-impact "Initial Perimeter,"
- launch a low-cost MVP,
- and ultimately achieve worldwide deployment by making the value undeniable (very high ROI).

Key Takeaways:
- The "Shadow" Discovery: How to use legacy data to quantify the "Cost of Inaction" (e.g., the millions of cashflow lever).
- Governance Hack: Using factual data to navigate complex "Comittology" and resource scarcity.
- The Kaizen Scale: Moving from a complex muda workflow to a simple, efficient workflow with a company-wide standard without a "Big Bang" budget.

Summary: Do you find testing your Java microservices tedious? Discover how we at Decathlon use Cucumber and the open-source library Tzatziki to test our applications effortlessly. By combining the expressive power of Cucumber—which allows for writing tests in natural Gherkin language—and Tzatziki’s ready-to-use modules, we have created an approach at Decathlon that drastically simplifies our integration and end-to-end testing. In this hands-on workshop, you will learn how to leverage Cucumber and Tzatziki to test every aspect of your Java microservices, finally reconciling functional understanding, development speed, and test quality.

Content: During this workshop, we will start by introducing Cucumber and the BDD approach we have adopted at Decathlon. You will discover how Tzatziki, our Cucumber Java extension, drastically simplifies the writing of integration tests and allows you to express business requirements in natural language.

We will follow up with three practical exercises.

The first will allow you to test a complete CRUD application with a PostgreSQL database, manipulating and verifying database data without needing to write code.

In the second exercise, you will learn how to mock external API responses while verifying your application's outgoing calls, thus mastering the HTTP interactions of your microservices.

The third exercise will introduce you to Kafka stream testing, where you will discover how to read, write, and validate messages using Avro schemas or JSON format.

Finally, we will tackle a fourth exercise dedicated to testing MCP servers using the new tzatziki-test-mcp module. Because yes, validating your MCP server is crucial before going to production, you will learn how to ensure it is reliable and ready for deployment.

Audience: This workshop is designed for Java developers from beginners to experienced professionals who wish to refine their knowledge of testing and master new tools to improve their workflow.

Hook : For decades, we’ve been obsessed over pixels, grids, and "where to put the button." But in a world where screens are fading and Generative AI is becoming our primary interface, what happens to UX when there is no UI? As we move toward a Zero UI future, the "look and feel" of a brand is being replaced by the "sound and soul" of its conversation.

Pitch :
The era of the graphical user interface (GUI) is reaching its peak, making way for a paradigm shift: The Conversational Era. As AI agents become ubiquitous, the traditional tools of a designer—typography, color palettes, and layout—are becoming secondary. In this new landscape, the interface is invisible, and the interaction is purely linguistic.

In this talk, we will explore why Tone of Voice & Personality have become the new fundamental pillars of design. We’ll discuss:

- The Transition to Zero UI: Why the most sophisticated interface is the one you can’t see.

- Personality as Navigation: How an AI’s persona guides user behavior more effectively than a menu.

- Designing the Invisible: New frameworks for designers to transition from visual architects to conversational strategists.

- Cybersecurity Impacts : New approaches to jailbreak AI Conversational Agents

Whether you are a designer, a product manager, or a developer, it’s time to stop thinking in screens and start thinking in term of conversation & personality. The future of UX isn't something you see—it's something you feel through a conversation.

This framework is fundamental for accelerating the consistency, standardization, and industrialization of our digital portfolio. It empowers our business to fully optimize the product journey, driving decision-making, measurable value creation, higher profitability, and ultimate user satisfaction.

Join this session to dive into this strategic topic, followed by a live Q&A session to answer your specific questions.

The adoption of OpenTelemetry (OTel) is driven by the promise of vendor-neutral ingestion, yet implementing a scalable, production-grade OTLP pipeline remains a significant operational challenge. Our team took on this complexity by building a fully managed, high-throughput OTLP ingestion service from the ground up for the Elastic Cloud platform. This service handles logs, metrics, and traces, allowing customers to simply "Give me an OTLP endpoint and manage everything else".

Our end-to-end security solution protects connected bikes. After just one year, our 75% stolen bike recovery rate is paving the way for innovative new rental business models.

2025 was supposed to be a major year for accessibility with the enforcement of the European Accessibility Act. But the AI tsunami came in and stole the show! The future of technology seems inextricable of artificial intelligence. However is AI and Accessibility really a good mix ?

People with disabilities are already using AI tools in their daily lives: to navigate the web, understand content, or overcome barriers that were previously difficult to address. At the same time, AI-generated interfaces and AI-assisted development introduce new challenges: inaccessible tools, biased outputs, unreliable alternative text, or code that looks correct but fails basic accessibility requirements.

This talk looks at the current intersection between accessibility and AI. Through practical examples and a case study of a “vibe-coded” website, we will explore where AI can genuinely help improve accessibility and where it still falls short. The goal is not to present AI as a solution to accessibility, but to understand how it can support the work of designers and developers without replacing the human perspective that accessibility ultimately depends on.

**From Autocomplete to AI Teammate: Stop Wasting Time with GitHub Copilot**

We have all been there: fighting with AI hallucinations, stuck in endless prompting loops, and spending more time debugging AI-generated code than it would have taken to write it from scratch. AI can actually be a massive time-waster if used poorly.

As a QA Automation Engineer, I decided to stop treating GitHub Copilot as a simple code generator and turned it into a context-aware teammate. In this talk, I will share how to bridge the gap between business requirements and test automation without ever leaving Visual Studio Code.

Through personal stories of my own failures and successes, we will explore how leveraging Model Context Protocol (MCP) integrations for Playwright, Jira/Confluence, and Sonar creates a seamless, time-saving workflow. We will see how providing the *right* business context directly inside the IDE prevents AI hallucinations and generates clean, reliable Java/Playwright tests.

**Key takeaways:**
* **The AI Time Trap:** Why AI makes us lose time and how to fix it with proper context.
* **The "Teammate" Mindset:** Shifting from dumb code generation to smart, context-aware problem solving.
* **Accessible to All:** Practical, easy-to-implement techniques suitable even for junior developers—no AI expertise required.

How can a sports company outpace the most stringent European cybersecurity laws? In 2020, years before the Cyber Resilience Act (CRA) was finalized, Decathlon's engineering team launched a radical project: the Connected Sports Platform (CSP). While the CSP is a comprehensive Mobile and Cloud ecosystem, this session focuses on the "hardest mile": the devices. We will dive into the technical pillars that now allow our hardware to meet CRA requirements by default: hardware-based identities, hardened communication, and automated software supply chain integrity. Discover how a "Why-first" approach to device security transformed a massive engineering challenge into a competitive advantage.

How can hundreds of in-store applications adapt instantly to the specificities of a country, a sport, or even a single user, without any code deployment? This is the challenge we took on with**Paramethor**.

In this presentation, we will look back at the genesis of this product, born from a critical need at Decathlon: **reducing Time-to-Market** (TTM) and avoiding the sprawl of configuration databases. We will explore how we built a robust solution consisting of a high-performance backend, an intuitive admin interface, and a real-time notification system via Kafka to inform applications of every change.

We will dive into the technical heart of the rules engine, specifically our **prioritized** search strategies. You will discover how we manage the complexity of business contexts (Store, UID, Country, third-party type, etc.) to offer extreme granularity in controlling features and configuration values.

**Key points covered :**
* **Why ?** Shifting from rigid configuration to total autonomy for both business and technical teams.
* **How ?** Technical architecture, exception management, and conflict resolution strategies based on priority.
* **Impact :** Reducing operational costs, securing deployments, and accelerating In-Store innovation.