With humanitarian and international actors in the conference community, this session co-creates a vision and wish-list for a Humanitarian Cyber Commons — shared, open and trustworthy data, tools and AI capabilities that help protect vulnerable populations and the organisations serving them — and turns it into a high-level, preliminary and non-committing roadmap of deliverables. Together, participants collect needs against guiding principles (strategic autonomy, neutrality, data protection, digital dignity), and identify candidate use cases and potential partners to join.

The roadmap is structured around two inputs: (a) the requirements and requests received from stakeholders, and (b) the deliverables already foreseen within our established Luxembourg Cybersecurity Factory Cyber Commons work programme.
The session then invites the audience to say what is missing from the roadmap and, realistically, in what timeline each item is genuinely needed — "yesterday" not being an accepted answer.

Output: white paper (Chatam house rules), to be distributed to the participants only, including a draft vision statement, a prioritised wish-list, and candidate use cases and partnerships.

Interest in open source at the policy level has grown considerably in recent years. What's still missing is a shared understanding of what it takes to make that endorsement operational. This panel brings together three evidence bases for closing that gap: new research identifying 13 concrete capacity indicators that separate policy intent from practice; the UN's Open Source Enablement Compass, which is turning that kind of research into a yearly benchmarking tool for governments worldwide; and Software Heritage's State of Public Code, which tracks what governments actually contribute, not just what they claim. Together, they ask: what would it take to move open source in government from policy to evidence-based action?