{"id":10635,"date":"2026-07-01T10:46:42","date_gmt":"2026-07-01T08:46:42","guid":{"rendered":"https:\/\/mio.one\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/"},"modified":"2026-07-09T10:17:35","modified_gmt":"2026-07-09T08:17:35","slug":"deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project","status":"publish","type":"post","link":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/","title":{"rendered":"Deterministic guardrails and documentation that becomes obsolete: what I took away from Santander’s open source project"},"content":{"rendered":"
\n
\"\"
Alex Masip, Director of Data & MadTech | MIO One<\/figcaption><\/figure>\n<\/div>\n

Estimated reading time: 5 minutes<\/strong><\/sub><\/a><\/p>\n\n

Santander has released its AI work<\/h2>\n\n

A few weeks ago, Banco Santander published part of its open-source AI work, licensed under Apache 2.0, on GitHub. What\u2019s interesting\u2014and Stefan Bergsten<\/a> explains this very well in his article \u201cSantander\u2019s Open-Source AI Move: The Control Loop Banks and Portfolio Managers Need to Understand\u201d\u2014<\/a>is not that it\u2019s sharing \u201cbanking intelligence,\u201d but rather that it\u2019s making the infrastructure for governing AI available: guardrails, evaluation harnesses, vendor-agnostic access to models, and synthetic data. The key takeaway for me is that, in regulated AI, the model is an input; the control process surrounding it is the true asset. <\/p>\n\n

The Most Valuable Aspect of Open Source<\/h2>\n\n

While reviewing the repository, I found two projects that, over the course of a summer weekend afternoon, improved systems we already had up and running. It\u2019s the pattern that travels, not just the code. <\/p>\n\n

Project 1 \u2014 mech-gov-framework: From a Rule in the Prompt to a Deterministic Guarantee<\/h2>\n\n

One of our internal agents is a chatbot that uses your data in BigQuery: a two-step pipeline (one agent generates SQL, the other crafts the response in natural language), deployed on Cloud Run behind IAP.<\/p>\n\n

What did we already have, aside from the prompt:<\/p>\n\n

    \n
  • Read-only identity. The service account for this service has only the roles bigquery.dataViewer and bigquery.jobUser. Even if the model were to generate a DELETE or a DROP, BigQuery would reject it: “read-only” access was guaranteed at the IAM level, not at the prompt level. <\/li>\n\n\n\n
  • Robust execution. A structural check that rules out truncated SQL (unbalanced parentheses, dangling clauses) and a retry loop that, in the event of a BigQuery error, feeds the error back to the model so it can correct it. <\/li>\n\n\n\n
  • Endpoint authentication via IAP.<\/li>\n<\/ul>\n\n

    Where was the real loophole? In the separation between clients and in the cost. The SA could read the entire warehouse (dataViewer at the project level); the only thing preventing one client\u2019s agent from accessing another client\u2019s table was the prompt asking for permission. And there was no limit on the number of billed bytes. <\/p>\n\n

    Since it’s a project for 100% internal use with limited access, it’s no big deal, but there’s always room for improvement. And when I saw the mech-gov project in the Santander repo, I thought to myself, “This is going to be useful to me.” <\/p>\n\n

    The mech-gov pattern: deterministic gates that surround the model and cannot be bypassed, both before and after generation. The idea that emerges: a prompt is a request, not a guarantee. <\/p>\n\n

    I’ve implemented it as a deterministic validator at runtime (a hook that runs before the query is executed). First-match-wins rules: a single read-only statement (no DDL\/DML or chained statements), fully qualified tables, and, the icing on the cake, a strict per-client allow list: each agent can only access its own mart. Plus non-blocking warnings (SELECT *, division without SAFE_DIVIDE, absence of a date filter) and a hard cap on `maximum_bytes_billed`. If a query fails the filter, the hook throws an exception that reuses the existing retry loop (it is regenerated); if it fails again, nothing is executed (fail-closed). <\/p>\n\n

    The improvement, in a nutshell: it turns the only rule that lacked a deterministic basis\u2014isolation between clients\u2014into a guarantee, and adds a cost cap. Three-layer defense-in-depth: identity (IAM), query format (the gateway), and scale (the byte limit). <\/p>\n\n

    \"Article
    Layered defense for the NLQ agent: “read-only” access was already provided by identity (IAM), and the cost cap is managed in BigQuery; the new feature is the deterministic gate that isolates each client before execution. The gate pattern comes from mech-gov. <\/figcaption><\/figure>\n\n

    Project 2 \u2014 ralph-vault-skill: Documentation with Source and Expiration Dates<\/h2>\n\n

    As a true Karpathy fanboy, I\u2019ve been working with an Obsidian vault (Markdown with wiki links and YAML frontmatter) for a long time. As a complement, I use Pinecone for semantic search on those notes (the classic \u201cfind me the document about X\u201d); and, since embeddings don\u2019t handle questions like \u201cWhat is the current state of X?\u201d very well, I use a hand-written bitemporal \u201cstate ledger\u201d (YAML) that\u2019s mirrored to BigQuery so that the agents themselves can perform JOINs against the current state. <\/p>\n\n

    This stack is excellent for understanding (the why, the decisions, the status), but it has a blind spot: it doesn’t document the code itself in a structured way, and the prose about the code quietly becomes outdated\u2014Pinecone will happily return an obsolete note because it’s the closest match, not the most up-to-date one.<\/p>\n\n

    It’s an issue I’ve been mulling over for a while, and I hadn’t found a perfect solution. I’ve explored options like Graphiti, but they haven’t quite convinced me for my specific use case. And it turns out I came across Ralph in the repo. <\/p>\n\n

    ralph-vault generates a multi-level deepwiki from the source code, and there are two things that won me over:<\/p>\n\n

    – Origin + expiration. Each document lists the commit and the source globs it covers; a check compares this against the diff since the last sync and tells you which sections have become obsolete (staleness by path, not by the repo\u2019s HEAD) and which files exist that no document covers (omission audit). <\/p>\n\n

    – A validation check on the wiki itself (frontmatter, wikilinks, and a “no copied source code” gate: summarize, don’t paste).<\/p>\n\n

    We built one for our agents’ code and their data layer (the dbt project that powers them), generating it with a single run of documentation per repo. It fits in with what I already had: the vault stores the rationale, Pinecone retrieves it, the ledger provides the current status, and now the deepwiki provides the structured map of the code\u2014and, unlike prose, it knows when it\u2019s lying. <\/p>\n\n

    The technical insight I’ve taken away: when it comes to “Is this still true about the code?”, documentation that includes sources and expiration detection outperforms embeddings based on prose. Vector search gives you the most similar snippet\u2014not the most up-to-date one. <\/p>\n\n

    \"Article
    Obsidian + Pinecone respond with “where is the doc,” the state ledger (mirrored to BigQuery) responds with “what is the current state,” and the new deepwiki (ralph-vault) responds with \u201cwhat the code does and whether it\u2019s still valid\u201d\u2014the latter with expiration detection,<\/figcaption><\/figure>\n\n

    What I took with me<\/h2>\n\n

    Interestingly, my two adoptions fit into two stages of the control loop described by Bergsten: the filter\/guardrail (the gate that validates each query) and the evaluation\/governance (the knowledge base that monitors its own obsolescence). Without intending to, I have incorporated two elements of the very same control loop that drives this initiative. <\/p>\n\n

    A note: not all of the repository consists of production code at this point\u2014there are research prototypes and READMEs that have been heavily \u201cpolished\u201d by AI\u2014but the ideas are very valuable, and knowing how to distinguish one from the other is part of that value. And that, to me, is the real headline: a media consulting firm improving its internal agents using a bank\u2019s AI security repository is, exactly, the democratization the article is talking about. <\/p>\n\n

    If you’re building with LLMs, check it out. And congratulations to Santander for releasing it under a permissive license: more of this, please. <\/p>\n","protected":false},"excerpt":{"rendered":"

    Estimated reading time: 5 minutes Santander has released its AI work A few weeks ago, Banco Santander published part of its open-source AI work, licensed under Apache 2.0, on GitHub. What\u2019s interesting\u2014and Stefan Bergsten explains this very well in his article \u201cSantander\u2019s Open-Source AI Move: The Control Loop Banks and Portfolio Managers Need to Understand\u201d\u2014is […]<\/p>\n","protected":false},"author":4,"featured_media":10637,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[232,305],"tags":[225],"class_list":["post-10635","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-management-en","category-martech","tag-marketing-en"],"acf":[],"yoast_head":"\nSantander Opens Up Its AI: Lessons in Governance<\/title>\n<meta name=\"description\" content=\"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Santander Opens Up Its AI: Lessons in Governance\" \/>\n<meta property=\"og:description\" content=\"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/\" \/>\n<meta property=\"og:site_name\" content=\"MIO One\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SomosMIOGROUP\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-01T08:46:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-09T08:17:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1376\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"comunicacion\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@SomosMiogroup\" \/>\n<meta name=\"twitter:site\" content=\"@SomosMiogroup\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"comunicacion\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/\"},\"author\":{\"name\":\"comunicacion\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#\\\/schema\\\/person\\\/d535a756e871c6347b8cecf3a9282a1b\"},\"headline\":\"Deterministic guardrails and documentation that becomes obsolete: what I took away from Santander’s open source project\",\"datePublished\":\"2026-07-01T08:46:42+00:00\",\"dateModified\":\"2026-07-09T08:17:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/\"},\"wordCount\":1244,\"publisher\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/07\\\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg\",\"keywords\":[\"Marketing\"],\"articleSection\":[\"DATA\",\"Martech\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/\",\"url\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/\",\"name\":\"Santander Opens Up Its AI: Lessons in Governance\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/07\\\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg\",\"datePublished\":\"2026-07-01T08:46:42+00:00\",\"dateModified\":\"2026-07-09T08:17:35+00:00\",\"description\":\"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#primaryimage\",\"url\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/07\\\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg\",\"contentUrl\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/07\\\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg\",\"width\":1376,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/mio.one\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Deterministic guardrails and documentation that becomes obsolete: what I took away from Santander’s open source project\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/mio.one\\\/en\\\/\",\"name\":\"Mio One\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mio.one\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#organization\",\"name\":\"Mio One\",\"url\":\"https:\\\/\\\/mio.one\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/mioone-en.svg\",\"contentUrl\":\"https:\\\/\\\/mio.one\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/mioone-en.svg\",\"width\":782,\"height\":782,\"caption\":\"Mio One\"},\"image\":{\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/SomosMIOGROUP\\\/\",\"https:\\\/\\\/x.com\\\/SomosMiogroup\",\"https:\\\/\\\/www.instagram.com\\\/somosmiogroup\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/miogroup\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mio.one\\\/en\\\/#\\\/schema\\\/person\\\/d535a756e871c6347b8cecf3a9282a1b\",\"name\":\"comunicacion\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g\",\"caption\":\"comunicacion\"},\"url\":\"https:\\\/\\\/mio.one\\\/en\\\/blog\\\/author\\\/comunicacion\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Santander Opens Up Its AI: Lessons in Governance","description":"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/","og_locale":"en_US","og_type":"article","og_title":"Santander Opens Up Its AI: Lessons in Governance","og_description":"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.","og_url":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/","og_site_name":"MIO One","article_publisher":"https:\/\/www.facebook.com\/SomosMIOGROUP\/","article_published_time":"2026-07-01T08:46:42+00:00","article_modified_time":"2026-07-09T08:17:35+00:00","og_image":[{"width":1376,"height":768,"url":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg","type":"image\/jpeg"}],"author":"comunicacion","twitter_card":"summary_large_image","twitter_creator":"@SomosMiogroup","twitter_site":"@SomosMiogroup","twitter_misc":{"Written by":"comunicacion","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#article","isPartOf":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/"},"author":{"name":"comunicacion","@id":"https:\/\/mio.one\/en\/#\/schema\/person\/d535a756e871c6347b8cecf3a9282a1b"},"headline":"Deterministic guardrails and documentation that becomes obsolete: what I took away from Santander’s open source project","datePublished":"2026-07-01T08:46:42+00:00","dateModified":"2026-07-09T08:17:35+00:00","mainEntityOfPage":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/"},"wordCount":1244,"publisher":{"@id":"https:\/\/mio.one\/en\/#organization"},"image":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#primaryimage"},"thumbnailUrl":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg","keywords":["Marketing"],"articleSection":["DATA","Martech"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/","url":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/","name":"Santander Opens Up Its AI: Lessons in Governance","isPartOf":{"@id":"https:\/\/mio.one\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#primaryimage"},"image":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#primaryimage"},"thumbnailUrl":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg","datePublished":"2026-07-01T08:46:42+00:00","dateModified":"2026-07-09T08:17:35+00:00","description":"Santander released part of its AI stack as open source. Alex Masip explains what he took from it and how it improved the governance of his agents.","breadcrumb":{"@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#primaryimage","url":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg","contentUrl":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2026\/07\/e9daac80-7528-11f1-917a-c71ad3300a7d-1782895416283.jpg","width":1376,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/mio.one\/en\/blog\/deterministic-guardrails-and-documentation-that-becomes-obsolete-what-i-took-away-from-santanders-open-source-project\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/mio.one\/en\/"},{"@type":"ListItem","position":2,"name":"Deterministic guardrails and documentation that becomes obsolete: what I took away from Santander’s open source project"}]},{"@type":"WebSite","@id":"https:\/\/mio.one\/en\/#website","url":"https:\/\/mio.one\/en\/","name":"Mio One","description":"","publisher":{"@id":"https:\/\/mio.one\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mio.one\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mio.one\/en\/#organization","name":"Mio One","url":"https:\/\/mio.one\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mio.one\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2023\/09\/mioone-en.svg","contentUrl":"https:\/\/mio.one\/wp-content\/uploads\/sites\/2\/2023\/09\/mioone-en.svg","width":782,"height":782,"caption":"Mio One"},"image":{"@id":"https:\/\/mio.one\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SomosMIOGROUP\/","https:\/\/x.com\/SomosMiogroup","https:\/\/www.instagram.com\/somosmiogroup\/","https:\/\/www.linkedin.com\/company\/miogroup\/"]},{"@type":"Person","@id":"https:\/\/mio.one\/en\/#\/schema\/person\/d535a756e871c6347b8cecf3a9282a1b","name":"comunicacion","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6b0a338c590839724a3da0b111c410569242af145ffefee60fcaf7117a667ecd?s=96&d=mm&r=g","caption":"comunicacion"},"url":"https:\/\/mio.one\/en\/blog\/author\/comunicacion\/"}]}},"_links":{"self":[{"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/posts\/10635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/comments?post=10635"}],"version-history":[{"count":1,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/posts\/10635\/revisions"}],"predecessor-version":[{"id":10639,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/posts\/10635\/revisions\/10639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/media\/10637"}],"wp:attachment":[{"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/media?parent=10635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/categories?post=10635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mio.one\/en\/wp-json\/wp\/v2\/tags?post=10635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}