Venn Innovation · Moncton June 13, 2026
Builder Workshop

From first idea
to real product.

Accelerate your build with AI & coding agents - Build to Learn

Vagmi Mudumbai — CTO & Co-founder, Urai AI Let's build something awesome.
Act One

Anyone can cook

Not everyone is a chef — but a great one can come from anywhere.

Gusteau's cookbook, 'Anyone Can Cook' — Ratatouille
after Gusteau · Ratatouille
Act I · The UnlockBuilder Workshop

The shift

The cost of turning an idea
into software just collapsed.

Then

A team. A few months.

A runway-sized bet just to find out if the thing was worth building.

Now

A builder. An agent. A weekend.

You find out by Monday — for the price of an afternoon.

Act I · The UnlockBuilder Workshop

Who's talking

I build the tools that build software.

vagmi.json
{
  "name": "Vagmi Mudumbai",
  "coding_since": 2002,
  "role": "CTO for 14 years",
  "track_record": "24 years building enterprise software",
  "scaled": "$2M → $18M ARR",
  "built": ["retailtech", "musictech", "logistics", "developer tools"]
}
QR code — scan to connect with Vagmi
Scan to connect
Act I · The UnlockBuilder Workshop

The real unlock

Builders,
not just developers.

The person who knows the problem can finally build the solution.

  • The operator who knows the workflow
  • The designer who can finally ship it
  • The founder who prototypes Friday, tests Monday
Act I · The UnlockBuilder Workshop

The honest catch

Agents make it just as easy to build
the wrong thing — fast, and insecurely.

Leverage cuts both ways. The rest of this talk is how to hold it by the handle.

Act Two

Old Craft,
New Leverage

The part of building software that people keep missing — and the discipline that fixes it.

The mental model to kill

“The agent writes
the code.” → Done.

Every stalled AI build starts here.

Act II · SDLC & XPBuilder Workshop

Code is the 10% you can see.

Above the waterline Writing code
Everything else — the actual job
RequirementsDesignTests Code reviewIntegrationDeployment OperationsSecurityMaintenance

The agent is fastest at the part that was never the bottleneck.

Act II · SDLC & XPBuilder Workshop

The bottleneck moved

When code becomes cheap,
judgment becomes the job.

Deciding what's right, and proving it's correct and safe, is the work now.

Act II · SDLC & XPBuilder Workshop

How agents build, by default

Agents print cookie-cutter software
Engineers iterate on design

Print — the agent default

Builds one layer at a time

modelrepositorycontrollerview

You cannot course correct the software as it is being built.

Grow — the engineer's way

One thin slice, end to end.

UI-first.
Architecture-led.
Validate every step
make it easy to adapt and evolve.

With the right guidance, an agent can grow software too.

Act II · SDLC & XPBuilder Workshop

We've solved this before

Extreme Programming.

Kent Beck, late ’90s. Thoughtworks made it how good teams ship — a handful of practices for shipping reliably, under pressure, in small teams.

Everything old is the unlock again.

XP Practice · 01

Small releases

The practice Ship in thin, vertical slices.
With agents A slice you can see and run beats a 2,000-line PR you can't review.

XP Practice · 02

Test-Driven Development

The practice Write the test first.
With agents Tests give an agent a target and a fence. Red → green is its feedback loop.

XP Practice · 03

Continuous Integration

The practice Integrate constantly; keep it green.
With agents Agents are confidently wrong. CI and types are the net that catches them before users do.

XP Practice · 04

Pairing → pair-prompting

The practice Two minds on the code.
With agents You're the senior in the pair now — you hold context, taste, and the “no.”

XP Practice · 05

Simple design & refactoring

The practice Do the simplest thing; refactor relentlessly.
With agents Agents over-build. Your job is to delete. The repo's shape is the guardrail it reads.

The synthesis

Agents are infinitely fast,
infinitely junior pairs.

XP is the operating system for working with junior pairs at speed. Discipline is what turns speed into trust.

Act Three

Security

The part builders miss most — because it's invisible until it isn't.

Act III · SecurityBuilder Workshop

Why builders are exposed

You ship to real users on day one.

  • Real data and real payments — immediately
  • You're moving fast, and you're moving alone
  • On code you didn't write line-by-line
Act III · SecurityBuilder Workshop

How agent-built apps break.

Secrets in the repo

API keys and tokens committed “just to make it work.”

Auth you can walk around

Checks that look right but miss a path.

Multi-tenant data leaks

One org reads another's data. The #1 SaaS killer.

Injection

SQL, shell — and prompt injection in your AI features.

Vulnerable dependencies

Whatever package made the error go away.

All of it looks plausible.
That's exactly the danger.

Act III · SecurityBuilder Workshop

My day job

I run untrusted code
for a living.

I build secure sandboxes with microVM isolation. So I think about two problems, not one — securing what the agent builds, and securing the agent itself.

Act III · SecurityBuilder Workshop

Guardrail 01

Isolate tenants by construction.

Every row scoped to the organization. Never trust a client-supplied identity — derive it from the session.

select … where org_id = session.orgId — the starter you'll build on today does this on every query.

Act III · SecurityBuilder Workshop

Guardrail 02

Secrets out of code.
Least privilege everywhere.

Secrets live in the platform, never in a commit. Give the agent — and the app — the access they need, and nothing more.

Act III · SecurityBuilder Workshop

Guardrail 03

Verify. Don't trust.

Treat agent output like a confident junior's PR: review it, test it, run automated security review before you ship.

And sandbox the agent's own execution — it runs code too.

The reframe

Security isn't a phase.
It's how you set up the work.

The template, the tests, the review loop — that's where safety lives. Slower is faster.

Act Four

The Right
Substrate

Where a builder's app should actually run — from zero users to a million.

Act IV · The SubstrateBuilder Workshop

The startup infra trap

Pick two of three.

Cheap at zero

No bill before you have users.

Effortless to run

No servers to babysit at 2am.

Instant to scale

Survive the day it actually works.

Most stacks make you choose. A builder shouldn't have to.

Act IV · The SubstrateBuilder Workshop

Serverless at the edge

Scales to zero.
And to millions. Same code.

No servers to babysit. Global by default. You pay for success, not for waiting.

Act IV · The SubstrateBuilder Workshop

Everything you need, in one place.

D1

SQL database

Relational, on the edge.

R2

Object storage

Files & images — no egress fees.

KV

Edge cache

Fast key–value reads, everywhere.

Durable Objects

Stateful & realtime

Coordination, sockets, presence.

Queues

Async work

Background jobs off the request path.

Workers AI

Inference

Run models next to your data.

One platform. One deploy.

Act IV · The SubstrateBuilder Workshop

Why it fits this moment

Built for building with agents.

  • One coherent platform an agent can reason about end-to-end
  • A genuinely generous free tier — start for nothing
  • You only “graduate” to heavier infra after you've won
Act IV · The SubstrateBuilder Workshop

Today's stack

Workers · D1 · Drizzle · Clerk · Polar.

Auth, a typed multi-tenant database, billing — wired and tested. The principles from this talk, made concrete.

It already has a name.

Meet your starting capital

முதல் Mudhal*

முதல்  =  the first  ·  the capital

What you start with — and what you build on.

Act V · Let's BuildMudhal

What you'll build today

A production-grade starter —
then make it yours.

  • Auth & organizations, billing & plans — already wired and tested
  • One example resource to copy into your own
  • Install whole features as skills
  • Deploy to Cloudflare — live in an afternoon

The loop you'll practice

Idea Agent + XP discipline Secure, deployed
product

In an afternoon.

You don't need a team
to start.

You need leverage, discipline, and a substrate that scales with you.

Let's build.
Vagmi Mudumbai — CTO & Co-founder, Urai AI vagmi.ca · Builder Workshop · Venn Innovation
01 / 00