The U.S. AI Action Plan, while aiming to accelerate AI innovation by reducing "red tape" and fostering private-sector growth, explicitly states it does not override critical existing regulations like HIPAA (for healthcare) and SOX (for financial reporting). Instead, it seeks to harmonize AI adoption with these legal obligations. The plan acknowledges that complex regulatory landscapes have slowed AI adoption in sensitive sectors like healthcare and finance.

I have taken a deeper look at what this means for the industry and gave both the Action Plan and my interpretation to Googles NotebookLLM to create a nice overview. And here you go. Pretty spot on.

Compare yourself and find my original interpretation on LinkedIn: What the 2025 U.S. AI Action Plan Means for Enterprise Java and ERP Systems

Key takeaways from the plan's and my analysis:

• No Override, But Harmonization: The plan emphasizes regulatory sandboxes and "AI Centers of Excellence" where new AI tools can be tested under supervisory frameworks, ensuring compliance with existing laws. NIST is tasked with developing national AI standards and evaluation guidelines that will incorporate HIPAA and SOX requirements for risk assessments, audit trails, and data protection.

• Data Protection is Paramount: For HIPAA, the plan's focus on secure compute environments, privacy, and confidentiality for large datasets aligns directly with the need to protect Protected Health Information (PHI). AI applications must maintain the confidentiality, integrity, and availability of PHI.

• Auditability for Financial Integrity: For SOX, internal controls and accurate financial reporting remain non-negotiable. AI tools used in financial reporting must provide audit trails, explainability, and error detection.

• Embracing Open and Self-Hosted Models: Both HIPAA and SOX compliance are significantly supported by the plan's push for open-source and open-weight AI models. This is crucial because organizations handling sensitive PHI or financial data often cannot send this data to external, closed model vendors. Self-hosting models within a company's secure environment reinforces control over sensitive data.

• Secure-by-Design and Incident Response: The plan promotes "secure-by-design" AI technologies to guard against threats like data poisoning and adversarial attacks. It also calls for AI-specific incident response plans, which are vital for SOX compliance to detect and report anomalies that could affect financial statements.

• Integration with Existing Systems: For traditional ERP/Java back-ends, the plan signals a need to embed AI transparently into existing process workflows, ensuring robust audit logs to meet compliance requirements. Enterprise architects will need to adopt strong AI evaluation and governance frameworks and build secure infrastructure with robust data governance.

I just recently had a guest post up by Martin Stefanko and with Alex joining the rain, we now have a wonderful short intro up too!

A little later than usual, but here it is. The weekly recap. Postponed due to RH Summit.

NOTE: This is an AI generated Podcast with Google NotebookLM

* Local AI with LangChain4j and Quarkus: Build an Email Task Extractor with Tool Calling - Published on May 13, 2025. This post introduces building a local-first AI application using Quarkus, LangChain4j, and local Large Language Models (LLMs) via Ollama. It demonstrates creating a simulation service that generates emails using one LLM and extracts tasks using another with LangChain4j's tool calling feature.

* Supercharge Your Java APIs with GraphQL and Quarkus - Published on May 14, 2025. This guide explains how to leverage GraphQL with Quarkus to build efficient APIs. It covers defining GraphQL schemas, implementing queries and mutations, and the benefits of GraphQL like solving over-fetching and under-fetching issues. Quarkus' smallrye-graphql extension is used for integration.

* Intercept This! Hands-On with HTTP Filters in Quarkus - Published on May 15, 2025. This tutorial focuses on using standard JAX-RS filters in Quarkus to intercept HTTP requests and responses. It shows how to implement global filters for logging or adding headers, and conditional filters using Name Binding for specific endpoints, useful for cross-cutting concerns like auditing or access control.

* No More Polling: Build Real-Time Java Apps with Quarkus WebSocket Next - Published on May 16, 2025. This post demonstrates building real-time applications with Quarkus WebSocket Next, highlighting how to push live data updates from the server to clients without inefficient polling. An example of a live JVM heap monitor is used to showcase broadcasting messages to multiple connected clients using scheduled tasks. The post notes that WebSocket Next is a new, more efficient API compared to the original quarkus-websockets extension.

* Debug Smarter, Not Slower: Master Runtime Logging in Quarkus - Published on May 17, 2025. This guide introduces the Quarkus Logging Manager, a tool that allows developers to dynamically adjust logging configurations, such as log levels for specific loggers or categories, at runtime. This capability helps in troubleshooting performance issues or other problems in production without requiring application restarts or redeployments.

* Mastering Database Migrations in Java: A Hands-On Guide with Quarkus and Flyway - Published on May 18, 2025. This tutorial covers managing database schema evolution using Flyway integrated with Quarkus Dev Services. It explains the importance of versioned database changes and how Flyway automates applying SQL migration files in order, ensuring consistency and predictability.

* Containerize This! A Hands-On Guide to Quarkus with Buildpacks - Published on May 19, 2025. This post details containerizing Quarkus applications using Cloud Native Buildpacks, eliminating the need for Dockerfiles and manual base image management. It highlights Quarkus' first-class integration with Buildpacks via the container-image-buildpack extension, resulting in faster, more optimized, and portable container images triggered directly from the Maven build.

NOTE: This is an AI generated podcast exported from Google’s NotebookLM. I am still experimenting with this and am very excited to read about your feedback!

In this packed fourth episode of Enterprise Java and Quarkus for Decision Makers, we navigate the rich terrain of modern Java development with Quarkus. From advanced CDI tricks like reactive dependency injection and custom scopes, to security-focused input validation and dynamic CSV ingestion magic — we’ve got your back.

Ever wondered how to peek under the hood of your running Quarkus app? We break down Jolokia and Hawtio for real-time monitoring. If you’re curious about text embeddings and Java’s take on semantics, we explore cosine similarities and Ollama-powered AI.

And because no week is complete without a head-scratching container issue, we explain why your resource files go missing — and how to make peace with the ClassLoader. We wrap it up with a testing showdown: @QuarkusTest vs. @QuarkusIntegrationTest — which one should you really use, and when?

Tune in for practical insights, entertaining war stories, and a dose of Java sanity to power your week.

Advanced CDI in Quarkus: Native Images, Reactive DI, and Custom Scopes (May 05, 2025)

https://myfear.substack.com/p/advanced-cdi-quarkus-native-reactive-scopes

Covers advanced CDI topics like custom scopes with Build Compatible Extensions, lifecycle observation with @Startup and @Shutdown, CDI in native images, and reactive programming integration

Secure Your Java Apps: Input Validation with Quarkus Made Easy (May 06, 2025)

https://myfear.substack.com/p/quarkus-input-validation-owasp-java

Focuses on OWASP-compliant input validation using Jakarta Bean Validation (@Pattern, @NotBlank, etc.), server-side validation logic in JAX-RS resources, and displaying errors with Qute templates, including localization

Dynamic CSV Uploads in Java: Building Smart, Flexible Databases with Quarkus (May 07, 2025)

https://myfear.substack.com/p/dynamic-csv-uploads-java-quarkus-postgresql

Details building a flexible system to dynamically ingest any CSV file into PostgreSQL by creating tables on the fly based on header and type inference, using Hibernate Panache and Jackson CSV

What’s Really Going On in Your Quarkus App? A Java Developer’s Guide to Jolokia and Hawtio (May 08, 2025)

https://myfear.substack.com/p/whats-really-going-on-in-your-quarkus

Explains using Jolokia (JMX-HTTP bridge) and Hawtio (web console) for live introspection and monitoring of Quarkus application internals (MBeans, threads, memory), and integrating Micrometer for metrics, with emphasis on production security

From Strings to Semantics: Comparing Text with Java, Quarkus, and Embeddings (May 09, 2025)

https://myfear.substack.com/p/java-quarkus-text-embeddings-similarity

Describes building a service for semantic text similarity using text embeddings generated via LangChain4j and Ollama, comparing them with cosine similarity and Euclidean distance, and visualizing results

Stop Getting FileNotFound in Containers: How Java Developers Can Load Resources Correctly with Quarkus (May 10, 2025)

https://myfear.substack.com/p/classpath-resource-access-quarkus-java-containers

Addresses accessing static resource files in containerized Quarkus apps, recommending the Java ClassLoader (getResourceAsStream) over file paths for reliability across JVM and native modes, and discussing alternatives for dynamic files

Mastering Quarkus Testing: When to Use @QuarkusTest vs. @QuarkusIntegrationTest (May 11, 2025)

https://myfear.substack.com/p/quarkus-testing-quarkustest-vs-quarkusintegrationtest

Compares @QuarkusTest (in-JVM, classloader isolation, fast component testing) and @QuarkusIntegrationTest (out-of-process, black-box, production-like testing for final artifacts), advocating for a combined strategy

Thanks for reading Enterprise Java and Quarkus! Subscribe for free to receive new posts directly in your inbox.

Please remember: This is generated with NotebookLM from Google based on last weeks articles. Still an experiment. Feel free to give me feedback how useful this is for you and if you like it or not!

This week's topics cover various aspects of modern enterprise Java development. The articles discuss practical steps for building and deploying cloud-native Java applications, particularly using Quarkus. Key areas include leveraging frameworks like Quarkus for efficient development, mastering dependency injection with CDI, and configuring applications for performance and minimal resource usage.

We also looked into crucial operational and security considerations. This includes understanding and implementing TLS/SSL for secure communication, generating Software Bill of Materials (SBOMs) for dependency tracking and vulnerability management, and effectively deploying applications to platforms like OpenShift. Runtime management is explored through Galleon layers in JBoss EAP 8.1 Beta for creating trimmed, efficient server distributions and Bootable JARs.

Furthermore, we discussed the evolving landscape for Java developers, outlining essential skills for 2025 and beyond, covering areas like cloud-native development, AI/ML integration, data fluency, platform engineering, and soft skills. A critical discussion point is the impact of Oracle's Java LTS licensing changes and presenting Red Hat OpenJDK as a supported alternative for enterprises seeking stability and predictable costs.

Direct links to CW18 articles for your recap:

* https://myfear.substack.com/p/tls-ssl-java-quarkus-guide

* https://myfear.substack.com/p/future-proof-java-skills-2025

* https://myfear.substack.com/p/quarkus-sbom-cyclonedx-dependency-track-snyk

* https://myfear.substack.com/p/java-lts-strategy-oracle-vs-redhat-cost-support

* https://myfear.substack.com/p/galleon-layers-jboss-eap-8-1-beta-bootable-jar-guide

* https://myfear.substack.com/p/quarkus-dependency-injection-cdi-basics

* https://myfear.substack.com/p/quarkus-rest-api-openshift-postgresql-guide

Please remember: This is generated with NotebookLM from Google based on last weeks articles. Still an experiment. Feel free to give me feedback how useful this is for you and if you like it or not!

In this week's episode, we explore key insights from the latest blog posts shaping the future of enterprise Java development with Quarkus. We start by addressing the top questions junior developers have when adopting Quarkus and what that means for onboarding strategies. We highlight the new Quarkus 3.21.3 maintenance release, focusing on stability, developer productivity, and native image improvements. We dive into why standards matter more than ever today, helping organizations avoid vendor lock-in while ensuring interoperability. Next, we cover how to implement database-backed authentication with Jakarta Persistence to strengthen application security. We also unpack Quarkus’s build-time-first philosophy and how it achieves lightning-fast performance and low memory usage, critical for modern cloud deployments. Finally, we reflect on how Quarkus is reshaping Java developer mindsets compared to traditional frameworks like Spring.Each topic delivers practical takeaways for IT decision-makers looking to optimize developer experience, security, scalability, and cloud-native readiness.

Last weeks episodes as direct links:

This is a weekly recap of the articles published fed into NotebookLM and converted to a podcast episode of my two wonderful hosts discussing the high level implications of the individual pieces. I consider this an experiment. LMK what you think and if this is helpful or at least entertaining.

Last week's articles centered around building various aspects of enterprise Java applications using the Quarkus framework. Here's a brief recap:

* One key topic was setting up robust and reliable email notification systems with Quarkus. This included using the Quarkus Mailer extension, configuring SMTP, creating email templates with Qute, implementing a queuing mechanism using reactive messaging, and integrating with PostgreSQL to manage recipients.

* Another significant area covered was contributing to the open-source Quarkus project. This article detailed the prerequisites, how to find suitable tasks, the different types of contributions (documentation, bug fixes, new extensions, core enhancements), and the standard contribution workflow using Git and GitHub.

* The integration of NoSQL databases with Quarkus using Jakarta NoSQL was also explored. This covered the standardization Jakarta NoSQL brings to the NoSQL ecosystem with its Communication and Mapping APIs, and provided a practical example using MongoDB.

* Furthermore, the articles delved into integrating Artificial Intelligence (AI) into Java applications using Quarkus and LangChain4j. This included choosing Quarkus as a foundation, leveraging LangChain4j for LLM interactions, building AI services, considering system design, using local models for development, and understanding the Model Context Protocol (MCP).

* Implementing audit trails in Quarkus applications using Hibernate Envers was another crucial topic. This involved understanding the importance of audit trails, setting up Hibernate Envers, capturing user identity, understanding the audit table structure, choosing the right audit strategy, querying audit data, and considering performance and compliance.

* The week also covered securely streaming files with Quarkus, addressing different storage options (database, object storage), streaming techniques, handling large files and backpressure, using pre-signed URLs, and various security considerations for file delivery.

* Finally, a more informal article highlighted ten signs that one might be deeply engaged with Quarkus, playfully noting the positive impact the framework can have on developer productivity and even habits.

read the article