The Runbaze platform is opening to early teamsJoin the waitlist →
Platform
Solutions
Company
Who we are
About Careers Contact
Follow along
LinkedIn ↗ Substack ↗
Newsroom
Book a demo →

Proof of origin, proof of process.

JVJochem VerheulSeptember 1, 2026 · Case study

Open Food Chain builds product passports for the food industry: scan a code on a bar of chocolate or a bottle of olive oil and see where it came from, batch by batch, with the evidence behind every claim. Evidence, not a claim. And that evidence chain did not start as a product. It started as an idea, with no architecture, no security review, and no steady way to run the work beyond a handful of people talking.

This case is about the distance between those two states, and how it was closed: first a foundation, then an audit, then agentic development on the Runbaze platform. One idea, three engagements, one live product, with a record their biggest clients can inspect.

Proof, made scannable.

Their platform turns supplier certificates, batch records, and origin data into one passport. A shopper can scan it. So can a buyer. So can a regulator. And the categories where this matters most are the ones where origin decides the sale: cacao, olive oil, fish, tea, juice. Their users are food brands whose buyers include some of the biggest names in the industry.

None of this is trivial engineering. A passport platform sits at the intersection of messy inputs and unforgiving outputs. Evidence arrives from many suppliers in as many formats: certificates, audit reports, origin declarations, geolocation data. It has to be verified, structured, and bound to the right product at the right batch. The output end is consumer-scale: a QR code on a supermarket shelf, resolving on the GS1 Digital Link standard for whichever batch is in the shopper's hand, with analytics behind every scan and enterprise clients who want it connected to their own systems. The roadmap that serves all of that is never short.

The regulatory clock

Two dates turned that roadmap urgent. From 27 September 2026, the EU's Empowering Consumers Directive bans generic environmental claims: "natural", "eco", "climate neutral" are no longer allowed on a label without recognised proof behind them. And from 30 December 2026, the EU Deforestation Regulation requires large companies placing cocoa, coffee, soy and other listed commodities on the European market to prove, with geolocation data down to the plot of land, that their supply chains are deforestation-free.

For Open Food Chain's clients, product evidence is turning from marketing into law. For Open Food Chain, that meant every feature on the roadmap was wanted at once, and there was no room left for a slow start.

An idea, not yet a system.

Impact first is a rational bet for a young company. Chase the market, get something in front of customers, worry about the plumbing later. Fast iteration and fast demos, that is exactly what this approach is built for.

Then the product grows and the bill arrives. Technical debt compounds, scaling gets expensive, gaps in security surface, and nobody can point to one source of truth. What used to be speed becomes drag. And it stops being a product problem the moment it becomes a company problem.

None of that is a talent story. The concept behind the Product Passport was strong from day one, and the team understood food supply chains, and the buyers behind them, better than most engineers ever will. What they did not have yet was a system. The people who understood the product best were not always the people who could carry it safely from idea to production. Structure is the part you can install, and that is where the work with Runbaze began.

Status · before Runbaze
A validated idea. Fast demos. No foundation built yet.

From idea to a system that holds.

Two states, in order: what the idea looked like on its own, and what it looked like once a foundation, an audit, and Pulse sat underneath it.

THE IDEA, ON ITS OWN CONCEPT NO FOUNDATION NO AUDIT UNSTRUCTURED THE IDEA, WORKING FOUNDATION AUDIT PULSE LIVE PRODUCT ONE IDEA, THREE ENGAGEMENTS, ONE LIVE PRODUCT
The idea did not change · what supports it did

First, a system to work inside.

Most companies do not lack talent. They lack a system. Work happens and features get built, until something breaks and nobody can say why, or who owns the fix. That is a company without a project management framework: busy, capable, and quietly at risk. So the first engagement touched no features at all, on purpose.

Without structure, work happens in bursts. Something urgent lands, everything else stops, and priorities get decided in the moment. A real cadence, with real checkpoints and a shared queue, replaces that with rhythm. Progress becomes visible before the deadline, not after it is missed.

Working cadence
A visible plan and a fixed rhythm for decisions, not a scramble every time something new lands.
CI/CD pipeline
Deployment stops being a manual, nervous process. Tests run automatically, the same way every time.
Codebase structure
Standardised structure and version control make the product legible to the next engineer, and the next audit.
Docs and runbooks
Architecture overviews and onboarding guides turn what one person knows into something the whole team can reach.
Shared workspace
One workspace for the plan and the queue. One place to look, one current version of the truth.
Team continuity
The riskiest architecture in a company is not technical, it is organisational. Continuity removes that single point of failure.
Six pillars · one foundation · a product built to last

A company without this framework can still get by for a while. But every release carries more risk than it needs to, and every delay traces back to the same root cause: nothing was written down, nothing was systemised. A foundation like this does not slow a company down. It makes speed safe to sustain.

Then, a system is put under pressure.

With the foundation in place, the next step was to test it: a full technical audit of how the platform was built, hosted, and run. What followed was not one big fix. It was a sequence of deliberate moves that quietly changed how reliable, safe, and scalable the product is.

Infrastructureundecided → managed hosting
Codebasetangled → organised
Data accessshared exposure → isolated
Data integrityunverifiable → enforced
Release processad hoc → staged, reversible
Databasefragile → resilient, backed up
Six areas · one audit · same product, sturdier underneath

The most consequential finding was data access: gaps in how information was separated between the companies using the platform, gaps that could have let one organisation see or affect another's data. That was fixed with urgency. Access rules were rebuilt so each company's data stays inside its own boundary.

A handful of records had also been marked verified without the evidence behind them. A small gap, but a meaningful one for a product whose value rests on traceability. Each case was resolved on its own, then closed for good with checks that make the gap impossible to repeat.

What both engagements were really about
Build the guardrails first, so speed and safety do not have to trade off against each other. One engagement laid the foundation. The other put it under pressure. Neither changed what Open Food Chain looks like to the people who use it. What changed is everything underneath: quieter, sturdier, and built to hold up as the product keeps growing.

Then, the work moved onto Pulse (Human+AI dev).

Once the foundation held, the idea could become software without losing the discipline underneath it. The team had adopted AI-assisted development early, and the speed was real. They also saw its ceiling: a chat window helps one developer, once, and leaves nothing behind that a reviewer, let alone an enterprise client, can inspect. So they took development beyond the chat interface, onto Pulse (Human+AI dev), the layer their own development now runs on, deployed inside their environment and working against the systems they already run.

Their development now runs the way their supply chains do. Work goes in as a specified brief, not a prompt in a tab. Agents execute against it, chained by autopilot, inside safety rules and cost budgets. A person validates the decisions that matter, at gates where a wrong call would cost something. And every run, every approval, and every change lands on the record, from intent to deploy. Four stages, always in this order: specify, execute, validate, record. Fast, governed, and on the record.

Connected
Runs on their systems, through the interfaces they already have.
Sovereign
The record stays where they can own it, not where it happens to sit.
Portable
The model underneath is theirs to choose, and theirs to change.

What this buys is parallelism. A specified brief can be worked by an agent while the team holds judgment: more of the roadmap moves at once than they could ever staff, and nothing ships without a gate a person owned. When a large client, or a regulator behind that client, asks how a feature came to be, the answer is not a shrug toward an AI tool. It is a record: this brief, these runs, this review, this deploy.

Proof on the product. Proof on the work.

THEIR PRODUCT ORIGIN EVIDENCE PASSPORT SCANNED PROOF THEIR DEVELOPMENT, NOW INTENT BRIEF AGENTS+ GATES SHIPPED WITHA RECORD THE SAME SHAPE · A CLAIM IS WORTH WHAT ITS EVIDENCE PROVES
One company, two chains of custody

Product Passport, live.

What came out the other side is Product Passport, a live system, not a draft. Against the original idea, it is more flexible: built to work across categories, from cacao to olive oil to fish, not one product type. It is more interactive: a shopper, a buyer, and a regulator each get their own view of the same evidence. And it carries more complete information and more complete data than the idea ever could, because the foundation underneath was built to hold that much.

A record on the product. A record of the work.

There is a symmetry worth naming here. A company that sells proof of origin should be able to prove its own process too: what was reviewed, what was decided, why. That is what the audit and the foundation gave Open Food Chain, before Pulse ever touched a brief. And it is what the record now extends to every piece of software they ship.

This is what agentic development looks like when it is built for the enterprise rather than the demo: agents on the volume, people at the gates, and a record that answers. If your roadmap is bigger than your team, the sequence starts small and proves itself first. One call, and we will tell you what is missing in your foundation, and whether Runbaze is the right partner for it.

Book a demo →← All posts