Confidence-Routed Agents: Cheap First, Frontier on Escalation
Escalating every uncertain agent decision to a frontier model sounds like the safe default. On a 240-case benchmark it was also the worse one: routing by …
Read more →building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Controls that look like controls and are not, and what to put in their place.
Open the hub →The call path between agents and models: identity, spend, and policy in one place.
Open the hub →How agents find tools, which servers exist, and who those tools act for.
Open the hub →Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →Escalating every uncertain agent decision to a frontier model sounds like the safe default. On a 240-case benchmark it was also the worse one: routing by …
Read more →Every production test line I’ve helped lay out ended up in the same argument. One camp wants dedicated stations. A station built for one test, tuned for …
Read more →agentgateway v1.7.0 (GA, 2026-10-27 ) can tell which coding-agent session sent a request without any client-side change: it reads the session header the agent …
Read more →On the test floor there’s one rule about calibration that nobody argues with. When a station has been adjusted, you don’t trust it until it measures …
Read more →On a test floor, every meter has a sticker. It says who calibrated it, against what, and when it’s due again. A meter without one isn’t an …
Read more →Every agent in my house wakes up on a schedule, reads its rulebook, looks around, and goes back to sleep. The rulebook is the same every time. Who lives here, …
Read more →Cloudflare published a postmortem on 2026-10-26 titled “Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with …
Read more →On a test floor, nobody gets attached to a fixture. Fixtures wear out. Pogo pins bend. Somebody drops one. You pull it, bolt in the spare, and the line keeps …
Read more →I wrote about agent containment four days ago: default-deny egress, no ambient credentials, an audit log, one agentgateway config. All of that is a perimeter …
Read more →A CSO Online piece built around an October 2026 Hacker News thread made a direct claim: agents aren’t going rogue , frontier labs are skipping basic …
Read more →