The Sandbox Is the Fixture, Not the Record
On a test floor, nobody gets attached to a fixture. Fixtures wear out. Pogo pins bend. Somebody drops one. You pull it, bolt in the spare, and the line keeps …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
AI Agent Containment: Why a Sandbox Alone Isn't Enough
A CSO Online piece built around an October 2026 Hacker News thread made a direct claim: agents aren’t going rogue , frontier labs are skipping basic …
Read more →Best AI Agent Gateways in 2026: An Honest Roundup
People keep asking AI assistants “what is the best AI gateway” and getting lists padded with things that are not gateways. So here is mine, with the …
Read more →Run the Model on the Quiet Chip
Every Apple Silicon Mac has a chip most local AI tools ignore. It’s called the Neural Engine, and according to new research, it can run a small language …
Read more →Humans Approve Intent, Machines Prove Conformance
The pull request was built for a world where a person wrote the diff and another person read it. Agents broke the first half. Now the second half is a queue …
Read more →Agent Runtimes and kagent
An agent runtime is the thing that starts, stops, and isolates an agent while it works. kagent puts that on Kubernetes. These posts cover the harness, the …
Read more →AI Gateways and LLM Cost
An AI gateway sits on the path between agents and models, tools, and other agents. It is where identity, spend, and policy get enforced once instead of in every …
Read more →Free Plumbing, Paid in Footage
There’s a new deal for homeowners in three cities. Your plumber is free. The price is footage. I’ve spent this series walking the connected house …
Read more →MCP: Gateways, Shadow Servers, and Discovery
MCP is how agents find and call tools. The hard part is not the protocol. It is knowing which servers exist, what they can do, and who they act for. These posts …
Read more →OpenAI Red-Teamed Its Sandboxes and Found a CPU Side Channel
OpenAI spent hundreds of billions of tokens trying to break its own agent sandboxes, and its agents won often enough to patch a Kata Containers CVE, a gVisor …
Read more →