Every Call Passed and Nothing Got Done
When every tool call returns success and the task still is not done, the harness is missing a loop cap and an exit condition. Funnel’s Reef agent hit …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
Agent Substrate: the Field Guide
Agent Substrate is the Kubernetes runtime that stops treating an AI agent as a Deployment. Idle agents are snapshots in object storage: a request restores an …
Read more →kubectl Is Lying to You (Monday's Talk)
Run kubectl get pods on an Agent Substrate cluster under load and you’ll see two worker pods, calm, a few MiB each. Nothing to see here. Meanwhile agents …
Read more →Is Anyone Actually Using A2A? We Checked GitHub
A GitHub code search for the Agent2Agent (A2A) protocol’s own discovery file turns up 634 public repositories, and one person’s GitHub account owns …
Read more →The Refusal Ships as a Factory Default
Every router in my house has a pinhole on the back. Hold a paperclip in it for ten seconds and every setting you made is gone. Factory default. Nobody treats …
Read more →Containing an Agent Backdoor Planted by Pretraining Poisoning
A paper published on arXiv on October 27 did something I hadn’t seen demonstrated end to end before: it pretrained a language model from scratch, poisoned …
Read more →Right Answer, Wrong Procedure
On a test floor, every unit travels with a card. The traveler lists the steps in order, and somebody initials each one as it gets done. If a unit shows up at …
Read more →Pydantic AI's DNS-Rebind Bypass of Its Egress Allowlist
A DNS record that changes between the moment code checks it and the moment code uses it can beat an egress allowlist that resolves a hostname twice. Pydantic AI …
Read more →The kagent Harness: Declarative Agents, Memory and Compaction
The Claude Code and Codex harnesses get the attention because people already know those loops. The harness I’d actually default to is the boring one: …
Read more →Does Agent Substrate's Checkpoint Survive a Held File Lock?
I tried to break Agent Substrate’s actor checkpoint with a resource that supposedly can’t be serialized, an exclusive file lock, and it checkpointed …
Read more →