kagent Codex Harness: Run OpenAI Codex on Kubernetes
My Claude Code harness post gets the questions. The follow-up is usually “can I do the same thing with Codex?” Yes. Here’s how, and where it …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
kagent Harnesses Compared: kagent vs Claude Code vs Codex vs BYO
Short version: kagent has four harnesses, and the one you pick decides what runs your agent and how much of kagent it gets to use. My Claude Code harness post …
Read more →The Dayjob Tax Benchmark: AI Agents Pass Under 11%
Surge AI’s Dayjob: Tax benchmark landed on Hacker News on 2026-10-28 and sat at the top of the page for a day (247 points, 154 comments ). The number that …
Read more →Confidence-Routed Agents: Cheap First, Frontier on Escalation
Escalating every uncertain agent decision to a frontier model sounds like the safe default. On a 240-case benchmark it was also the worse one: routing by …
Read more →Dedicated Stations or Fungible Ones: The AI Chip Fight Every Test Floor Already Had
Every production test line I’ve helped lay out ended up in the same argument. One camp wants dedicated stations. A station built for one test, tuned for …
Read more →agentgateway v1.7.0: How Agent Session Detection Works
agentgateway v1.7.0 (GA, 2026-10-27 ) can tell which coding-agent session sent a request without any client-side change: it reads the session header the agent …
Read more →An Agent That Tunes Itself Needs a Golden Unit
On the test floor there’s one rule about calibration that nobody argues with. When a station has been adjusted, you don’t trust it until it measures …
Read more →An LLM's Confidence Score Is a Meter With No Cal Sticker
On a test floor, every meter has a sticker. It says who calibrated it, against what, and when it’s due again. A meter without one isn’t an …
Read more →Your House Agent Pays to Reread Its Rulebook Every Time It Wakes
Every agent in my house wakes up on a schedule, reads its rulebook, looks around, and goes back to sleep. The rulebook is the same every time. Who lives here, …
Read more →Why Cloudflare's GLM-5.3 KV Cache Leaked Across Tenants
Cloudflare published a postmortem on 2026-10-26 titled “Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with …
Read more →