kubectl Is Lying to You (Monday's Talk)
Run kubectl get pods on an Agent Substrate cluster under load and you’ll see two worker pods, calm, a few MiB each. Nothing to see here. Meanwhile agents …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
The Refusal Ships as a Factory Default
Every router in my house has a pinhole on the back. Hold a paperclip in it for ten seconds and every setting you made is gone. Factory default. Nobody treats …
Read more →Containing an Agent Backdoor Planted by Pretraining Poisoning
A paper published on arXiv on October 27 did something I hadn’t seen demonstrated end to end before: it pretrained a language model from scratch, poisoned …
Read more →Right Answer, Wrong Procedure
On a test floor, every unit travels with a card. The traveler lists the steps in order, and somebody initials each one as it gets done. If a unit shows up at …
Read more →Pydantic AI's DNS-Rebind Bypass of Its Egress Allowlist
A DNS record that changes between the moment code checks it and the moment code uses it can beat an egress allowlist that resolves a hostname twice. Pydantic AI …
Read more →The kagent Harness: Declarative Agents, Memory and Compaction
The Claude Code and Codex harnesses get the attention because people already know those loops. The harness I’d actually default to is the boring one: …
Read more →Does Agent Substrate's Checkpoint Survive a Held File Lock?
I tried to break Agent Substrate’s actor checkpoint with a resource that supposedly can’t be serialized, an exclusive file lock, and it checkpointed …
Read more →kagent BYO Harness: Running Factory Droid as an A2A Agent
The Codex post covered a runtime kagent ships for you. byo is the opposite: kagent runs your image and treats whatever’s inside as opaque. To see what …
Read more →kagent Codex Harness: Run OpenAI Codex on Kubernetes
My Claude Code harness post gets the questions. The follow-up is usually “can I do the same thing with Codex?” Yes. Here’s how, and where it …
Read more →kagent Harnesses Compared: kagent vs Claude Code vs Codex vs BYO
Short version: kagent has four harnesses, and the one you pick decides what runs your agent and how much of kagent it gets to use. My Claude Code harness post …
Read more →