# Agent Substrate day wrap-up: the 19 posts and the field guide > Agent Substrate day wrap-up: the 19 topic posts from today plus the field guide hub. Isolation, identity, production, scheduling, and what kubectl cannot show. - Canonical URL: https://webofmike.com/agent-substrate-day-wrap-up/ - Author: Mike Moore (https://webofmike.com/about/) - Published: 2026-11-09 - Last modified: 2026-11-08 - Tags: Kubernetes, AI Agents, Platform Engineering - Cite as: Mike Moore, "Agent Substrate Day Wrap-Up", Web of Mike (webofmike.com), 2026-11-09. https://webofmike.com/agent-substrate-day-wrap-up/ Agent Substrate day wrap-up is the map of the 19 topic posts under the field guide, in the order I would actually send someone the links. If you want one URL, take the [Agent Substrate field guide](/agent-substrate-field-guide/). This page is the day's reading order, not a transcript of the room. I spent today writing the pieces I wanted when I stood this runtime up on a laptop: what the actors are, why `kubectl get pods` is the wrong view, and the isolation, identity, and scheduling the runtime still does not decide for you. Eighteen agents on two workers, over a thousand real sessions, reserved capacity about 4.5x lower than always-on pods. Those numbers are mine. Scheduler policy, GPU topology, and enterprise bars are how I would operate, not measurements of a production fleet. The in-person room was [Agent Substrate Day](https://atecon.dev/) in Salt Lake City, next to KubeCon. These posts are not a transcript of that room. They are my answers, grouped morning, midday, and afternoon so you can skim the map and open only the decision you are making. A measured claim in this set is reservation versus always-on pods, plus the workers-list view. A design take is anything about resume queues, GPU topology, or an enterprise bar. I kept those distinct on purpose so a laptop cluster does not get quoted as a production SLO. ### Checklist: send three links, then the rest 1. Hub: [Agent Substrate field guide](/agent-substrate-field-guide/). 2. Cluster already up: [kubectl is lying to you](/kubectl-is-lying-to-you-watch-agent-substrate/). 3. Shared pool: [Scheduling agent sandboxes](/scheduling-agent-sandboxes/). 4. Choosing a runtime: [Agent sandbox vs Agent Substrate](/agent-sandbox-vs-agent-substrate/). 5. Platform bar: [Agent Substrate enterprise](/agent-substrate-enterprise/). ## What should you read first this morning? 1. [What is Agent Substrate](/what-is-agent-substrate/). Snapshot-backed actors, a small worker pool, agent count is not pod count. 2. [Agent sandbox vs Agent Substrate](/agent-sandbox-vs-agent-substrate/). Pod, per-agent sandbox, or multiplexed actors. How I choose. 3. [Running Agent Substrate in production](/running-agent-substrate-in-production/). Bucket, control plane, secrets, sandbox class, idle policy, reset path. 4. [kubectl is lying to you](/kubectl-is-lying-to-you-watch-agent-substrate/). Watch the workers list. I posted a [teaser](/kubectl-is-lying-to-you-talk/) yesterday. ## What isolation and identity questions landed at midday? 5. [Kubernetes network policy for agents](/kubernetes-network-policy-for-agents/). Policy on worker pods cannot tell two actors apart. 6. [Proof of agent identity](/proof-of-agent-identity/). The agent is not you, and it is not the worker's ServiceAccount. 7. [Why Agent Substrate fails](/why-agent-substrate-fails/). Five bets I made against it. I was wrong about one. 8. [Suspend and resume agents](/suspend-and-resume-agents/). The lifecycle, and what I refuse to put in a snapshot. 9. [Agent Substrate dataplane](/agent-substrate-dataplane/). ateapi, atenet, atelet, ateom. What I restart, on purpose. 10. [Sandboxed networking for agents](/sandboxed-networking-for-agents/). MVP isolation, not a mesh checkbox. ## What scale, GPU, and scheduling posts landed in the afternoon? 11. [Agent platform at scale](/agent-platform-at-scale/). Lock identity, pools, and A2A policy while those decisions are still cheap. 12. [Agent action verification](/agent-action-verification/). Do not ask a large model if the last step worked. 13. [Suspend-safe networking](/suspend-safe-networking/). Park mid-call and you cut TCP. I do not. 14. [GPUs for agents on Kubernetes](/gpus-for-agents-on-kubernetes/). GPU memory does not checkpoint. Keep inference outside the actor. 15. [Scheduling sandboxes for RL](/scheduling-sandboxes-for-rl/). Multiplexing pays while the sandbox waits on the model. Benchmark wall time. 16. [Scheduling agent sandboxes](/scheduling-agent-sandboxes/). The runtime packs. It does not pick a winner when the pool is full. 17. [Kubernetes sandbox platform](/kubernetes-sandbox-platform/). The primitives work without an LLM. Most of the clever ideas are still bad ideas. 18. [Agent Substrate environment](/agent-substrate-environment/). Files and processes. Not a WorkerPool CRD in the agent loop. 19. [Agent Substrate enterprise](/agent-substrate-enterprise/). Identity, isolation, scheduling, audit, reset. Density is not a platform. ## If you only read three, which ones? - [The field guide](/agent-substrate-field-guide/) for the index. - [kubectl is lying to you](/kubectl-is-lying-to-you-watch-agent-substrate/) if you already have a cluster. - [Scheduling agent sandboxes](/scheduling-agent-sandboxes/) if two teams will share a pool. Related angles that are not in the 19: [pod per agent](/pod-per-agent/), [how many agents per Kubernetes pod](/how-many-agents-per-kubernetes-pod/), [running agents in production on Kubernetes](/running-agents-in-production-on-kubernetes/), [zero trust architecture for AI agents](/zero-trust-architecture-for-ai-agents/), [agent identity vs service account](/agent-identity-vs-service-account/), [why OAuth is not enough for agents](/why-oauth-is-not-enough-for-agents/), [agent checkpoint to object storage](/agent-checkpoint-to-object-storage/), [who runs next when the agent pool is full](/who-runs-next-when-the-agent-pool-is-full/), [binary verification for agents](/binary-verification-for-agents/). Code from the laptop cluster: [themsquared/kagent-substrate-demo](https://github.com/themsquared/kagent-substrate-demo), [themsquared/substrate-scope](https://github.com/themsquared/substrate-scope).