# Web of Mike

> Articles by Mike Moore on the agentic mesh, agent runtimes, AI gateways, Kubernetes, platform engineering, observability, and cloud-native software development.

- Canonical URL: https://webofmike.com/
- Author: Mike Moore (https://webofmike.com/about/)
- Curated index for LLMs: https://webofmike.com/llms.txt
- Full content of every post: https://webofmike.com/llms-full.txt
- Every page is also served as raw markdown at <canonical-url>index.md

## Posts

- [kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default](https://webofmike.com/kagent-audience-bound-agent-tokens/): kagent v0.10.0 GA can bind an agent's exchanged token to one backend using RFC 8707 resource indicators. Two environment variables, both empty by default. (2026-09-08) - markdown: https://webofmike.com/kagent-audience-bound-agent-tokens/index.md
- [agentgateway v1.5.0: Per-Key LLM Budgets That Return 429](https://webofmike.com/agentgateway-per-key-llm-budgets/): agentgateway v1.5.0 caps LLM spend per API key and restricts which models a key may call. A local demo that proves the 429, the price math, and the gotchas. (2026-09-07) - markdown: https://webofmike.com/agentgateway-per-key-llm-budgets/index.md
- [Egress Control for AI Agents: Four Bypasses, One Fix](https://webofmike.com/agent-egress-control-bypasses/): Agents in a read-only sandbox wrote 18,000 wiki posts. Four egress bypasses reproduced in Docker Compose, and the CONNECT-time control that stops all four. (2026-09-06) - markdown: https://webofmike.com/agent-egress-control-bypasses/index.md
- [MCP Agent Identity: One Spec Shipped, Three Still Open](https://webofmike.com/mcp-agent-identity-gap/): The MCP roadmap names four agent identity workstreams. One has shipped, and it authenticates the employee behind the agent rather than the agent itself. (2026-09-05) - markdown: https://webofmike.com/mcp-agent-identity-gap/index.md
- [Your AGENTS.md Is Not a Security Control](https://webofmike.com/agents-md-not-a-security-control/): A prompt-injected agent destroyed every record with an AGENTS.md forbidding it and an approval classifier watching. An MCP allowlist at the gateway stopped it. (2026-09-04) - markdown: https://webofmike.com/agents-md-not-a-security-control/index.md
- [Which Controls Would Have Stopped the July 2026 Agent Intrusion?](https://webofmike.com/rogue-agent-kubernetes-controls/): An autonomous agent went from sandbox escape to Kubernetes cluster-admin in under 13 hours. A stage-by-stage map of which controls would have broken the chain. (2026-09-03) - markdown: https://webofmike.com/rogue-agent-kubernetes-controls/index.md
- [SPIFFE Workload Identity for AI Agents, End to End](https://webofmike.com/spiffe-identity-for-ai-agents/): An agentgateway v1.5.0 demo where the agent, the gateway, and the model upstream all authenticate with SPIFFE SVIDs and no certificate file exists anywhere. (2026-09-02) - markdown: https://webofmike.com/spiffe-identity-for-ai-agents/index.md
- [Your AI Agent Should Not Hold the LLM API Key](https://webofmike.com/secretless-ai-agents/): The LiteLLM PyPI compromise stole exactly where LLM API keys live. A working agentgateway demo: agents that call LLMs holding no provider credential at all. (2026-09-01) - markdown: https://webofmike.com/secretless-ai-agents/index.md
- [Substrate Scope: a Live Visualizer for Agent Substrate](https://webofmike.com/substrate-scope/): Substrate Scope is an open source live visualizer for Agent Substrate: worker bays, restore queues, snapshot storage, telemetry, and per-agent activity. (2026-08-28) - markdown: https://webofmike.com/substrate-scope/index.md
- [Multi-Tenant MCP Federation with agentgateway](https://webofmike.com/multi-tenant-mcp-federation/): Six MCP servers federated into three business domains on agentgateway, with per-customer tool entitlements, quotas, and chargeback. No auth code in the servers. (2026-08-28) - markdown: https://webofmike.com/multi-tenant-mcp-federation/index.md
- [Thousands of AI Agents on Tens of Pods: kagent Agent Substrate](https://webofmike.com/kagent-agent-substrate/): kagent Agent Substrate is built to run thousands of AI agents on tens of pods. I stood it up on kind: snapshot restores, autoscaling, and every gotcha I hit. (2026-08-27) - markdown: https://webofmike.com/kagent-agent-substrate/index.md
- [Revenant: A Gateway-Native, Always-On Agent Runtime](https://webofmike.com/revenant-agent-runtime/): Revenant is an always-on agent runtime in Rust where an AI gateway owns every key, budget, and failover, and a hard liveness rule means no turn goes silent. (2026-08-27) - markdown: https://webofmike.com/revenant-agent-runtime/index.md
- [Governing an LLM-Driven Robot Fleet with agentgateway](https://webofmike.com/llm-robot-fleet-agentgateway/): An LLM-driven robot fleet where every inference, MCP tool call, and agent message flows through agentgateway: safety, failover, and speed, all open source. (2026-08-27) - markdown: https://webofmike.com/llm-robot-fleet-agentgateway/index.md
- [Capping LLM Spend at the AI Gateway: Budgets and Virtual Keys](https://webofmike.com/llm-cost-controls-ai-gateway/): Token counts are not costs. I wired a price catalog, virtual keys, and budgets into agentgateway so LLM spend gets attributed, priced, and capped with a 429. (2026-08-27) - markdown: https://webofmike.com/llm-cost-controls-ai-gateway/index.md
- [Building an LLM Agent Playground: A Deep Dive into AI Orchestration and Evaluation](https://webofmike.com/building-an-llm-agent-playground/): An open-source LLM Agent Playground for experimenting with, evaluating, and comparing different LLM providers through a unified interface. (2025-02-23) - markdown: https://webofmike.com/building-an-llm-agent-playground/index.md
- [The Future of AI and Robotics: A Look at What's Next](https://webofmike.com/the-future-of-ai-and-robotics/): Exploring the rapidly advancing world of AI and robotics, from autonomous vehicles to humanoid robots, and what it means for humanity. (2025-02-15) - markdown: https://webofmike.com/the-future-of-ai-and-robotics/index.md
- [Beyond the Algorithm: Why Industry Veterans are Still Vital in the Age of AI Consulting](https://webofmike.com/beyond-the-algorithm/): The irreplaceable value of industry veterans in enterprise architecture and technology solutions in the age of AI. (2024-10-29) - markdown: https://webofmike.com/beyond-the-algorithm/index.md
- [Unlocking Unlimited Observability: How groundcover's eBPF Powers Full Visibility Without Limits](https://webofmike.com/unlocking-unlimited-observability/): How groundcover leverages eBPF to provide unlimited logs, metrics, and traces for full observability without data caps. (2024-08-02) - markdown: https://webofmike.com/unlocking-unlimited-observability/index.md
- [How to Get Ready for the AI Revolution: Embrace, Learn, and Innovate](https://webofmike.com/how-to-get-ready-for-the-ai-revolution/): Preparing for the AI-driven future through education, experimentation, and strategic partnerships. (2024-07-30) - markdown: https://webofmike.com/how-to-get-ready-for-the-ai-revolution/index.md
- [Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership](https://webofmike.com/revisiting-observability/): A deep dive into the current state of observability, covering instrumentation challenges, cost surprises, and data ownership. (2024-05-02) - markdown: https://webofmike.com/revisiting-observability/index.md
- [Mastering Kubernetes: Key Metrics for Cluster Monitoring](https://webofmike.com/mastering-kubernetes-key-metrics/): A deep dive into the essential metrics for effective Kubernetes cluster monitoring. (2024-04-14) - markdown: https://webofmike.com/mastering-kubernetes-key-metrics/index.md
- [Maximizing DevOps Efficiency: Best Practices, KPIs, and Realtime Feedback](https://webofmike.com/maximizing-devops-efficiency/): How to adopt best practices for DevOps teams using automation, version control, and developer portals for real-time feedback. (2023-03-08) - markdown: https://webofmike.com/maximizing-devops-efficiency/index.md
- [Open Source Solutions: Cost-Saving or Free Like a Puppy?](https://webofmike.com/open-source-cost-saving-or-free-like-a-puppy/): Open-source software may be free, but it can come with significant maintenance and security risks that businesses should consider. (2023-03-06) - markdown: https://webofmike.com/open-source-cost-saving-or-free-like-a-puppy/index.md
- [Maximizing Your Developer Efficiency: Scaffolding for Faster Time to Market](https://webofmike.com/maximizing-developer-efficiency-scaffolding/): How scaffolding tools help developers work more efficiently and deliver software faster. (2023-02-10) - markdown: https://webofmike.com/maximizing-developer-efficiency-scaffolding/index.md
- [Boosting Your Developer Onboarding Efficiency: Why Investing in a Developer Portal is Smarter Than Building Your Own](https://webofmike.com/boosting-developer-onboarding-efficiency/): Why investing in a developer portal solution is smarter than building your own for API documentation and developer onboarding. (2023-02-08) - markdown: https://webofmike.com/boosting-developer-onboarding-efficiency/index.md
- [Maximizing Developer Onboarding for Improved Retention and Growth: A Comprehensive Guide](https://webofmike.com/maximizing-developer-onboarding/): A comprehensive guide to structuring developer onboarding for improved retention and productivity. (2023-02-06) - markdown: https://webofmike.com/maximizing-developer-onboarding/index.md
- [Mastering the Art of Platform Engineering: The Latest Secret to Digital Transformation](https://webofmike.com/platform-engineering/): How platform engineering is the future of technology operations and a key driver of organizational success. (2023-02-02) - markdown: https://webofmike.com/platform-engineering/index.md
- [Maximize your ROI with a Developer Portal: How Improving DevOps, DevX, and SRE Can Drive Visibility, Productivity, and Profitability](https://webofmike.com/developer-portal/): How a well-implemented developer portal can impact DevOps processes, developer experience, and overall efficiency. (2023-01-31) - markdown: https://webofmike.com/developer-portal/index.md
- [Thwarting Innovation with Entrenched Mindsets](https://webofmike.com/innovation-failure/): How entrenched mindsets and resistance to change stifle innovation in organizations. (2023-01-30) - markdown: https://webofmike.com/innovation-failure/index.md
- [DORA Metrics: Understanding the Importance for Developers, SRE, DevOps, and Platform Engineering](https://webofmike.com/dora-metrics/): Understanding DORA metrics and their importance for improving DevOps processes and software delivery. (2023-01-30) - markdown: https://webofmike.com/dora-metrics/index.md
- [Getting Started with FDM 3D Printing](https://webofmike.com/fdm-3d-printing/): A beginner's guide to FDM 3D printing, covering printer selection, filaments, and materials. (2021-07-22) - markdown: https://webofmike.com/fdm-3d-printing/index.md
- [WordPress Optimization: Installing and Configuring WordPress](https://webofmike.com/installing-and-configuring-wordpress/): Part 5 of the WordPress optimization series - installing MySQL and WordPress on a Digital Ocean droplet. (2019-01-04) - markdown: https://webofmike.com/installing-and-configuring-wordpress/index.md
- [WordPress Optimization: Configuring CloudFlare as Your DNS Provider](https://webofmike.com/wordpress-optimization-configuring-cloudflare/): Part 4 of the WordPress optimization series - setting up CloudFlare as your DNS provider. (2019-01-04) - markdown: https://webofmike.com/wordpress-optimization-configuring-cloudflare/index.md
- [Why You Should Use UUIDs in Your APIs](https://webofmike.com/why-you-should-use-uuids-in-your-apis/): Why using UUIDs instead of sequential IDs strengthens API security through obfuscation. (2019-01-04) - markdown: https://webofmike.com/why-you-should-use-uuids-in-your-apis/index.md
- [Using A Cache to Reduce Your API Response Time](https://webofmike.com/using-a-cache-to-reduce-your-api-response-time/): Strategies for implementing caching to improve API performance and developer experience. (2019-01-04) - markdown: https://webofmike.com/using-a-cache-to-reduce-your-api-response-time/index.md
- [Full-Stack Kubernetes Monitoring](https://webofmike.com/kubernetes-monitoring/): A practical guide to achieving full-stack visibility in Kubernetes clusters using Datadog. (2019-01-04) - markdown: https://webofmike.com/kubernetes-monitoring/index.md
- [Enabling Real-time Analytics with FPGAs](https://webofmike.com/fpga-analytics/): How FPGAs can revolutionize real-time analytics by blurring the lines between hardware and software. (2019-01-04) - markdown: https://webofmike.com/fpga-analytics/index.md
- [Datadog Squid Proxy Example for Agent Proxies](https://webofmike.com/datadog-squid-proxy/): Using SQUID proxy to route Datadog Agent data from restricted network environments. (2019-01-04) - markdown: https://webofmike.com/datadog-squid-proxy/index.md
- [Custom Shell Check for Datadog Agents](https://webofmike.com/custom-shell-check-for-datadog-agents/): A custom Datadog check that executes shell commands and publishes results as metrics. (2019-01-04) - markdown: https://webofmike.com/custom-shell-check-for-datadog-agents/index.md
- [Custom File Check for Datadog Agents](https://webofmike.com/custom-file-check-for-datadog-agents/): A custom Datadog check that monitors file existence and captures file age metrics. (2019-01-04) - markdown: https://webofmike.com/custom-file-check-for-datadog-agents/index.md
- [Creation...](https://webofmike.com/creation/): The very first post on Web of Mike. (2019-01-04) - markdown: https://webofmike.com/creation/index.md
- [Best Practices for Securing Your APIs](https://webofmike.com/best-practices-for-securing-your-apis/): A comprehensive look at API security covering encryption, OAuth, OpenID Connect, and more. (2019-01-04) - markdown: https://webofmike.com/best-practices-for-securing-your-apis/index.md
- [API Modeling and Design with Hypermedia and Contextual Information](https://webofmike.com/api-modeling-and-design/): Exploring hypermedia approaches to API design including JSON-LD, HAL, and Collection+JSON. (2019-01-04) - markdown: https://webofmike.com/api-modeling-and-design/index.md
- [A Microservices Primer](https://webofmike.com/microservices-primer/): An introduction to microservices architecture and how it differs from monolithic and SOA approaches. (2019-01-04) - markdown: https://webofmike.com/microservices-primer/index.md
- [Brew Day: Black IPA](https://webofmike.com/brew-day-black-ipa/): A step-by-step brew day walkthrough making a Black IPA from a Northern Brewer Small Batch kit. (2015-02-15) - markdown: https://webofmike.com/brew-day-black-ipa/index.md
- [Beer Brewing Adventures](https://webofmike.com/beer-brewing-adventures/): The beginning of Mike's home brewing journey. (2015-02-11) - markdown: https://webofmike.com/beer-brewing-adventures/index.md
- [WordPress Optimization: Setting Up a Web Server](https://webofmike.com/wordpress-optimization-setting-web-server/): Part 3 of the WordPress optimization series covering nginx, PHP-FPM installation and configuration. (2015-02-03) - markdown: https://webofmike.com/wordpress-optimization-setting-web-server/index.md
- [Kick-Ass WordPress Optimization](https://webofmike.com/kick-ass-wordpress-optimization/): An introductory roadmap for a comprehensive WordPress optimization series covering server setup through caching. (2015-02-03) - markdown: https://webofmike.com/kick-ass-wordpress-optimization/index.md
- [WordPress Optimization: Setting Up A Virtual Server](https://webofmike.com/wordpress-optimization-setting-server/): Part 2 of the WordPress optimization series covering virtual server setup on Digital Ocean. (2015-02-01) - markdown: https://webofmike.com/wordpress-optimization-setting-server/index.md
- [WordPress Optimization: Getting Started](https://webofmike.com/wordpress-optimization-getting-started/): Part 1 of the WordPress optimization series covering essential prerequisites. (2015-02-01) - markdown: https://webofmike.com/wordpress-optimization-getting-started/index.md
- [Redirecting Bad Referers with Varnish](https://webofmike.com/redirecting-bad-referers-with-varnish/): A Varnish Cache VCL configuration for filtering and redirecting unwanted referral traffic. (2015-01-16) - markdown: https://webofmike.com/redirecting-bad-referers-with-varnish/index.md
- [Socket.io Cluster with Nginx as Reverse Proxy](https://webofmike.com/socket-io-cluster-with-nginx/): Using Node.js cluster module with websockets and nginx as a reverse proxy. (2015-01-08) - markdown: https://webofmike.com/socket-io-cluster-with-nginx/index.md
- [Deploying WordPress over Nginx and PHP-FPM](https://webofmike.com/deploying-wordpress-over-nginx-and-php-fpm/): Resources for advanced WordPress deployment using Nginx and PHP-FPM. (2015-01-08) - markdown: https://webofmike.com/deploying-wordpress-over-nginx-and-php-fpm/index.md
- [Tornado Error Handling](https://webofmike.com/tornado-error-handling/): Implementing custom error handling in the Tornado web framework using a reusable base handler class. (2014-02-09) - markdown: https://webofmike.com/tornado-error-handling/index.md
- [Tornado Sessions with Redis](https://webofmike.com/tornado-sessions-with-redis/): Implementing session management in Tornado web framework using Redis as the session store. (2014-02-07) - markdown: https://webofmike.com/tornado-sessions-with-redis/index.md