MCP Tool-Call Guardrails: Gating Agents Before the Tool Runs
agentgateway can now reject or rewrite an MCP tools/call request before the tool runs, and mask the result before the client sees it, from CEL expressions in …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
The 20-Hour Robot: Duty Cycle Decides Robot ROI
Everyone wants to talk about the robot’s brain. I want to talk about its battery. On October 15, Agility Robotics announced that Nyobolt is the battery …
Read more →agentgateway Guardrails How-To
Agents and apps already send prompts through a gateway. Content safety belongs on that hop: inspect the request before it reaches a model, and inspect the …
Read more →Capable Isn't Cheap: Reading Anthropic's Robot Report Like a Test Engineer
Every week there’s a new headline that says robots are coming for our jobs. This week most of them came from one report. On September 30, Anthropic …
Read more →Plaud vs Otter: Which AI Note Taker Is Right for You? (2026)
Heads up: some links here are affiliate links. If you buy through them I may earn a commission, at no extra cost to you. It doesn’t change what I …
Read more →The Path-Validation Bug That Let Copilot Register a Rogue MCP Server
CVE-2026-103572 , disclosed by embracethered.com and patched by Microsoft on 2026-10-13, is a Remote Code Execution bug in Visual Studio and SSMS Copilot, CVSS …
Read more →MCP Audit Tap: See What a Third-Party Server Actually Sends
A Show HN post for a “WhatsApp MCP server running free on Cloudflare” hit 124 points and 69 comments in under 16 hours on October 19, and none of …
Read more →Room by room: what a self-copying AI could do in your house
Last week I asked you to count the connected things in your house . Parks Associates says the average US internet household has about 17 (source ). This week we …
Read more →agentgateway as an Egress Proxy
AI agents need outbound access to models, tools, registries, and APIs. An unrestricted sandbox will use every channel it can find. The durable pattern is a …
Read more →One Fix, Four Hundred Repos
Think back to December 2021. Log4Shell. If you were anywhere near security or platform work, you remember that week. The fix sounded simple: upgrade log4j. Then …
Read more →