agentevals v0.10.0: Scores Come Back as OpenTelemetry Events
agentevals v0.10.0 shipped two days ago and removed its own WebSocket ingestion path in favor of plain OpenTelemetry. Send OTLP traces in, run an eval, and the …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
Is Jev Actually Calibrated? The Reliability Curve on 240 Cases
TypeSafe AI’s Jev is mostly calibrated on agent tool-call risk, with one weak spot you need to know about before you route on it. Across 240 hand-labelled …
Read more →agentgateway Token Exchange for AI Agents
An AI agent that calls tools for a user needs that user’s authority, and the usual shortcuts are a pasted personal access token or a shared service …
Read more →MCP Cross App Access Explained: The ID-JAG Exchange on the Wire
MCP’s Enterprise-Managed Authorization lets the corporate IdP decide which employees can use which MCP servers, by making the client trade an IdP-signed …
Read more →Rate-Limiting AI Agent Egress to Already-Allowed APIs
An egress allowlist decides whether an agent can reach a destination. It has no opinion about how often. On October 7, 2026, the Wikimedia Foundation disclosed …
Read more →Agent Platform Gateway Control Plane
A production agent platform needs one gateway path where SPIFFE identity binds the caller and four controls ride the same hop: secretless provider keys, per-key …
Read more →agentgateway v1.6.0: Cost Tracking With No Catalog Config
agentgateway v1.6.0 went GA on October 2. Two features are worth a hands-on look before anything else: a built-in LLM pricing catalog that gives you cost …
Read more →Do AI Agents Need SPIFFE or OAuth?
They answer different questions. SPIFFE proves which process is calling, without a provisioned secret. OAuth scopes what it may do and, when a human is in the …
Read more →Per-Request Minted JWTs for Agent Backends with agentgateway
I built a demo where an AI agent calls a backend API and holds no credential for it. No API key in its environment, no key file on disk, no token. agentgateway …
Read more →Stateless MCP on Kubernetes: No More Sticky Sessions
Three replicas of an MCP server, fronted by agentgateway , with no session affinity configured anywhere. A four-call shopping cart session (create cart, add two …
Read more →