Hardware Is AI's Teeth: Robots Are Building the AI Buildout
“If AI is going to eat the world, hardware will be its teeth.” Haomiao Huang, a founding partner at Matter Venture Partners, said that when the firm …
Read more →#Platform Engineering
64 posts
Portkey Alternative: agentgateway, Self-Hosted
agentgateway is an open source gateway you run yourself, and it covers the jobs most teams use Portkey for: virtual keys that hide the provider key, per-key …
Read more →What Is an MCP Gateway? agentgateway Examples
An MCP gateway is a proxy between AI clients and MCP servers, so agents reach many tool servers through one endpoint and every tool list and tool call passes …
Read more →Second-Source Your Models
Every hardware engineer learns the same lesson early, usually the hard way. Don’t design a board around a part only one company makes. It’s called …
Read more →Who Gave the Agent a Badge?
Walk into any office building and you get a badge. It opens the lobby. Maybe your floor. It doesn’t open the server room, the CFO’s office or the …
Read more →LiteLLM 1.107.0: Why Image Signing Didn't Stop the Backdoor
LiteLLM 1.107.0 landed on PyPI and Docker Hub on October 21, 2026, with a credential stealer built into every wheel, and it was cryptographically signed through …
Read more →Find Shadow MCP Servers in Your Environment
Find shadow MCP servers by checking the places they hide: the network and your clusters, where an MCP server answers a server/discover or initialize request; …
Read more →agentgateway Guardrails How-To
Agents and apps already send prompts through a gateway. Content safety belongs on that hop: inspect the request before it reaches a model, and inspect the …
Read more →agentgateway as an Egress Proxy
AI agents need outbound access to models, tools, registries, and APIs. An unrestricted sandbox will use every channel it can find. The durable pattern is a …
Read more →One Fix, Four Hundred Repos
Think back to December 2021. Log4Shell. If you were anywhere near security or platform work, you remember that week. The fix sounded simple: upgrade log4j. Then …
Read more →agentgateway vs Agent Router v1.2: MCP prefixMode Defaults
Agent Router v1.2.0 added prefixMode: Never for MCP tool names on October 7, 2026, a control agentgateway already ships with three values: Conditional, Always, …
Read more →MCP Progressive Tool Discovery: Native vs. Hand-Rolled
The 2026-08-22 MCP roadmap names progressive tool discovery as a priority, in almost these words: a server should offer a small entry point and reveal more of …
Read more →
Your Tests Are Lying to Your Agent
Before I worked in software, I worked on test benches. Electrical engineering, then test and measurement. The first rule on a bench is calibrate the instrument. …
Read more →What Is Shadow MCP? A Plain Definition
Shadow MCP is any MCP server your AI tools can reach that your security or platform team doesn’t know about, didn’t approve, and can’t see. …
Read more →Testing Open-Weight Models as an Agent's Cheap Tier
Disclosure: I work at Solo.io, which created agentgateway and sells Solo Enterprise for agentgateway. The demos I cite are public repositories. Two open-weight …
Read more →What Is an AI Agent Gateway?
An AI agent gateway is a reverse proxy between your agents and everything they call: language models, MCP tools, other agents over A2A, and ordinary HTTP or …
Read more →A Private MCP Registry in 10 Minutes with agentregistry
A private MCP registry is a catalogue of approved MCP servers that your clients discover from instead of the open public one. I built private-mcp-registry to …
Read more →What Is a Cloud-Native Agent Harness? (kagent)
Coding agents grew up on laptops: one person, one machine, and one process that is the UI, the agent loop, the sandbox, the credential store and the session …
Read more →agentgateway Token Exchange for AI Agents
An AI agent that calls tools for a user needs that user’s authority, and the usual shortcuts are a pasted personal access token or a shared service …
Read more →Rate-Limiting AI Agent Egress to Already-Allowed APIs
An egress allowlist decides whether an agent can reach a destination. It has no opinion about how often. On October 7, 2026, the Wikimedia Foundation disclosed …
Read more →Agent Platform Gateway Control Plane
A production agent platform needs one gateway path where SPIFFE identity binds the caller and four controls ride the same hop: secretless provider keys, per-key …
Read more →agentgateway v1.6.0: Cost Tracking With No Catalog Config
agentgateway v1.6.0 went GA on October 2. Two features are worth a hands-on look before anything else: a built-in LLM pricing catalog that gives you cost …
Read more →Do AI Agents Need SPIFFE or OAuth?
They answer different questions. SPIFFE proves which process is calling, without a provisioned secret. OAuth scopes what it may do and, when a human is in the …
Read more →Per-Request Minted JWTs for Agent Backends with agentgateway
I built a demo where an AI agent calls a backend API and holds no credential for it. No API key in its environment, no key file on disk, no token. agentgateway …
Read more →Stateless MCP on Kubernetes: No More Sticky Sessions
Three replicas of an MCP server, fronted by agentgateway , with no session affinity configured anywhere. A four-call shopping cart session (create cart, add two …
Read more →Choose an AI Agent Gateway: agentgateway Guide
Choose by the controls in the request path, not by model-catalog size. Write down what you must enforce on agent to model and agent to tool traffic: workload …
Read more →Building Workload Identity Federation for AI Agents on Kubernetes
The easy way to give an agent pod access to an external API is a long-lived key in a Kubernetes Secret. The harder, better shape is the one I used in SPIFFE for …
Read more →What Is an Agentic Mesh (vs a Service Mesh)?
An agentic mesh is infrastructure that applies identity, policy, and observability to agent traffic (calls to models, tools, and other agents) so those controls …
Read more →agentgateway vs LiteLLM vs Portkey, Compared
Disclosure: I work at Solo.io, which created agentgateway and sells Solo Enterprise for agentgateway. Every product claim below links to that project’s …
Read more →Agent Runtimes Have an Autoscaler, Not a Scheduler
Every capacity knob in an agent runtime today is an efficiency knob. Pack more agents onto fewer pods, snapshot the idle ones, scale the pool to match demand, …
Read more →Regression Tests for kagent Agents with agentevals
An AI agent that stops calling its tools does not throw an error. It answers from the model’s memory, confidently and plausibly, and the output still …
Read more →Serve Markdown to Agents at the Gateway, Not the Origin
Agents parse HTML badly and expensively. The usual fix is to make the site emit markdown: add a per-page index.md, publish an llms.txt, change the build. That …
Read more →Your Artifact Registry Is a Two-Way Channel for Agents
Egress control for AI agents usually gets framed as a blocklist problem. Keep the agent off the hosts it should not reach, and you have contained it. This …
Read more →A WAF That Reads the Prompt: OWASP CRS for LLM and MCP
A conventional web application firewall reads a URL, some headers, and maybe a form body. For agent traffic that is the wrong layer. The interesting content is …
Read more →I Benchmarked Jev on Agent Tool-Call Risk. Calibration Held.
TypeSafe AI launched Jev on 2026-09-15 with the usual launch-day multipliers — 193.6x faster, 444.6x cheaper than frontier LLMs — plus “zero …
Read more →agentgateway CEL Gotchas: Fail-Open + 403 Fix
I was writing a CEL authorization policy for an LLM route in Solo Enterprise for agentgateway : restrict which models a caller may reach, and refuse callers …
Read more →kagent v1.0: Claude Code Harness on Kubernetes
Yes, kagent can run Claude Code on Kubernetes: since v1.0.0-alpha1, PR #2602 adds a native Claude harness that runs the pinned Claude Code CLI over A2A with …
Read more →Agent Identity on Kubernetes: The Complete Series
An AI agent that calls a model, a tool, or another agent has to prove who it is. Almost every production failure I have written up this month traces back to …
Read more →Securing AI Agents in Production: The Complete Series
Almost everything in this series started the same way: a control that everybody agrees is the right control, applied to an agent, quietly not doing the thing …
Read more →Shadow MCP Servers: Track, Find and Stop Them Across Teams
Shadow MCP servers are hard to track across teams because most run as local child processes of an IDE or agent over stdio, with no network presence, and their …
Read more →Conway's Law Is Coming for Your MCP Servers
I have some version of this conversation just about every week. A platform team is rolling out MCP across the company, and the plan looks the same every time: …
Read more →Your Agent's LLM Key Survives Every Kubernetes Secret Control
I gave an agent pod an LLM API key the normal way, as a Secret projected into its environment. Then I turned on every Kubernetes control that sounds like it …
Read more →kagent Audience-Bound Tokens (RFC 8707)
kagent v0.10.0 went GA on September 4 . Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works …
Read more →Cap LLM Spend per API Key: agentgateway 1.5
agentgateway v1.5.0 shipped on 2026-08-27 with two controls that attach to the API key rather than the route: a rolling spend budget that blocks with an HTTP …
Read more →Why Proxy-Variable Agent Sandboxes Fail, and the CONNECT-Time Fix
On September 4, 2026, researchers published ~18,000 posts that autonomous agents left on a 25-year-old German wiki over six weeks, using it as a message board …
Read more →MCP Agent Identity: What Shipped, What to Use
The Model Context Protocol roadmap published on August 22 names agent identity and enterprise-ready security as a priority workstream, with four specific …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →Which Controls Would Have Stopped the July 2026 Agent Intrusion?
An autonomous agent escaped its evaluation sandbox on July 9, 2026, and about twelve and a half hours of wall-clock work later it held cluster-admin on multiple …
Read more →SPIFFE for AI Agents: End-to-End Identity Demo
SPIFFE gives each AI agent a short-lived, attested workload identity (an SVID) instead of a stored secret, issued at runtime by SPIRE, rotated automatically, …
Read more →Your AI Agent Should Not Hold the LLM API Key
I built a demo where an agent calls an LLM and has no LLM credential anywhere in its process. No API key in the environment, no key file on disk, nothing in …
Read more →Multi-Tenant MCP Servers: Per-Customer Tools
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →Substrate Scope: a Live Visualizer for Agent Substrate
I open-sourced Substrate Scope, a live visualizer for Agent Substrate , the Kubernetes-native runtime that runs AI agents as snapshot-backed actors in gVisor …
Read more →Cap LLM Spend per Team with Virtual Keys
Cap LLM spend at the AI gateway: give each team or agent a virtual key, price every request against a model catalog, and refuse the request with HTTP 429 once …
Read more →kagent Agent Substrate: Thousands of Agents
Agent Substrate is a Kubernetes-native runtime that breaks the pod-per-agent model. It is one of the runtimes that sit under an agentic mesh . Instead of one …
Read more →LLM Robot Fleet Governance with agentgateway
I built a simulated warehouse robot fleet where LLMs do the planning and every piece of traffic that crosses the network runs through one open source gateway. …
Read more →Revenant: A Gateway-Native, Always-On Agent Runtime
Always-on personal agents keep dying the same three deaths: leaked keys, runaway spend, and silence. The first two get the headlines. The third one is the one …
Read more →Beyond the Algorithm: Why Industry Veterans are Still Vital in the Age of AI Consulting
In an era where artificial intelligence consulting dominates tech headlines, a thoughtful perspective from ActualHumans reminds us of an often-overlooked truth: …
Read more →Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership
Originally posted on DZone Hey internet humans! I’ve recently re-entered the world of observability and monitoring after a short detour in the Internal …
Read more →Mastering Kubernetes: Key Metrics for Cluster Monitoring
Kubernetes administration is like navigating through a perpetually expanding puzzle, where distinguishing essential components from duplicate information …
Read more →Maximizing DevOps Efficiency: Best Practices, KPIs, and Realtime Feedback
Inefficient DevOps practices can lead to reduced productivity, delayed releases, and increased costs. A Developer Portal can help teams understand best …
Read more →Maximizing Your Developer Efficiency: Scaffolding for Faster Time to Market
As software development continues to evolve, developers are faced with the challenge of delivering high-quality applications at an ever-increasing pace. The …
Read more →Developer Onboarding Process: Best Practices
A good developer onboarding process decides what a new hire should be able to do at the end, then works backwards to the first day. In practice that means four …
Read more →Mastering the Art of Platform Engineering: The Latest Secret to Digital Transformation
As technology continues to evolve and disrupt traditional business models, organizations are constantly seeking ways to streamline and optimize their …
Read more →Maximize your ROI with a Developer Portal: How Improving DevOps, DevX, and SRE Can Drive Visibility, Productivity, and Profitability
Implementing and maintaining a developer portal involves complexity, but a fully-featured and well-implemented developer portal can have a significant impact on …
Read more →