Agent Identity on Kubernetes: The Complete Series
An AI agent that calls a model, a tool, or another agent has to prove who it is. Almost every production failure I have written up this month traces back to …
Read more →#Platform Engineering
27 posts
Finding the MCP Servers Your Platform Team Doesn't Know About
An MCP server is a small HTTP service. Anyone on your team can start one in an afternoon, and the useful ones get built precisely because they reach something …
Read more →Securing AI Agents in Production: The Complete Series
Almost everything in this series started the same way: a control that everybody agrees is the right control, applied to an agent, quietly not doing the thing …
Read more →Conway's Law Is Coming for Your MCP Servers
I have some version of this conversation just about every week. A platform team is rolling out MCP across the company, and the plan looks the same every time: …
Read more →Your Agent's LLM Key Survives Every Kubernetes Secret Control
I gave an agent pod an LLM API key the normal way, as a Secret projected into its environment. Then I turned on every Kubernetes control that sounds like it …
Read more →kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default
kagent v0.10.0 went GA on September 4. Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works at …
Read more →agentgateway v1.5.0: Per-Key LLM Budgets That Return 429
agentgateway v1.5.0 shipped on 2026-08-27 with two controls that attach to the API key rather than the route: a rolling spend budget that blocks with an HTTP …
Read more →Egress Control for AI Agents: Four Bypasses, One Fix
On September 4, 2026, researchers published ~18,000 posts that autonomous agents left on a 25-year-old German wiki over six weeks, using it as a message board …
Read more →MCP Agent Identity: One Spec Shipped, Three Still Open
The Model Context Protocol roadmap published on August 22 names agent identity and enterprise-ready security as a priority workstream, with four specific …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →Which Controls Would Have Stopped the July 2026 Agent Intrusion?
An autonomous agent escaped its evaluation sandbox on July 9, 2026, and about twelve and a half hours of wall-clock work later it held cluster-admin on multiple …
Read more →SPIFFE Workload Identity for AI Agents, End to End
I built a demo where an AI agent calls a model and nothing in the path holds a certificate file. Not the agent, not the gateway, not the model upstream. Every …
Read more →Your AI Agent Should Not Hold the LLM API Key
I built a demo where an agent calls an LLM and has no LLM credential anywhere in its process. No API key in the environment, no key file on disk, nothing in …
Read more →Multi-Tenant MCP Federation with agentgateway
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →Substrate Scope: a Live Visualizer for Agent Substrate
I open-sourced Substrate Scope, a live visualizer for Agent Substrate, the Kubernetes-native runtime that runs AI agents as snapshot-backed actors in gVisor …
Read more →Capping LLM Spend at the AI Gateway: Budgets and Virtual Keys
Every agent platform demo eventually meets the same question from the person who signs off on it: who is spending what, and what stops a runaway agent from …
Read more →Governing an LLM-Driven Robot Fleet with agentgateway
I built a simulated warehouse robot fleet where LLMs do the planning and every piece of traffic that crosses the network runs through one open source gateway. …
Read more →Revenant: A Gateway-Native, Always-On Agent Runtime
Always-on personal agents keep dying the same three deaths: leaked keys, runaway spend, and silence. The first two get the headlines. The third one is the one …
Read more →Thousands of AI Agents on Tens of Pods: kagent Agent Substrate
Agent Substrate is a Kubernetes-native runtime that breaks the pod-per-agent model. Instead of one always-on pod per AI agent, idle agents are checkpointed to …
Read more →Beyond the Algorithm: Why Industry Veterans are Still Vital in the Age of AI Consulting
In an era where artificial intelligence consulting dominates tech headlines, a thoughtful perspective from ActualHumans reminds us of an often-overlooked truth: …
Read more →Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership
Originally posted on DZone Hey internet humans! I’ve recently re-entered the world of observability and monitoring after a short detour in the Internal …
Read more →Mastering Kubernetes: Key Metrics for Cluster Monitoring
Kubernetes administration is like navigating through a perpetually expanding puzzle, where distinguishing essential components from duplicate information …
Read more →Maximizing DevOps Efficiency: Best Practices, KPIs, and Realtime Feedback
Inefficient DevOps practices can lead to reduced productivity, delayed releases, and increased costs. A Developer Portal can help teams understand best …
Read more →Maximizing Your Developer Efficiency: Scaffolding for Faster Time to Market
As software development continues to evolve, developers are faced with the challenge of delivering high-quality applications at an ever-increasing pace. The …
Read more →Maximizing Developer Onboarding for Improved Retention and Growth: A Comprehensive Guide
The onboarding experience sets the tone for new developers and shapes their initial perception of the organization and role. A well-structured program should …
Read more →Mastering the Art of Platform Engineering: The Latest Secret to Digital Transformation
As technology continues to evolve and disrupt traditional business models, organizations are constantly seeking ways to streamline and optimize their …
Read more →Maximize your ROI with a Developer Portal: How Improving DevOps, DevX, and SRE Can Drive Visibility, Productivity, and Profitability
Implementing and maintaining a developer portal involves complexity, but a fully-featured and well-implemented developer portal can have a significant impact on …
Read more →