Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
Your Buildpack Only Checks bun.lockb. Bun Stopped Writing It in 2026.
Bun 1.2 quietly changed its default lockfile from bun.lockb to bun.lock, and it's already broken Bun detection on Railway, Cloudflare Pages, and Netlify. Here's the detection logic that survives the next lockfile change, and why 'build with Bun, run on Node' is the right default for existing projects.
Zerops Says Its Pricing Is 'Just Hardware.' The Real Bill Runs 2.6x Raw Hetzner
Zerops prices itself as pure hardware, no plans, no seat fees. Here's what the actual 2026 rate card charges for a real three-service app, and why the bill still runs 2.6x the cost of the identical specs on raw Hetzner hardware.
WebMCP Lets a Web Page Register Its Own AI Tools. Does a Deploy Dashboard Need One?
Chrome's new WebMCP API lets a web page register its own AI-callable tools, but a deploy dashboard already has a REST/GraphQL API and an MCP server. Here's the actual capability delta, and why it's not worth building yet.
Volcano's Headlamp Plugin Kills the vcctl Guesswork: A Practical Walkthrough for Gang-Scheduling AI-Agent Batch Jobs on a Cluster API Fleet
A production case study put GPU idle time at 38 percent from partial gang-scheduling failures alone. Here's how Volcano's gang scheduling and queue fairness fix that, what the new Headlamp plugin actually shows instead of vcctl output, and whether it's worth running over hand-rolled priority classes on a Cluster API fleet.
13 Critical CVEs, One Patch: What the vm2 Sandbox-Escape Wave Says About Isolating AI Agents at the Wrong Layer
A May 2026 wave of 13 critical vm2 CVEs shows why JavaScript-level sandboxing can't contain AI-agent code — and why kernel-level isolation like gVisor and Kata Containers is the layer that actually holds.
Vercel's Two Build Incidents in Three Days: What a Shared Build Pipeline Actually Costs You
Vercel's build pipeline broke twice in three days in July 2026 — missing Build Logs, then an elevated build failure rate. Here's what a shared, multi-tenant build system's failure mode actually costs you, and what changes when you own it instead.
vCluster Brought Karpenter to Bare Metal. Here's What Actually Changes for a Cluster-API Fleet
vCluster's Auto Nodes brings Karpenter-style provisioning to bare metal. Here's the concrete mechanics, the Hetzner Cloud-vs-dedicated reality check, and the per-tenant control-plane cost a Cluster-API fleet actually pays for it.
Fake Client vs envtest vs Testcontainers K3s: The Real Cost of Testing a Cluster API Controller
envtest runs a real Kubernetes API server but no controller-manager, so garbage collection never actually fires in your tests. Here's what that gap costs a Cluster API controller, and where Testcontainers' K3s module actually closes it.
Sidero Labs Ships CA Rotation and Cosign Verification for Talos and Omni — What's Automatic, What's Manual, and What Still Breaks
Sidero Labs' Q1 2026 Talos/Omni release adds CA rotation on cluster import and native Cosign image verification. Here's exactly what each one does, which parts are operator-triggered rather than automatic, and a real bug that shipped with the new verification gate.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags