Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
The EU Data Act's Cloud-Switching Mandate Takes Effect: What a 30-Day Portability Deadline and a 2027 Fee Ban Actually Change
The EU Data Act's cloud-switching rules are already in force: a 2-month notice cap, a 30-day transition window, and a full ban on switching fees from January 12, 2027. Here's the exact timeline, what it actually forces vendors to hand over, and what it still doesn't reach.
The EU's Cloud Sovereignty Framework Grades Providers SEAL-0 to SEAL-4: Where Owned Hetzner Hardware Lands That a Hosted PaaS Provider Can't Follow
The EU's new SEAL-0 to SEAL-4 sovereignty scale just rated a Google-powered cloud service 'sovereign' — here's the real methodology behind that number, and where self-hosted, owned Hetzner hardware actually lands on it.
Dokploy's WebSocket Terminal Bug (CVE-2026-24841): One Exec Call, Root on Every Server It Manages
Inside Dokploy's CVSS 9.9 WebSocket terminal bug: the actual vulnerable code, why an argv-array fix only solves half the exploit path, and why the flaw reached every server the control plane manages over SSH, not just the local box.
Docker Kanvas Turns docker-compose.yml Into Kubernetes Manifests — Here's Exactly Where It Stops
Docker's new Kanvas tool converts docker-compose.yml into Kubernetes manifests, Helm charts, and more — but it never builds an image, pushes a registry, or places a workload on a fleet. Here's what that leaves for a git-push PaaS to build itself.
DigitalOcean Is Deprecating Legacy App Platform Plans With No Fixed Date: The Exact Bill Difference, Tier by Tier
DigitalOcean's App Platform legacy plans — any app created before May 7, 2024 — are being deprecated with no fixed date attached. Here's the exact price and egress math across every tier, and what an undated migration means if you're not watching for it.
Depot's Colocated BuildKit Cache: What 2x-55x Faster Builds Actually Require
Depot's 2x-55x faster builds come from one architectural trick — keeping the Docker layer cache permanently colocated with the builder instead of fetching it over the network. Here's how it works, and how to build the same thing on your own Kubernetes fleet.
Cozystack 1.4 Ships Fractional GPU Sharing — But the Real News Is a Cluster API Bet Built Differently Than bex's
Cozystack 1.4 shipped HAMi-powered fractional GPU sharing and a rewritten dashboard, but the real story is architectural: Kamaji-hosted control planes and KubeVirt VMs give every tenant a nested Kubernetes cluster — a fundamentally heavier Cluster API bet than a flat, container-only design like bex's. Here's what each buys and what it costs.
Only 41% of AI Developers Call Themselves Cloud Native — Here's the Concrete Chain of Concepts That's Keeping the Other 59% Out
CNCF and SlashData found only 41% of professional AI developers self-identify as cloud native. Here's the actual prerequisite chain — Pods to CRDs to reconciliation loops — standing between an ML engineer and a running service, and where a git-push contract collapses it.
CNCF's Score Spec Wants to Be the Portable Workload Manifest: Should a Git-Push PaaS Target score.yaml Instead of Inventing Its Own Config Format
Score's score.yaml promises one workload manifest that runs anywhere via pluggable provisioners. Here's the real schema, what a 2026 field review says it still can't express, and why a Cluster-API-native PaaS should treat it as an import path rather than its core config format.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags