Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
Argo CD 3.5 Adds Internal mTLS and Commit Signing — Here's the Bar Your Own GitOps Reconciler Should Clear
A July 2026 unpatched Argo CD RCE proved the unauthenticated internal RPC problem was real. Here's what Argo CD 3.5's mutual TLS and commit-signing fix actually close, and why any git-to-cluster reconciler needs the same two guarantees from day one.
MCP Gives Agents Tools. Agent Skills Gives Them Runbooks.
A folder with a SKILL.md file can hold an entire deploy-troubleshooting runbook and cost an agent almost nothing until it's actually needed. Here's the token math on why that beats stuffing the same runbook into an MCP tool description — and what a deploy-from-chat MCP server should borrow from it.
Anthropic Acquires Bun to Power Claude Code's $1B Run-Rate: What an AI-Lab-Owned, Still-MIT-Licensed JS Runtime Means for a git-push PaaS's Buildpack Neutrality
Anthropic now owns the runtime Claude Code ships as an executable on. Seven months of release history, a $165K AI-driven Zig-to-Rust rewrite, and what a self-hosted PaaS's build layer should actually do about the risk.
The AI Sandbox Market Just Got a Hyperscaler Problem
Five hyperscalers shipped agent-execution sandboxes within seven months. Here's what each one actually does, how it's squeezing E2B, Daytona, and Modal on price, and why the entry itself makes the case for running agent code on the same fleet that already deploys your app.
Agent-Substrate vs. Kubernetes' Agent-Sandbox CRD: What 30x Pod Oversubscription Costs You in Scheduling Complexity
Agent-Substrate claims 30x pod oversubscription over Kubernetes' Agent-Sandbox CRD by sharing a worker pool instead of pinning one pod per agent. Here's exactly what that density costs in scheduling complexity, and when it's worth paying for.
Agent Golden Paths: The 3-Point Audit for a Deploy API AI Agents Can Actually Walk
A concrete 3-point audit for whether your platform's self-service golden path can actually be walked unsupervised by an AI agent — and what happens when you run a typical Render-compatible deploy API through it.
Treat Your AI Agents Like Tenants: RBAC, Quotas, and Autonomous Drift Remediation as the Next Platform Engineering Primitive
A concrete blueprint for giving an AI agent its own Kubernetes namespace, RBAC role, resource quota, and audit trail — instead of just handing it a human's API token.
1Panel Bakes Native AI Agent Support Into a VPS Control Panel: What It Ships, and Where It Stops
1Panel now calls itself the only VPS control panel with native AI agent support. Here's exactly what that ships versus Coolify's and Dokploy's MCP servers, and the specific fleet-lifecycle gap none of them close.
Wasmer Built a Full Node.js Runtime in Two Weeks With Codex — What Edge.js Actually Buys a PaaS Over Docker
Wasmer says Codex helped it build a full Node.js runtime in two weeks instead of a year. Here's what Edge.js's WASIX sandbox actually costs and buys a PaaS running MCP servers and agent-generated code, with real compatibility and cold-start numbers.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags