Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
Ingress-NGINX Is Dead. Gateway API v1.5 Is What You Migrate To — and It Finally Covers the Gaps
Ingress NGINX has received no patches since March 2026. Gateway API v1.5's stable TLSRoute, ListenerSet, and CORS filter close the gaps that kept teams on NGINX annotations — here is the annotation-by-annotation payoff map, the mechanical migration path, and which implementation to pick for owned hardware.
Humans Missed 1 in 3 Threats Approving AI Agent Commands: What 409,000 Decisions Say About Human-in-the-Loop Deploy Guardrails
Across 409,000 approve-or-deny decisions, human reviewers missed a third of malicious AI agent commands — and the credential-stealing ones slipped through three times as often as the obviously destructive ones. The numbers argue for sandboxes, scoped credentials, and policy engines ahead of the approve button.
Hetzner Deleted the Datacenter Field: Why Your Prometheus Labels Went Quietly Empty (and the 30-Second Check)
Hetzner removed the datacenter field from its Cloud API on July 1, 2026, and unpatched Prometheus and vmagent scrapers answered with empty location labels — green targets, hollow metadata. Here is the 30-second check, the old-to-new label mapping, and a nine-item audit checklist for self-hosted Hetzner fleets.
Heroku's Dead, Three Bills Remain: Railway vs Render vs Fly.io vs a Flat-Rate Hetzner Box
Techsy's July 2026 comparison priced the same app on Railway, Render, and Fly.io. We add the missing fourth column — flat-rate Hetzner machines — and show where each platform's billing shape hides the cost that owning the box eliminates.
Heroku Dyno to Hetzner CX in 2026: Real Bill Before and After With Egress Math
The same Node.js and Postgres workload costs $128 a month on Heroku Standard dynos versus about $10 on a Hetzner CX box. A line-by-line 2026 recompute with egress math from 100 GB to 20 TB, plus the honest case for staying on Heroku.
Render Never Ran Your Heroku Buildpacks — Here's What Rebuilding That Compatibility Costs With Paketo vs Nixpacks
Render never executed your Heroku buildpacks — it absorbed them behind a generated Dockerfile. Here is what rebuilding that compatibility on machines you own actually costs, with Paketo and Nixpacks priced head-to-head.
Headlamp's Plugin Sprint Gave Kubeflow, Volcano, and Knative a GUI: Is It Ready to Be Your Fleet's Operator Console?
Headlamp shipped GUI plugins for Cluster API, Volcano, Knative, and Kubeflow in summer 2026. A plugin-by-plugin scorecard — versions, capabilities, honest gaps — and what it means for a self-hosted fleet running AI-agent workloads.
Gateway API v1.6: One Ingress Stack for HTTP, TCP, and UDP — No Second Load Balancer
Gateway API v1.6 graduates TCPRoute and UDPRoute to stable v1, so one Gateway can serve HTTP apps, TCP services, and QUIC/UDP endpoints. A concrete one-Gateway design with YAML, the TLS terminate-vs-passthrough table, L4 port and tenancy rules, and when to keep a second load balancer anyway.
Flox's $25M Bet That Reproducible Environments Are Infrastructure: What It Means for the Git-Push Build Contract
Flox raised $25M to sell Nix-powered reproducible environments as enterprise infrastructure. What environment-as-artifact changes for git-push PaaS builds — bit-for-bit failure repro, per-repo toolchain pins — and where it just moves builder maintenance onto tenants.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags