AgentBox Puts a Bare Hetzner VM on the Same Feature Table as E2B and Daytona
AgentBox, a 247-star MIT CLI, already lists a bare Hetzner box next to E2B and Daytona on its provider table. A teardown of its checkpoint and credential-isolation mechanisms — and what a Cluster-API fleet should borrow versus build on kubernetes-sigs/agent-sandbox instead.
Beam's Beta9 Is the Only Self-Hostable E2B Alternative Left Standing
E2B and Daytona's sandbox pricing landed on the exact same number in 2026. Then Daytona announced it's going closed-source. A concrete look at what's left of the self-hostable AI-agent sandbox category, and why Beam's open-source Beta9 engine is the one still standing.
CNCF's Score Spec Wants to Be the Portable Workload Manifest: Should a Git-Push PaaS Target score.yaml Instead of Inventing Its Own Config Format
Score's score.yaml promises one workload manifest that runs anywhere via pluggable provisioners. Here's the real schema, what a 2026 field review says it still can't express, and why a Cluster-API-native PaaS should treat it as an import path rather than its core config format.
Only 41% of AI Developers Call Themselves Cloud Native — Here's the Concrete Chain of Concepts That's Keeping the Other 59% Out
CNCF and SlashData found only 41% of professional AI developers self-identify as cloud native. Here's the actual prerequisite chain — Pods to CRDs to reconciliation loops — standing between an ML engineer and a running service, and where a git-push contract collapses it.
Cozystack 1.4 Ships Fractional GPU Sharing — But the Real News Is a Cluster API Bet Built Differently Than bex's
Cozystack 1.4 shipped HAMi-powered fractional GPU sharing and a rewritten dashboard, but the real story is architectural: Kamaji-hosted control planes and KubeVirt VMs give every tenant a nested Kubernetes cluster — a fundamentally heavier Cluster API bet than a flat, container-only design like bex's. Here's what each buys and what it costs.
Depot's Colocated BuildKit Cache: What 2x-55x Faster Builds Actually Require
Depot's 2x-55x faster builds come from one architectural trick — keeping the Docker layer cache permanently colocated with the builder instead of fetching it over the network. Here's how it works, and how to build the same thing on your own Kubernetes fleet.
Docker Kanvas Turns docker-compose.yml Into Kubernetes Manifests — Here's Exactly Where It Stops
Docker's new Kanvas tool converts docker-compose.yml into Kubernetes manifests, Helm charts, and more — but it never builds an image, pushes a registry, or places a workload on a fleet. Here's what that leaves for a git-push PaaS to build itself.
GuardFall: Why 10 of 11 Open-Source AI Coding Agents Can't Tell What Bash Will Actually Run
Adversa AI's GuardFall research found 10 of 11 open-source AI coding agents check a shell command's raw text for danger, then hand that text to bash, which rewrites it before running. Here are the five bypass classes, per-agent results, and what it means for building agent-callable deploy tools.
Hetzner Killed the datacenter Field: Is Your CAPH Fleet's CCM Still Reading It?
Hetzner quietly deprecated the datacenter field on Servers and Primary IPs, and any hcloud-cloud-controller-manager older than v1.30.1 panics once it disappears. Here's the exact check, the exact failure mode, and the upgrade path for a Cluster-API-provider-Hetzner fleet.