Run Your Own Cloudflare Workers: What OpenWorkers and Vorker Actually Buy You Over a Container-Based PaaS
OpenWorkers and Vorker let you run Cloudflare Workers' V8-isolate model on your own hardware. Here's the real cold-start, memory, and filesystem tradeoff against a container-based PaaS, with numbers.
Agent-Substrate vs. Kubernetes' Agent-Sandbox CRD: What 30x Pod Oversubscription Costs You in Scheduling Complexity
Agent-Substrate claims 30x pod oversubscription over Kubernetes' Agent-Sandbox CRD by sharing a worker pool instead of pinning one pod per agent. Here's exactly what that density costs in scheduling complexity, and when it's worth paying for.
Anthropic Acquires Bun to Power Claude Code's $1B Run-Rate: What an AI-Lab-Owned, Still-MIT-Licensed JS Runtime Means for a git-push PaaS's Buildpack Neutrality
Anthropic now owns the runtime Claude Code ships as an executable on. Seven months of release history, a $165K AI-driven Zig-to-Rust rewrite, and what a self-hosted PaaS's build layer should actually do about the risk.
MCP Gives Agents Tools. Agent Skills Gives Them Runbooks.
A folder with a SKILL.md file can hold an entire deploy-troubleshooting runbook and cost an agent almost nothing until it's actually needed. Here's the token math on why that beats stuffing the same runbook into an MCP tool description — and what a deploy-from-chat MCP server should borrow from it.
Building a Bex Golden Path in Backstage: A Working Software Template, Not a Wiki Page
A hands-on walkthrough of building a real Backstage Software Template — template.yaml, a custom scaffolder action, and the generated manifest — that scaffolds a service straight onto a self-hosted PaaS fleet, no wiki page required.
Buildpack Rebasing: Patching a Base-Image CVE Across Every Running Container in Seconds
A base-image CVE patched at the platform layer takes one command and seconds. The same fix on a Dockerfile-first platform means hundreds of tenants each rebuilding, pushing, and redeploying on their own schedule — here's the actual cost gap, with real numbers.
Buildpacks RFC 0131: What Build Observability Actually Requires Beyond a Streaming Log
RFC 0131 replaces build scrollback with queryable OpenTelemetry spans. Here's exactly what it specifies, where implementation actually stands, and what a Cluster API-managed kpack pipeline would need to expose the same data before the spec ships.
CircleCI Built a Second CI Pipeline Just for AI Agents — A Git-Push PaaS Already Has One
CircleCI built a whole second CI system — a microVM fleet, a CLI, three separate agent hook integrations — just to get test feedback back to an AI agent in under 60 seconds. A platform that already rebuilds on every git push was one exposed entrypoint away from the same thing.
Cloudflare's Containers Now Talk by Hostname — Only If You Hand-Wire Every Route
Cloudflare's Containers GA pitches hostname-based routing as a networking upgrade. Reading the actual outboundByHost mechanism shows it's a proxy table you write one route at a time — nothing like what a ClusterIP Service already gives a Cluster-API PaaS for free.