Writing

3 posts · tagged security · oldest Apr 2025

Agent Flywheel1 post · 2026watch demo

2026·10·12Nothing here is specialEvery step is a Job, every brain is a ConfigMap, every score is an MLflow run, and one gateway holds every key. The platform under the agent flywheel, the libraries it is built from — the evaluation harness, Harbor, EvalHub, GEPA — what each one needed wrapped around it, and the sandbox that is built against the one that is only designed.agentskubernetesinfrasecurity14 min

REX1 post · 2026github watch demo

2026·09·14A question cannot change your fileREX makes one safety promise: ASK cannot write, ACT edits a copy, and only Approve touches your file. Three times it broke without a sound — a line gone under "Applied to 0 file(s)", a committed file deleted under a notice saying it was put back, a copy removed while the agent was reading it — and what an allowlist, four SDKs and a repository's own settings file taught me about where a boundary actually is.agentsaisecurity11 min

OpenOperator1 post · 2025github watch demo

2025·04·16Shipping a 6 GB ISO to every pod (and then deleting the storage key)An initContainer that pulls once, one PVC projected into eleven mount points via subPath, and a three-month migration from a storage key to workload identity.kubernetesazuresecurityinfra7 min