Blog

Notes from the platform

• 2026-07-02 · Agentic AI Security

  Identity Breaks Down When the Caller Is an Agent, Not a Person

  Why existing IAM models don't hold up for autonomous agents, and how ephemeral identity, delegation integrity, and workload attestation start to answer that.

• 2026-06-25 · Zero Trust

  Why Zero Trust Has to Reach the Pipeline, Not Just the Network

  Zero trust at the network layer is necessary but not sufficient. The software delivery pipeline has the same implicit trust problems, and they are harder to see.

• 2026-06-15 · Infrastructure

  From 48 Hours to 2: What Cluster Automation Actually Taught Me

  The provisioning number gets the attention. The lessons underneath it are about trust boundaries, not tooling.