Big Prometheus at Scale: Pros, Cons, and a MoSCoW Map of Observability Tools
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
Articles
Technical articles
Long-form engineering articles on agents, models and the software around them.
61 articles
WSL Vault Technical Deep Dive: Zero-Trust Secrets, Dual Control, MFA & Multi-Region HA
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Ring Promoter vs Argo CD, Kargo, Spinnaker and CI: Release Workflow Design and Architecture Decision Records
Technical deep dive: full feature matrix, head-to-heads, three release workflow designs, failure modes prevented, and worked ADRs with a decision checklist
GitLab Runners on Kubernetes: hyperscale cost optimisation with the Kubernetes executor
Operator vs Helm, Kubernetes executor values, concurrency, DinD, autoscaling levers, observability and a FinOps checklist
How We Protected the Payments Secure FinTech App with WSLProxy Edge, an Open-Source API Gateway
The engineering write-up: threat model, the api_gw pipeline, every setting we used, the CORS incident we fixed in three minutes, and a checklist for your own API
Ring Promoter v1.0.2 — Rings, Orbit and Lanes Side by Side
Technical brief: Orbit Deployer Board, NEW Lanes matrix, Descent stage, ops polish since v1.0.1, and how the promotion protocol stays unchanged
Claude Code Routines: Scheduled Cloud Agents, Sub-Routines and Co-Routines
The complete guide: triggers, setup on the web and CLI, prompt design, sub-routine and co-routine patterns, security, limits and comparisons
WSLVault: Why AI Agents Need Cryptographic Secrets Isolation
Technical brief: why agentic systems raise the stakes for secret lifecycle, cosmetic tenant filters vs cryptographic refusal, envelope keys, leases, and video chapters
Jobshout SEO Analyst AI Agent — Analyse Any Website & Fix SEO Issues Automatically
Technical brief: SEO Analyst modes, real tenthmatrix.com run (score 44), findings with fix prompts, Improve/Publish paths, and Jobshout supervised agents
WSLVault: Steal the Server. Not the Secrets.
Technical brief: AES-256-GCM envelope hierarchy, cryptographic tenant isolation, engines, identity/MFA, active/active regions, Kubernetes deploy, and video chapters
TenthMatrix WSL Proxy — Docker Image Optimisation, Build Cache, Full Deploy Workflow, and Shipping It with AI Assistance
Technical brief: prebuilt OpenResty Dockerfile, Buildx/GHA cache, Ansible extract, delivery pipeline DEPLOY_MODE, and an operator+agent loop for finishing pipeline work
Claude Code, Claude Cowork & ChatGPT for Business Teams
Claude Code vs Claude Cowork vs ChatGPT/OpenAI Agents: team matrix, GPT-5.6/GPT-6 class APIs, MCP OAuth, and approval gates
Enterprise Agentic Frameworks: LangChain, LangGraph & Airflow 3
LangChain/LangGraph/LangSmith, Apache Airflow 3.x, MCP gates, Ring Promoter, and OTel cost control for enterprise agent workflows
Inside TenthMatrix WSL Proxy WAF Engine v2: Stages, Signatures, and Binding Precedence
Stages, signatures, binding precedence, and the roadmap beyond MVP
How to Deploy Secure AI Agents in Healthcare
Least-privilege healthcare agents: separate sensitive data, fixed security around flexible AI, action audits without PHI sprawl, and citizen-health governance
Explainable Edge WAF on OpenResty: Inside TenthMatrix WSL Proxy
Technical brief: request-path WAF pipeline, eight first-class stages, signature governance, layered edge controls, and safe rollout practice
Workstation AI Shop on Ring Promoter: Orbit, Version-Verified Health and the Path from INT to PROD
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist
Health-Gated Promotions from int to prod: Inside Ring Promoter
Technical deep dive: promotion protocol, version-verified health, deployers, gates, production password, auto-promote, and the CI REST API
Ring Promoter — QA Gates Before Production
Technical brief: promotion gates, per-ring auto_promote, health/version verification, acc→prod human gate, rollback, and AI-team policy
Uncovering LLM Bottlenecks: Observability, OTEL & Cost Control
Technical brief: OTEL span schemas, collectors, FinOps PromQL, agent budgets, scoring, and LLM platforms for production agents
Turbocharging LLMs
Technical brief: OS-style KV paging, near-zero-waste serving, agent debug loops, workstation token generation, and embedding-gated latent attention
Rust Async Blocking, Rayon & Modern Applications
Technical brief: cooperative scheduling, spawn_blocking vs Rayon vs dedicated threads, and TenthMatrix polyglot guidance for modern application estates
Ring Promoter: Modern CI/CD You Cannot Miss for AI-Powered Deployments
Technical brief: ring promotion control plane, version-verified health, kubectl / GitHub Actions / k8sjob deployers, and AI-powered deployment workflows
TenthMatrix WSL Proxy: API Gateway, CDN & Agent Edge
Technical brief: OpenResty hot-path gateway, CDN cache, WAF, POPs/DNS, MCP management, and the Agents Gateway / MCP Gateway roadmap
KubePilot: CoPilot, Pilot & AutoPilot for Faster Kubernetes Incidents
Technical brief: three-mode incident loop, install (source/Helm/Docker/iOS), AutoPilot safety rails, MCP, runbooks, and production checklist
Muse Glimmer on Ollama: Always-On Local Agents on One GPU
TenthMatrix deep dive: architecture, Ollama tags/MLX, Meta benchmark matrix vs Gemma4-31B & Qwen3.6-27B, evaluation methodology, and production checklist
Agentic AI Security: MCP OAuth, VPN & HashiCorp Vault Leases
Enterprise reference: MCP OAuth 2.1 + EMA, VPN integration, Vault dynamic secrets, auto-rotation, lease revoke, and vendor setup matrix
Deep Learning Systems: Technical Brief for Engineers & Agents
Formal DL definition, layer stack, ML ⊃ DL ⊃ gen AI, task taxonomy with metrics, failure modes, and a deploy decision flow for humans and AI agents
Kimi K3 & Open Weights: Frontier Agents Without Locked-In APIs
TenthMatrix deep dive: Kimi K3 specs and license caveats, serving reality, MCP 2026-07-28, expanded open-model radar, hybrid routers, and production checklist
Claude Opus 5 on AWS: TenthMatrix Guide for Builders & Business
Developer deep dive: specs, Bedrock vs Claude Platform, model IDs, Invoke/Converse/Mantle code, caching, geo routing, and production checklist
Wise Developer Workflow + Multi-Agent Development Teams
Production-grade playbook: brainstorming, workmate discussion, prototyping, diagrams, proposals, ADRs, MR/PR, GitOps, Review Bots, and TenthMatrix multi-agent crews
How a Wise Developer Works on a New Project
Production-grade playbook: brainstorming to GitOps, ADR and PR templates, Review Bot setup, FDE enablement, and why Claude Architect Certification is worth pursuing
Amazon Bedrock, AgentCore, SageMaker & Q: Agents in Microsoft Teams
Technical in-depth: Bedrock + AgentCore + SageMaker + Amazon Q architecture, step-by-step Teams first-agent setup, Entra ID, tooling, FDE training, and time estimates
Kubeflow + Argo CD: GitOps MLOps on Kubernetes
Architecture map for Kubeflow Pipelines, Trainer, KServe, and Kueue with Argo CD GitOps: Git layout, sync waves, promotion gates, canary serving, GPU FinOps, and rollout…
Claude Models Compared: Haiku vs Sonnet vs Opus vs Fable 5 (Mythos 5)
A deep-dive on model specs, cost/tokens economics, effort and thinking differences, and a production routing blueprint across Haiku, Sonnet, Opus, Fable 5, and gated Myt…
Claude Fable 5: The Complete Guide to Anthropic's Mythos-Class Model
Mythos-class launch history, benchmarks, community reactions and guardrail backlash, YouTube review guide, task matrix, effort levels, token economics, prompting pattern…
Large Language Models Explained: How LLMs Work and How to Run Your Own on Kubernetes
Tokens, embeddings, transformers, training and inference — explained for managers and engineers — plus production-ready Kubernetes YAML to deploy your own LLM with Ollam…
Can an AI System Process and File a Self Assessment Tax Return to HMRC Automatically?
FileMyTax: six APIs from bank PDF upload to HMRC MTD Self Assessment filing — architecture, OAuth, AI benefits, limitations, and why human review still gates submission
Polyglot Benchmarks: Choosing the Right Tool for the Right Job
Eight runtimes (njs, Lua, Python, Go, Rust, Bun, Java, Kotlin), seven HTTP tests, reproducible Docker harness: decision matrix, ARB evidence, workflow-examples repo, and…
Building a VAT Return System with Claude Code from Your Invoices and Expenses Database
From Postgres invoices + expenses DB to HMRC Box 1 to 9: prompts, the deterministic Python engine, the OAuth2 MTD submission, and the edge cases (Brexit, NI protocol, re…
NebulaDB vs Agent Memory Platforms: A Comprehensive Comparison
Why an open-source AI-native hybrid database outperforms proprietary SaaS memory services for RAG, semantic search, SQL analytics, and production AI workloads
Couchbase Server Rolling Upgrade Under CAO (Paced + Pause Gate)
A copy/paste runbook for support and SRE teams: preflight, node-by-node swap-rebalance, XDCR strategy, rollback triggers, and sign-off checks
NebulaDNS: Authoritative DNS for the AI Era (Launch Overview)
API-first Rust DNS, propagation gates, Route 53 and k3s patterns—why observability beats BIND-era blind spots
NebulaDNS: Full Features, Metrics, and Enterprise Integrations
Twelve headline capabilities, sample metrics, Helm/k3s operator path, Route 53 delegation pattern
NebulaCR: Enterprise OCI Registry With Observability and Compliance
Rust registry stack, zero-trust OIDC, SCIM, Prometheus metrics, and Kubernetes-native Helm deployment
NebulaCB: Enterprise Couchbase Mission Control That Saves the Day
Open-source upgrades, XDCR validation, Kubernetes operator integration, and local AI with Ollama
Building Systematic AI Agents with Open-Source LLMs
A practical blueprint using Llama, Mistral, and LangChain
Productionizing Agent Workflows: LangChain, AutoGen, and Llama
From notebooks to robust services
Evaluating AI Agents: Metrics, Traces, and Safety
A practical framework for agent evaluation
Systems Monitoring: The Essential Guide to Service Health & Uptime
Service Health Monitor - Real-time status tracking and synthetic monitoring benefits
The Rise of AI Agents: Transforming Business Operations in 2025
How autonomous AI agents are delivering 10x performance improvements across organizations
DevOps in Government: Digital Transformation Initiatives
Modernizing government services through DevOps and cloud adoption
AI in Education Technology: Personalized Learning Platforms
How AI is transforming education through adaptive learning systems
Observability in Transportation: Fleet Management Analytics
Real-time monitoring and optimization for transportation systems
SRE in Energy Sector: Smart Grid Reliability
Ensuring reliability in critical energy infrastructure
DevOps in Telecommunications: 5G Network Management
Managing complex 5G networks with modern DevOps practices
AI-Powered E-commerce: Personalization at Scale
How AI is revolutionizing online retail and customer experience
Observability in Manufacturing: Smart Factory Monitoring
Real-time monitoring and analytics for industrial IoT systems
SRE Practices in Financial Services: Banking on Reliability
Building ultra-reliable systems for the financial industry
DevOps Transformation in Healthcare: Ensuring Patient Safety
How healthcare organizations are adopting DevOps for critical systems
AI Revolution in Enterprise Software Development
How AI is transforming software engineering across industries