For developers
Long-form engineering notes on agents, models and the software around them.
63 notes
A developer's guide to OpenShell 0.1.8: architecture, Landlock and seccomp isolation, policy YAML, live network rules, credential placeholders, inference, a daily workfl…
AlloyDB AI ideas rebuilt for an open-source database: filtered semantic SQL, hybrid search, step-by-step RAG, access control in the query, deterministic agents and RAG f…
TenthMatrix rewrite of the Big Prometheus problem space: Thanos, Cortex/Mimir, VictoriaMetrics, M3/Chronosphere — plus MoSCoW across OTEL, Grafana, SaaS APM and more
Technical deep dive: envelope hierarchy, dual-control workflows, MFA, leases, active/active multi-region HA, feature tours, and presentation chapters
Technical deep dive: full feature matrix, head-to-heads, three release workflow designs, failure modes prevented, and worked ADRs with a decision checklist
Operator vs Helm, Kubernetes executor values, concurrency, DinD, autoscaling levers, observability and a FinOps checklist
The engineering write-up: threat model, the api_gw pipeline, every setting we used, the CORS incident we fixed in three minutes, and a checklist for your own API
Technical brief: Orbit Deployer Board, NEW Lanes matrix, Descent stage, ops polish since v1.0.1, and how the promotion protocol stays unchanged
The complete guide: triggers, setup on the web and CLI, prompt design, sub-routine and co-routine patterns, security, limits and comparisons
Technical brief: why agentic systems raise the stakes for secret lifecycle, cosmetic tenant filters vs cryptographic refusal, envelope keys, leases, and video chapters
Technical brief: SEO Analyst modes, real tenthmatrix.com run (score 44), findings with fix prompts, Improve/Publish paths, and Jobshout supervised agents
Technical brief: AES-256-GCM envelope hierarchy, cryptographic tenant isolation, engines, identity/MFA, active/active regions, Kubernetes deploy, and video chapters
Technical brief: prebuilt OpenResty Dockerfile, Buildx/GHA cache, Ansible extract, delivery pipeline DEPLOY_MODE, and an operator+agent loop for finishing pipeline work
Claude Code vs Claude Cowork vs ChatGPT/OpenAI Agents: team matrix, GPT-5.6/GPT-6 class APIs, MCP OAuth, and approval gates
LangChain/LangGraph/LangSmith, Apache Airflow 3.x, MCP gates, Ring Promoter, and OTel cost control for enterprise agent workflows
Stages, signatures, binding precedence, and the roadmap beyond MVP
Least-privilege healthcare agents: separate sensitive data, fixed security around flexible AI, action audits without PHI sprawl, and citizen-health governance
Technical brief: request-path WAF pipeline, eight first-class stages, signature governance, layered edge controls, and safe rollout practice
Technical guide: shop Helm/CI mapping, Orbit semantics, version-verified health for the AI agent, secrets per ring, promote API, and a production checklist
Technical deep dive: promotion protocol, version-verified health, deployers, gates, production password, auto-promote, and the CI REST API
Technical brief: promotion gates, per-ring auto_promote, health/version verification, acc→prod human gate, rollback, and AI-team policy
Technical brief: OTEL span schemas, collectors, FinOps PromQL, agent budgets, scoring, and LLM platforms for production agents
Technical brief: OS-style KV paging, near-zero-waste serving, agent debug loops, workstation token generation, and embedding-gated latent attention
Technical brief: cooperative scheduling, spawn_blocking vs Rayon vs dedicated threads, and TenthMatrix polyglot guidance for modern application estates
Technical brief: ring promotion control plane, version-verified health, kubectl / GitHub Actions / k8sjob deployers, and AI-powered deployment workflows
Technical brief: OpenResty hot-path gateway, CDN cache, WAF, POPs/DNS, MCP management, and the Agents Gateway / MCP Gateway roadmap
Technical brief: three-mode incident loop, install (source/Helm/Docker/iOS), AutoPilot safety rails, MCP, runbooks, and production checklist
TenthMatrix deep dive: architecture, Ollama tags/MLX, Meta benchmark matrix vs Gemma4-31B & Qwen3.6-27B, evaluation methodology, and production checklist
Enterprise reference: MCP OAuth 2.1 + EMA, VPN integration, Vault dynamic secrets, auto-rotation, lease revoke, and vendor setup matrix
Formal DL definition, layer stack, ML ⊃ DL ⊃ gen AI, task taxonomy with metrics, failure modes, and a deploy decision flow for humans and AI agents
TenthMatrix deep dive: Kimi K3 specs and license caveats, serving reality, MCP 2026-07-28, expanded open-model radar, hybrid routers, and production checklist
Developer deep dive: specs, Bedrock vs Claude Platform, model IDs, Invoke/Converse/Mantle code, caching, geo routing, and production checklist
Production-grade playbook: brainstorming, workmate discussion, prototyping, diagrams, proposals, ADRs, MR/PR, GitOps, Review Bots, and TenthMatrix multi-agent crews
Production-grade playbook: brainstorming to GitOps, ADR and PR templates, Review Bot setup, FDE enablement, and why Claude Architect Certification is worth pursuing
Technical in-depth: Bedrock + AgentCore + SageMaker + Amazon Q architecture, step-by-step Teams first-agent setup, Entra ID, tooling, FDE training, and time estimates
Architecture map for Kubeflow Pipelines, Trainer, KServe, and Kueue with Argo CD GitOps: Git layout, sync waves, promotion gates, canary serving, GPU FinOps, and rollout…
A deep-dive on model specs, cost/tokens economics, effort and thinking differences, and a production routing blueprint across Haiku, Sonnet, Opus, Fable 5, and gated Myt…
Mythos-class launch history, benchmarks, community reactions and guardrail backlash, YouTube review guide, task matrix, effort levels, token economics, prompting pattern…
Tokens, embeddings, transformers, training and inference — explained for managers and engineers — plus production-ready Kubernetes YAML to deploy your own LLM with Ollam…
FileMyTax: six APIs from bank PDF upload to HMRC MTD Self Assessment filing — architecture, OAuth, AI benefits, limitations, and why human review still gates submission
Eight runtimes (njs, Lua, Python, Go, Rust, Bun, Java, Kotlin), seven HTTP tests, reproducible Docker harness: decision matrix, ARB evidence, workflow-examples repo, and…
From Postgres invoices + expenses DB to HMRC Box 1 to 9: prompts, the deterministic Python engine, the OAuth2 MTD submission, and the edge cases (Brexit, NI protocol, re…
Why an open-source AI-native hybrid database outperforms proprietary SaaS memory services for RAG, semantic search, SQL analytics, and production AI workloads
A copy/paste runbook for support and SRE teams: preflight, node-by-node swap-rebalance, XDCR strategy, rollback triggers, and sign-off checks
API-first Rust DNS, propagation gates, Route 53 and k3s patterns—why observability beats BIND-era blind spots
Twelve headline capabilities, sample metrics, Helm/k3s operator path, Route 53 delegation pattern
Rust registry stack, zero-trust OIDC, SCIM, Prometheus metrics, and Kubernetes-native Helm deployment
Open-source upgrades, XDCR validation, Kubernetes operator integration, and local AI with Ollama
A practical blueprint using Llama, Mistral, and LangChain
From notebooks to robust services
A practical framework for agent evaluation
Service Health Monitor - Real-time status tracking and synthetic monitoring benefits
How autonomous AI agents are delivering 10x performance improvements across organizations
Modernizing government services through DevOps and cloud adoption
How AI is transforming education through adaptive learning systems
Real-time monitoring and optimization for transportation systems
Ensuring reliability in critical energy infrastructure
Managing complex 5G networks with modern DevOps practices
How AI is revolutionizing online retail and customer experience
Real-time monitoring and analytics for industrial IoT systems
Building ultra-reliable systems for the financial industry
How healthcare organizations are adopting DevOps for critical systems
How AI is transforming software engineering across industries