» Tag
devops
16 postsThe Hidden Risk of Giving LLM Agents Terminal Access
Giving autonomous AI agents shell access can wreck your filesystem. Open-source rewind-sdk uses OverlayFS to enable millisecond-fast checkpoints and rollbacks.
ai-agentsllmdevopslinuxContaining Financial Blast Radius from Bedrock and Marketplace Cloud Spend
A compromised AWS credential can turn into a major financial incident within hours via Bedrock and Marketplace. A DevOps governance model to limit blast radius before detection catches up.
awscloud-securitydevopsfinopsHow to Build Incident AI That Engineers Actually Trust
An incident-detection AI lost engineer trust by reasoning before context. Adding deploy tracking and a context graph raised hypothesis accuracy from 35% to 70%.
aiincident-responseobservabilitysreFender: a Docker socket proxy that removes Docker Hub lock-in
Fender sits between the Docker CLI and daemon, transparently rewriting image references to your chosen registries—no Dockerfile or CI script changes required.
dockerdevopsci-cdcontainersHow GitHub Uses eBPF to Block Circular Dependencies in Deployments
GitHub explains how it uses eBPF to detect and block circular dependencies caused by hosting its own source code, using cGroup-based network filtering and a DNS proxy.
ebpfgithublinux-kerneldevopsSeverity, Not Flat Pass-Rate, Should Gate Agent Evals
severity_gate.py is an offline, stdlib-only CI tool that gates agent eval runs by failure severity instead of a flat pass-rate, returning SHIP, REVIEW, or BLOCK.
ai-agentsevalci-cdpythonMaestro: A CLI That Scaffolds and Reconciles Go Microservices
Maestro scaffolds Go microservice workspaces using project.toml as the source of truth, then reconciles generated files via refresh. Supports Docker, gRPC, HTTP and worker services.
gomicroservicesclidevopsArcadeDB Adds OpenTelemetry Tracing and Kubernetes Health Probes
ArcadeDB expands cloud observability with four opt-in pillars: deeper metrics, OpenTelemetry tracing, structured JSON logging and Kubernetes health probes.
arcadedbopentelemetrykubernetesobservabilityChasing True Zero-Downtime Redis Sentinel Failover on Kubernetes
An engineer's attempt to achieve near zero-downtime Redis Sentinel failover on EKS: custom preStop hooks, ioredis buffering risks, and the debate over HA at scale.
rediskubernetesnode.jshigh-availabilityAPI Fixture Pattern for Email Regression Testing
API tests often ignore email content. This piece covers a lightweight pattern using disposable inboxes and compact fixtures to catch email regressions.
api-testingemailregression-testingqa