Blog
Notes from the team.
What we are learning while building sovereign platforms, written by the engineers doing the work, not a content team.
Latest
gVisor multi-tenant Kubernetes adds a second boundary: Sentry, Gofer, netstack, RuntimeClass setup, workload overhead and the policies you need.
·
Dominik Heilbock
·
Lino Deppe
LLMOps observability links infrastructure, runtime and analytical evidence, so teams can trace latency, cost and quality changes to their cause.
·
Jannis Schoormann
Run AI agent-generated code in isolated Kata Containers microVMs on Amazon EKS, with Agent Sandbox for lifecycle and a NetworkPolicy blocking all egress.
·
Max Körbächer
A follow-up to our article at the AAIF Blog Designing RequestState for Multi-Round Trip Requests. All code in this post is from the companion repository `openbao-mcp-requeststate` and runs against a real OpenBao and the official MCP Python SDK.
·
Dominik Heilbock
Kubernetes offers namespaces or dedicated clusters per tenant. We look at the isolation patterns that sit between those two extremes.