Tag: platform engineering
A Simple Website Summary Just Exposed the Limits of AI Coding Guardrails
Tom Smith | | agentic AI security, AI agent security, AI coding assistants, AI guardrails, AI security, Anthropic, Auto Mode, Claude Code, Claude Opus 5, devops security, indirect prompt injection, Johann Rehberger, network egress, platform engineering, prompt injection, Python module shadowing, RCE, remote code execution, sandboxing, struct.pyClaude Code’s Auto Mode was bypassed in an attack chain that turned a routine webpage summary into remote code execution, highlighting the limits of AI agent guardrails ...
GitHub Tightens Copilot’s Billing and Governance Rules Ahead of a Busy Fall
Tom Smith | | AI cost management, AI Governance, Balanced review, chat data retention, Copilot billing, Copilot Business, Copilot Chat, Copilot cloud agent, Copilot code review, Copilot Enterprise, developer tools, GitHub AI Credits, GitHub Copilot, GitHub Mobile, Lite review, platform engineering, token-based billing, usage based billingGitHub Copilot is tightening enterprise controls with upfront seat billing, longer chat retention and a Balanced code review default ...
The Missing Runtime for Long-Running AI Agents
Anuj Kapoor | | agent governance, agent orchestration, agent runtime, AI agents, AI observability, AI resiliency, Azure AI Foundry, Azure Durable Functions, devops, distributed systems, durable AI agents, durable workflows, Enterprise AI, human-in-the-loop, long-running AI agents, multi-agent systems, platform engineering, stateful AI, workflow orchestrationEnterprise AI agents need more than stronger models. They need durable execution environments that can coordinate multi-step workflows, survive failures, pause for human review and resume reliably after disconnects or delays. AI ...
AI Can Generate Your Infrastructure. Can Your CI/CD Pipeline Trust It?
Oreoluwa Omoike | | AI code vulnerabilities, AI coding assistants, AI-generated code, AI-generated infrastructure, Checkov, CI/CD security, Conftest, devsecops, IaC security, infrastructure as code, infrastructure security, Kubernetes security, OPA, platform engineering, policy as code, provenance tracking, secret scanning, secure CI/CD, Terraform security, tfsec, Trivy, TruffleHogAI-generated infrastructure code is exposing a growing security gap, pushing platform teams to add stronger automated gates, provenance tracking and human review before Terraform, Kubernetes and CI/CD changes reach production ...
Your AI Coding Budget Is Becoming a Variable Cloud Bill
Carla Castillo | | agentic coding, AI coding assistants, AI coding costs, AI cost management, AI credits, AI developer tools, AI Governance, cloud economics, cost per developer, developer productivity, devops, engineering spend, FinOps for AI, GitHub Copilot, model mix, platform engineering, premium models, SaaS budgeting, token billing, usage based billingAI coding assistants are becoming a variable, usage-based engineering cost, forcing platform and DevOps teams to apply FinOps practices to models, credits, utilization and multi-vendor spend ...
Scalable Jenkins Management: Empowering Enterprises With Centralized Control for 150+ Instances
Thrivikram Eskala | | ansible, ArgoCD, AWS, azure, CI/CD Automation, developer platform, devops automation, ELK stack, gitops, grafana, Helm, Jenkins, Jenkins administration, Jenkins backups, Jenkins control plane, Jenkins fleet, Jenkins management, Jenkins observability, Jenkins rollback, Jenkins upgrades, kubernetes, multi-cloud CI/CD, platform engineering, Prometheus, self-service platformA centralized Jenkins control plane can reduce fleet sprawl, automate upgrades and backups, improve observability, and give application teams safe self-service across large multi-cloud CI/CD estates ...
What the Microservices Era Can Teach Us About AI
Mark Fussell | | agent identity, agent observability, agent runtime, agentic AI, agentic durable execution, AI agents, AI architecture, AI Governance, AI infrastructure, AI security, autonomous agents, cloud-native AI, distributed systems, durable execution, LLM observability, microservices, Open Standards, platform engineering, vendor lock-in, workflow orchestrationAI agents are not just microservices with LLMs attached. Their long-running, non-deterministic workflows demand durable execution, per-step identity, governance and observability ...
GitHub Copilot’s Latest Update Bets on Model Choice, Not Model Loyalty
Tom Smith | | Agent Plugins 1.0, AI agents, AI coding tools, Claude model switching, Copilot CLI, Copilot Memory, Copilot updates, developer tools, devops, GitHub Copilot, GitHub Copilot models, Kimi K3, MAI-Code-1.1-Flash, Ollama, platform engineering, VS Code 1.133GitHub’s latest Copilot updates add Kimi K3, MAI-Code-1.1-Flash, Agent Plugins 1.0, model switching, CLI improvements, and local Ollama support ...
So Agentic Systems Are Messing Up Your SLO Framework
Saqib Jan | | agent monitoring, agentic AI reliability, Agentic Systems, AI agent SLOs, AI infrastructure, AI observability, behavioral correctness, behavioral drift, error budgets, inference reliability, nondeterministic AI, platform engineering, Probabilistic Systems, probabilistic tracing, semantic similarityTraditional SLOs cannot show whether AI agents are behaving correctly. Platform teams need layered metrics for infrastructure, inference and behavioral reliability ...
DevOps Is Drowning in Updates—and Engineering Is Paying the Price
Alex Vakulov | | cloud operations, devops, devsecops, information overload, platform engineering, site reliability engineeringDevOps used to be a manageable rhythm: several core tools, a handful of respected blogs, and a few incident write-ups that made everyone slightly uncomfortable in a useful way. Now it feels ...
GitHub and PyPI Bet On Time to Slow Down Software Supply Chain Attacks
Tom Smith | | automated updates, CI/CD security, dependency cooldown, dependency pinning, dependency updates, devops security, GitHub Dependabot, lockfiles, malicious packages, open source security, package poisoning, package registry security, platform engineering, PyPi, Python Package Index, scoped access tokens, Software Supply Chain Security, supply chain attacksGitHub and PyPI are using time as a security control, delaying dependency updates and locking older releases against new file uploads ...
The Trust Graph: Why Infrastructure Diagrams No Longer Describe Modern Systems
Igboanugo David Ugochukwu | | AI agent security, CI/CD security, GitHub Actions security, IAM governance, identity security, machine identities, non-human identities, OAuth tokens, OIDC federation, platform engineering, reliability engineering, SaaS integrations, secrets sprawl, service accounts, Software Supply Chain, trust amplification, trust bottlenecks, trust cascades, trust graph, workload identityTraditional architecture diagrams miss the identity relationships that now drive breaches and outages. Platform teams need trust graphs that map who and what can act across modern systems ...
