How We Solved Agent Auth Without a Single PAT
A TOFU-based authorization model for headless AI agents By Mohamed Sherif If you’ve built an AI agent recently, you’ve probably run into the same problem. The first integration is easy. Your agent...
A TOFU-based authorization model for headless AI agents By Mohamed Sherif If you’ve built an AI agent recently, you’ve probably run into the same problem. The first integration is easy. Your agent...
Three years ago, I sat in a system design interview and confidently said, "We'll use Redis." The interviewer stared at me for what felt like an eternity, then asked, "Why?" I froze. I had no answer beyond "it's fast." That's when I realized I'd been defaulting to the same tools a...
We benchmarked an AI agent on 52 broken clusters: kubectl vs a Kubernetes MCP server...
Last month, I spent three days debugging why a Python service was mysteriously losing messages in production. The root cause? A subtle difference in how Python's asyncio and our Node.js message queue were handling connection timeouts. I spent the evening thinking: if we could jus...
I was sitting in Jawa café in Islamabad last month, waiting for a deploy to finish, when my phone buzzed with a DNS propagation alert. I reached for my laptop instinctively, then stopped. Why was I carrying a 15-inch MacBook to a coffee shop just to toggle a firewall rule or check...
Last year, around 2 AM on a Tuesday, I realized I'd been awake for 18 hours straight, not because of a production emergency, but because I'd decided that day that I absolutely *had* to master Kubernetes, containerization best practices, and some new AI framework I'd seen trending...
I've been staring at a Kubernetes cluster I inherited last month that nobody really understands anymore. The documentation is sparse, the vendor who set it up is gone, and there's a running joke in the team about whether we should just "turn it off and see what breaks." Then I re...
Last month, I spent an entire afternoon troubleshooting cluster access for a junior developer on my team. She kept complaining that the Kubernetes Dashboard felt clunky, unintuitive, and required us to generate new tokens every time she needed to debug something. I remember think...
I spent three months last year watching a Kubernetes cluster make the worst scaling decisions I've ever seen. The HPA would spin up ten new pods because CPU spiked for thirty seconds, then crash them all when traffic dropped. Meanwhile, our actual bottleneck, a Redis queue growing...
I spent about two years thinking cloud security was three different tools I'd eventually have to buy. Then I realized I was already living in a world where my security gaps existed across all three at the same time, and no single tool was catching them all.