Seats Are Dying. What the 2026 SaaS Repricing Looks Like From the Compute Layer
A one-day 18% drop in Thomson Reuters, $1.50 per resolution at Zendesk, $15 per human at Microsoft, and a vibe-coding company at $500M run-rate with 200 people. The unit of software changed this year. Here is what it did to infrastructure.
13 minSep 6, 2026The Worms Learned to Use Your AI Agent: A Year of npm Supply-Chain Attacks
From s1ngularity invoking Claude Code to hunt for wallets, to Shai-Hulud self-publishing across 500 packages, to IronWorm stealing AI API keys — the twelve months that changed how I install software.
13 minSep 6, 2026MCP Security in 2026: The Protocol Got Hardened. The Ecosystem Didn't.
A year of MCP CVEs, a rewritten spec, an NSA guidance sheet and an OWASP Top 10 — what actually changed, what didn't, and the six controls I'd insist on before an MCP server touches production.
12 minSep 3, 2026Top AI Agent Sandbox Providers: An Engineer's 2026 Roundup
A working engineer's roundup of the top AI agent sandbox providers: isolation, hosting, persistence and pricing compared — including the one I built myself.
10 minSep 3, 2026AI Agent Sandboxes: What They Are and How to Choose One
What an AI agent sandbox is at the systems level, the four properties that decide one, and how 15 platforms compare — from an engineer who built one of them.
10 minSep 3, 2026AI Agent Sandbox Runtime: The Six Options and Who Uses Them
Firecracker, gVisor, Kata, containers, V8 isolates and libkrun compared — how each isolates, what it costs in memory, and which sandbox vendors run it.
10 minSep 3, 2026AI Agent Cloud: What the Term Means and Who Actually Has One
An AI agent cloud needs more than a sandbox: state, hosting, triggers, audit. I map 15 platforms against that stack and show where each one stops short.
10 minSep 2, 2026It's 2 AM. Do You Know What Your AI Agent Is Doing?
I run the microVMs that other people's AI agents execute in. At 2 AM almost all of them are idle — and the things burning money are the robots watching them.
11 minSep 2, 2026Sandbox Creation Time Benchmarks Measure Different Things
Every AI sandbox matrix has a creation time column spanning 0.79ms to 2.7s. That spread is definitional, not performance. Here's how to make it comparable.
10 minSep 2, 2026Isolation Is Not an Abuse Control: Lessons From My Fleet
A free-tier signup mined crypto on my microVM fleet in 27 minutes. Containment held perfectly and it changed nothing. What I built afterwards, in what order.
9 minSep 2, 2026My Fork Docs Were Wrong: What VM Forking Really Preserves
I shipped a doc claiming forks keep processes and open files. A smoke test proved otherwise. Three fork paths measured, and the five places each breaks.
10 minSep 2, 2026Container vs microVM vs gVisor: Choosing Agent Isolation
A practical guide to picking an isolation model for AI-agent code execution, from someone who runs a Firecracker fleet: five models, five axes, one table.
9 min