Who Is This Agent? Non-Human Identity in 2026, From the RFCs to the Breaches
Machines outnumber humans 109 to 1 in the enterprise directory, the OAuth working group has 70 drafts in flight, MCP just deprecated dynamic registration, and an agent with an over-scoped token deleted a production database in nine seconds. What actually standardised this year, what shipped, and the delegation chain I would build.
16 minSep 6, 2026Seats Are Dying. What the 2026 SaaS Repricing Looks Like From the Compute Layer
A one-day 18% drop in Thomson Reuters, $1.50 per resolution at Zendesk, $15 per human at Microsoft, and a vibe-coding company at $500M run-rate with 200 people. The unit of software changed this year. Here is what it did to infrastructure.
13 minSep 6, 2026The Worms Learned to Use Your AI Agent: A Year of npm Supply-Chain Attacks
From s1ngularity invoking Claude Code to hunt for wallets, to Shai-Hulud self-publishing across 500 packages, to IronWorm stealing AI API keys — the twelve months that changed how I install software.
13 minSep 6, 2026MCP Security in 2026: The Protocol Got Hardened. The Ecosystem Didn't.
A year of MCP CVEs, a rewritten spec, an NSA guidance sheet and an OWASP Top 10 — what actually changed, what didn't, and the six controls I'd insist on before an MCP server touches production.
12 minSep 3, 2026Best AI Agent Sandbox Providers in 2026, Compared
AI agent sandbox providers compared on isolation, hosting, persistence and pricing, by an engineer who built one of them. PandaStack is mine and is included.
10 minSep 3, 2026AI Agent Sandboxes: What They Are and How to Choose One
What an AI agent sandbox is at the systems level, the four properties that decide one, and how 15 platforms compare — from an engineer who built one of them.
10 minSep 3, 2026AI Agent Sandbox Runtime: The Six Options and Who Uses Them
Firecracker, gVisor, Kata, containers, V8 isolates and libkrun compared — how each isolates, what it costs in memory, and which sandbox vendors run it.
10 minSep 3, 2026AI Agent Cloud: What the Term Means and Who Actually Has One
An AI agent cloud needs more than a sandbox: state, hosting, triggers, audit. I map 15 platforms against that stack and show where each one stops short.
10 minSep 2, 2026It's 2 AM. Do You Know What Your AI Agent Is Doing?
I run the microVMs that other people's AI agents execute in. At 2 AM almost all of them are idle — and the things burning money are the robots watching them.
11 minSep 2, 2026Sandbox Creation Time Benchmarks Measure Different Things
Every AI sandbox matrix has a creation time column spanning 0.79ms to 2.7s. That spread is definitional, not performance. Here's how to make it comparable.
10 minSep 2, 2026Isolation Is Not an Abuse Control: Lessons From My Fleet
A free-tier signup mined crypto on my microVM fleet in 27 minutes. Containment held perfectly and it changed nothing. What I built afterwards, in what order.
9 minSep 2, 2026My Fork Docs Were Wrong: What VM Forking Really Preserves
I shipped a doc claiming forks keep processes and open files. A smoke test proved otherwise. Three fork paths measured, and the five places each breaks.
10 minSep 2, 2026gVisor vs microVM vs Containers for AI Agent Isolation
Which isolation model to use for AI agent code execution: containers, gVisor and Firecracker microVMs compared on five axes by someone who runs a fleet.
9 min