Why sandboxing your agent is not enough
…Agent-substrate The agent-substrate project is currently a standalone project and is not part of any Kubernetes SIG or other cloud native foundation project, though that may change in the future…
Search
People also ask
What changes when feedback moves earlier?
Shifting validation to review-time changes developer behavior in several practical ways. Faster feedback. Rather than waiting for a CI run to complete, violations appear immediately during review. Issues can be addressed before merge, in the same context where they were introduced. Shared visibility. Policy violations are no longer buried in CI logs accessible only to the developer. They become part of the review discussion, visible to the entire team. This builds shared awareness of policy intent—not just individual compliance. Fewer feedback loops. In early usage across real pull requests, a
Why Kubernetes policy enforcement happens too late—and what to do about itEleven minutes, zero humans: Building a self-healing Kubernetes upgrade pipeline on Kairos
…This is where every manifest, policy, and upgrade spec lives. Renovate — watches quay.io/kairos/hadron on Quay for new tags. When upstream publishes a release, Renovate opens a PR bumping two…
Securing CI/CD for an open source project, part 3: Credentials, verification, and what’s next
…It’s lower risk than a third-party tag, but inconsistent with our SHA-pinning policy. The plan is to move all of our composite actions out of cilium/cilium into a…
Securing CI/CD for an open source project: Locking down dependencies
…Every dependency you remove is one that can never be compromised and reviewing future dependency changes gets easier. Catching mistakes with static analysis Even with the right policies in place, mistakes happen…
Building a cloud native platform from the ground up with Kairos, k0rdent, and bindy
…every change triggers a GitHub Actions pipeline that builds the image, runs integration tests against a live VM, and publishes a new OCI tag only on a clean pass. Nightly builds catch…
Three TAG leads walk into the TOC
…That’s the kind of output that changes the direction of the entire community. The TOC operates at a different layer — project lifecycle decisions, policy, foundation-level strategy,but it feeds directly…
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.