Honest notes on infrastructure, security, and running technical teams, documenting the shift from human-scale systems to autonomous technical architectures.
Set strict-allow-scripts=true to fail npm 12 CI on unreviewed install scripts, and check the 3 settings that silence it: denied packages never fail.
Read more: npm ESTRICTALLOWSCRIPTS: 3 Ways the Gate Stays GreenRun the inventory before Kyverno v1.20 removes ClusterPolicy: validate.podSecurity has no CEL equivalent, and the new seccomp rule admits Pods PSA denies.
Read more: Kyverno ClusterPolicy Removal: podSecurity Has No CEL FixDiff pnpm pack against npm pack --dry-run before publishing: pnpm 12's Rust packlist can ship lib/index.js alone, and the registry accepts it.
Read more: pnpm publish missing files: 4 packlist fixes in 6 daysRotate the DSN on any project an MCP server reads: Sentry calls it safe to publish, but it is an unauthenticated write into your agent's shell.
Read more: Agentjacking: Sentry MCP's Public DSN Reaches a ShellAudit uv.lock for sdists with hard-link members before upgrading: uv 0.13.0's new tar backend rejects them, and only on a cold cache.
Read more: Fix uv 0.13.0 sdist hard links: the tarball is legalRun 11 checks on CVE-2026-48710: it sits on CISA KEV at CVSS 6.5, FastAPI sets no Starlette floor, and the sibling CVE needs 1.3.0, not 1.0.1.
Read more: Fix Starlette CVE-2026-48710: 1.0.1 Misses the SiblingDeep dives into infrastructure, security, and technical leadership. No noise, just engineering rigor. Subscribe and grab the 2026 AI-agent & infrastructure security checklist.
Run gh api on your repo's sub claim: npm's "OIDC token exchange error - package not found" is a publisher mismatch, not a missing package.
Read more: npm OIDC "package not found": your sub claim changedReproduce a random next/font build failure on demand with NEXT_FONT_GOOGLE_MOCKED_RESPONSES, then kill it: Google serves 1 in 60 fonts with no extension.
Read more: next/font/google queries have exactly one entry: 1 bad URLNode 26 becomes Active LTS on 28 October, so lts/* and node:lts switch runtimes with no commit. Pin the major, rebuild native addons: ABI is now 147.
Read more: Node 26 LTS on Oct 28: node:lts Moves Without a CommitPin core.fsmonitor and you close one route of two. Git treats .git/config as untrusted, and four shipped agent patches pin four different key lists.
Read more: core.fsmonitor RCE: 4 Agent Patches, 4 Different Key ListsRun npm_config_allow_remote=all to prove patch-package's empty status: 1 is EALLOWREMOTE on npm 12, then move the patch into npm's patchedDependencies.
Read more: Fix patch-package "status: 1" on npm 12: EALLOWREMOTEKubernetes 1.38 drops the cgroupDriver fallback, so containerd 1.x nodes never join. Run crictl runtime-config to find them, plus the gate that buys time.
Read more: containerd 1.x on Kubernetes 1.38: kubelet refuses to startUnset NODE_EXTRA_CA_CERTS and retry: on slim images pnpm 12.6 to 12.8.1 treats it as a replacement trust store. 12.8.2 fixes it. Three causes, one test.
Read more: invalid peer certificate: UnknownIssuer: pnpm 12.6 bugRun pnpm install --side-effects-cache=false to tell which of three 12.x bugs skipped your postinstall. A fresh node_modules no longer re-runs builds.
Read more: pnpm build scripts not running: another project ran themGrep _diag and check .runner to find which of 4 causes killed your self-hosted runner. It exits 0, so systemd leaves the host looking healthy.
Read more: "The runner no longer exists": exit 0, .runner deletedRun kubelet --help on the 1.37 binary to catch the 18 removed cAdvisor flags before a node dies at parse. eventRecordQPS 0 now means unlimited.
Read more: Kubernetes 1.37 Drops 18 Kubelet Flags: Nodes Never JoinFilter RAG retrieval per principal: project ACLs onto every chunk, key the semantic cache on the principal, and prove it with a nightly canary suite.
Read more: Fix RAG Access Control: Your Chunks Carry No ACLTurn on output.strictModuleErrorHandling: webpack 5.111 awaits async ESM entries by default, but a failed async cycle still hands out fulfilled exports.
Read more: Webpack 5.111 Top-Level Await Fix Skips Async CyclesRun pgrep -f Runner.Worker to tell four GitHub Actions runner hangs apart: only acquirejob has no timeout, and the stuck pod keeps its ARC slot.
Read more: "Acknowledging runner request": 4 Bugs, 1 Stuck SlotHosted node20 actions do not fail after 23 September 2026, they run on Node 24 and the opt-out is inert. Plus exec /__e/node20/bin/node on container jobs.
Read more: GitHub Actions Node 20 removal: node20 now runs on Node 24Run one jq query on package-lock.json to name every git spec, then pick the fix: allow-git=root only works when the error omits the word non-root.
Read more: Fix npm EALLOWGIT: allow-git=root Covers 1 of 4 CausesUpgrade to pnpm 11.27.0. Before it, readPackage got the cached manifest by reference, so one in-place edit landed on every dependent on that version.
Read more: pnpm readPackage Edits Leak to Deps You Never MatchedCurl the release URL: 1.16.3 serves binary/octet-stream, not application/zip. The zip is valid; hc-install's MIME allowlist rejects it. Three fixes.
Read more: Fix Terraform 1.16.3 binary/octet-stream: the zip is fineA headless proxy pool fired my GA4 tags and passed as readers for months. How I measured it, why the obvious marker would have lied, and the layer the block had to sit at.
Read more: 70% of My Analytics Was a Bot That Ran My JavaScriptUpgrade to uv 0.12.15 to fix Cannot install into symlinked directory: /usr/local/man in python:* Docker images and .venv/lib64 on uv 0.12.14.
Read more: Fix uv "Cannot install into symlinked directory" in 0.12.14Upgrade pnpm to 12.4.2 to stop "Access is denied. (os error 5)" on Windows node_modules purges. A retry often succeeds, which hides the real bug.
Read more: Fix ERR_PNPM_PACKAGE_MANAGER_REMOVE_MODULES_DIR: 4 causesThe npm 12 install-script lockdown fails quietly across a repo estate. The order to roll it in, what each failure costs in production, and the CI gates.
Read more: npm 12 Rollout: What Breaks After CI Goes GreenYour DRA pod prints NVIDIA-SMI has failed while the host GPU is healthy. Grep the claim's CDI spec, create the device nodes, restart the plugin.
Read more: Fix "NVIDIA-SMI has failed" in a Kubernetes DRA PodScope MCP tool permissions by token and prove it: readOnlyHint is only a claim the server makes about itself. 10 tips with runnable checks.
Read more: MCP Tool Permissions: 10 Tips to Prove Agent Write AccessRun these checks to prove Kubernetes admission control is enforced: fail-open metrics, failurePolicy Ignore audit, ValidatingAdmissionPolicy, RBAC.
Read more: Stop Kubernetes Admission Control Failing Open: 11 TipsPin GitHub Actions by SHA, then close the 10 gaps the pin leaves: impostor commits, unverified provenance, and the checks that prove it in CI.
Read more: Pin GitHub Actions by SHA: 10 Gaps the Pin Leaves OpenCyber Resilience Act reporting starts 11 September 2026. Ten tips for the 24-hour clock, naming the right coordinating CSIRT, and a platform with no API.
Read more: Cyber Resilience Act Reporting: 10 Tips for Sept 118 of 10 OWASP LLM identifiers changed on 3 August 2026. If your policy says LLM06, it now points at Unbounded Consumption, not Excessive Agency.
Read more: OWASP LLM Top 10 2026: Your LLM06 Now Points at the Wrong RiskSet kube-proxy mode explicitly before Kubernetes 1.40 disables IPVS: nftables drops NodePort on secondary node IPs and silences your sync-failure alert.
Read more: kube-proxy IPVS to nftables: Fix 11 Traps in 1.40Run stat -fc %T /sys/fs/cgroup to see what the kubelet sees: hybrid mounts and unapplied GRUB edits both read as cgroup v1 on a v2 host.
Read more: Fix kubelet "not run on a host using cgroup v1" on v2Run two commands to split the four causes behind docker save --platform failing on Docker 29's containerd image store, then export a tar that actually loads.
Read more: Fix docker save "no suitable export target found"Read the hex in the Xid 154 line to tell an nvidia-smi -r reset from a node reboot, and stop dcgm-exporter from hiding the Xid that actually failed.
Read more: Fix "Xid 154, GPU recovery action changed" on GPU Nodespnpm deploy 11.19 to 11.21 symlinks workspace packages out of your Docker image. Run one find to catch the dangling link, then upgrade to 11.22.0.
Read more: Fix pnpm deploy "Cannot find module" in Docker on 11.19Set GOMEMLIMIT and drop --max-old-space-size: TypeScript 7's Go tsc uses 2.48 GB where tsc 6 used 0.41 GB for the same error TS7056, then exits 137.
Read more: Fix TypeScript 7 Out of Memory: error TS7056 Costs 6x RAMRun these 12 checks before helm upgrade to Cilium 1.19: ClusterMesh policy scoping flips, BGPv1 CRDs are gone, and five service flags vanish.
Read more: Cilium 1.19 Upgrade: Fix 12 Traps Before BGP DropsCheck the exit code before the error text: 137 means the kernel killed it. Four causes of Node 24.19.0 heap OOM, each with its own separating test.
Read more: Fix Ineffective mark-compacts in Node 24.19.0: 4 Causesnpm 12 flipped allow-remote to none. EALLOWREMOTE on a private registry is fixed by replace-registry-host, not by disabling the supply-chain control globally.
Read more: npm EALLOWREMOTE: Fix Private Registries, Not allow-remote=allnpm 12 exits 0 when it skips a native build, so your pipeline is green and the container crashes. Three causes share the same output; here is how to triage.
Read more: npm 12: npm ci Exits 0, build/Release Fails on DeployRun pnpm why typescript to find which of three trees put TypeScript 7 under typescript-eslint, then fix it with pnpm 12 or an overrides pin.
Read more: Fix ESLint Cannot read properties of undefined (Intrinsic)Kubernetes 1.37 mounts PVCs with -o context=, so pods with different SELinux labels stall in ContainerCreating. Run one kubectl check to find them first.
Read more: Fix conflicting SELinux labels of volume in K8s 1.37pnpm 12's Rust CLI validates pnpm-workspace.yaml, but only raises a hard error when you pin a version. Without one, a config typo stays a silent warning.
Read more: pnpm 12 Upgrade: Pin a Version or Workspace Errors Stay SilentTreat verified C2PA Content Credentials as weak evidence: forged manifests pass the official verifier on rooted Pixels. Pin anchors, log the signer.
Read more: Stop Trusting C2PA Content Credentials on AndroidGPU Operator 26.7 advertises each GPU twice under DRA. Run one kubectl query to spot it, then split the node pool before enabling VFIO.
Read more: Stop Kubernetes DRA Giving One GPU to a VM and a PodKubernetes 1.37 removes the PreventStaticPodAPIReferences gate. Grep your static pod manifests and kubelet config before a node refuses to start.
Read more: Fix "a mirror pod may not reference secrets" in K8s 1.37Terraform 1.15 apply panics in readDiff on a deposed object. Run one state pull and jq check to find the live orphan before you upgrade to 1.16.
Read more: Fix Terraform Deposed Object Panic in readDiff on 1.15Terraform 1.15 warns about attributes you never wrote. Run terraform validate -json to tell real deprecations from mark propagation, plus what 1.16 fixes.
Read more: Fix Terraform "The deprecation originates from" Warningsapprove-scripts exits EGLOBAL in global installs; --allow-scripts is refused in projects. Two contradictory errors, one decision rule, and the CI gap.
Read more: npm approve-scripts vs --allow-scripts: Opposite FixesSet allowScripts in package.json to approve npm install scripts: exact schema, pinned vs name-only keys, why ignore-scripts wins, and what .npmrc holds.
Read more: npm allowScripts: the package.json Schema, Not .npmrcCommit Cargo.lock, build --locked, add a 3-day cooldown: the arrayref build.rs ran code during cargo build, and Cargo has no --ignore-scripts.
Read more: arrayref Attack Shows cargo build.rs Runs Any CodeKubernetes 1.34 warns 'unrecognized format int32' on valid CRDs. It's a kube-apiserver false positive, not your schema; patch the control plane to fix it.
Read more: Fix "unrecognized format int32" in Kubernetes 1.34Move Kubernetes off non-expiring ServiceAccount secrets to bound, projected tokens via the TokenRequest API, and fix the 401s the migration triggers.
Read more: Bound ServiceAccount Tokens: 9 Tips to Kill Static OnesThree root causes produce this crash; only one clears with node_modules. Run npm install --package-lock-only on a clean checkout to tell them apart.
Read more: npm error edgesOut: Three Causes, One Fixed by node_modulesnpm 12 forbids --allow-scripts in project installs. Plain npm install fails too if .npmrc carries the flag. Fix: an allowScripts allowlist in package.json.
Read more: npm EALLOWSCRIPTS: Use allowScripts, Not --allow-scriptsTell the npm audit 410 and 'invalid json response body' gzip bug apart by the URL in the error, and stop a silent audit from passing your CI.
Read more: Fix npm audit 410 and 'invalid json response body' bugsGenerate a CycloneDX SBOM with Syft, scan it with Grype, and suppress non-exploitable CVEs with VEX not_affected statements in your CI gate.
Read more: Generate an SBOM with Syft, Filter Grype with VEXOnly 8.5% of MCP servers use OAuth. Audit audience validation and add the resource parameter before the July 28 OAuth 2.1 spec rewrite lands.
Read more: Fix MCP OAuth 2.1 Before the July 28 RewriteTrivy vs Grype in 2026: Trivy scans everything, Grype matches CVEs from an SBOM. Pick by the job, and pin your scanner after Q1's supply-chain hit.
Read more: Trivy vs Grype 2026: Pick by the Job, Not SpeedWire GitHub Actions OIDC to AWS correctly: scope the sub claim, handle the July 15 immutable-claim change, and avoid the trust policy traps tutorials skip.
Read more: GitHub Actions OIDC to AWS: Drop Static Keys for GoodRun a default-deny egress NetworkPolicy to stop a compromised pod from phoning home. Two manifests, one DNS gotcha that breaks it, and the CNI fix.
Read more: Kubernetes Default-Deny Egress Stops Pod ExfiltrationFalco detects, Tetragon enforces in the kernel, Tracee does forensics. Picking one as a drop-in for another is the costly mistake. How to choose.
Read more: Falco vs Tetragon vs Tracee: Pick the Right OneCosign v3 flips three flags by default and breaks Harbor detection. Get the sign-and-verify loop and the two fallback flags that keep CI working.
Read more: Cosign v3: Sign, Verify, and Fix the Harbor BreakAI takes only 20% of DRAM wafer capacity but consumes 3x the wafers per GB of HBM, draining DDR5 supply. Here is the planning math.
Read more: DDR5 Memory Shortage 2026: Why RAM Prices TripledA TRACE logging default writes 640 TB/year to ~/.codex/logs_2.sqlite. Here is how to check your disk wear and stop it.
Read more: OpenAI Codex Bug Is Writing 640 TB/Year to Your SSDio_uring skips system calls for speed, and that same trick lets a rootkit run while Falco, Tetragon, and Defender see nothing. Here is how to close the gap.
Read more: io_uring Security: The Linux Speedup That Hides RootkitsGPT-5.5 scored 57% on knowledge benchmarks and 86% hallucination rate in the same run. Here is what that number actually counts.
Read more: GPT-5.5 Hallucination Rate: 86% Means It Never AbstainsFigure's F.02 helped build 30,000 BMWs and Tesla runs 1,000+ Optimus units, but the retired robot in the footnote tells you what's actually shipping.
Read more: Humanoid Robots Hit Factory Lines in 2026Which manufacturers ship semi-solid packs today versus who is still at pilot stage. The chemistry gap, commercialization status, and key players ranked.
Read more: Solid-State Battery Companies 2026: Who Is Actually ShippingAI compute cost in 2026 is decided by tokens per watt, the serving stack, and the grid, not the chip. Here is the math that survives finance.
Read more: AI Compute Costs in 2026: Power and the Serving StackAnthropic retired Claude Opus 4 on June 15 and a directive killed Fable 5 in hours. Your model ID runs on two clocks, and a naive fallback fails both.
Read more: Multi-Provider LLM Fallback Done Right in 2026Battle-tested agentic SOC tips: gate autonomy on 90% shadow-mode concordance, split verdict from action, and treat every log line as attacker-authored.
Read more: Agentic SOC in 2026: 10 Tips for Safe TriageA signed A2A agent card still lets attackers inject instructions into the description field your orchestrator feeds directly to the LLM router.
Read more: A2A Agent Card Poisoning: JWS Proves Origin, Not IntentFind, patch, and block the CVSS 9.9 Fission container escape (CVE-2026-50566) on Kubernetes with version 1.24.0, Pod Security Standards, and a Kyverno rule.
Read more: Fission CVE-2026-50566: Stop the Container EscapeOne crafted URL drained Comet's Gmail and ChatGPT Atlas blocked just 5.8% of phishing. Agentic browsers run with all your logged-in sessions, and that is the bug.
Read more: AI Browser Prompt Injection Hands Over Your SessionsPost-quantum TLS (X25519MLKEM768) already negotiates by default, and the operator problem is a 1,400-byte ClientHello that fragments and breaks SNI routing.
Read more: Post-Quantum TLS Is Already On, and It Broke Your RouterOSS-Fuzz-Gen, Buttercup, and Atheris run on a laptop with one LLM key. Ten practical commands to fuzz your own repo before attackers do.
Read more: Run AI Fuzzing on Your Own Repo Before Attackers DoA US directive disabled Anthropic's Fable 5 and Mythos 5 in hours on June 12, 2026. The operator lesson is supply-chain continuity, not the jailbreak.
Read more: Fable 5's Shutdown Means Your Model Is RevocableAn unpatched WinRE exploit, GreatXML, bypasses BitLocker on any Windows 11 machine that ran a Defender offline scan. The fix is TPM+PIN, not a patch.
Read more: GreatXML BitLocker Bypass Means TPM-Only Is the BugA remote code execution flaw sits in Anthropic's official MCP SDKs across 150M downloads. It's stdio command execution by design, and Anthropic calls it expected.
Read more: MCP RCE Lives in the SDK, and No Patch Is ComingThe default Isaac GR00T N1.7 inference server binds to 0.0.0.0:5555 with no auth. Here is how to lock it to loopback behind mutual TLS.
Read more: GR00T N1.7's ZMQ Port Is an Open Robot Remote ControlMicrosoft's June 2026 Patch Tuesday fixed a record 206 CVEs and 3 zero-days. The real shift is AI-found bugs outrunning the human patch cycle.
Read more: Patch Tuesday Hit 206 CVEs and Broke Your CadencePgDog sits in front of unmodified Postgres as a pooler, read/write balancer, and sharder. Here are the sharp edges to map before it hits production traffic.
Read more: PgDog: Connection Pooling, Read Splits, and ShardingThe fix for AI agent identity is two layers: SPIFFE proves what the agent is, OAuth token exchange proves what it may do right now and for whom.
Read more: AI Agent Identity Needs SPIFFE and OAuth, Not One Keynpm allowScripts warning on npm 12: run npm approve-scripts --allow-scripts-pending, approve what you trust, and set strict-allow-scripts so installs fail loudly.
Read more: npm allowScripts warning: fix "install scripts not covered" on npm 12Shadow AI now factors into 1 in 5 breaches and adds $670K in cost. Why banning tools backfires, and how to actually find ungoverned GenAI in 2026.
Read more: Hunting Shadow AI Before It Becomes Your Breach PathBattle-tested OWASP API Security Top 10 tips for 2026: hunt shadow and zombie APIs at runtime, test BOLA in CI, and close the gaps that breached Optus.
Read more: OWASP API Top 10: Shadow APIs and BOLA Tips for 2026The EU AI Act's high-risk obligations become enforceable on August 2, 2026, a deferral isn't law yet, and ISO 42001 won't cover you. Here's the engineering work.
Read more: EU AI Act High-Risk Rules Hit August 2, 2026Build a Tetragon TracingPolicy that kills a process at the kernel before it reads a secret, plus the CONFIG_BPF_KPROBE_OVERRIDE gotcha that breaks it.
Read more: Tetragon 1.7 Runtime Enforcement: Block Processes in the KernelBackstage owns 89% of the IDP market but averages 10% internal adoption. Here's when self-hosting your developer portal stops paying off.
Read more: Backstage vs Port vs Cortex: When to Stop Self-HostingWhy LLM agent guardrails fail under adaptive attack, and the architectural patterns that actually contain prompt injection in 2026.
Read more: Prompt Injection Defense: 10 Tips That Hold UpMigrate Ingress-NGINX to Gateway API before its March 2026 retirement: ingress2gateway 1.0, Envoy Gateway, and the annotations that silently drop.
Read more: Migrate Ingress-NGINX to Gateway API Before RetirementKernel 6.3 (not 5.12), containerd 2.0+, and /etc/subuid setup for Kubernetes 1.36 user namespaces. Covers the silent failures that cost you an afternoon.
Read more: Kubernetes User Namespaces GA: hostUsers false Node PrepAI agent sandboxes isolate untrusted AI-generated code with Firecracker microVMs and gVisor. Here's how to pick an execution runtime in 2026.
Read more: Sandboxing AI Agent Code: A 2026 Runtime GuideKubernetes hardening for 2026: enforce Pod Security Standards, fix over-permissive RBAC, default-deny networking, and mitigate the CVEs nobody will patch.
Read more: Kubernetes Hardening 2026: RBAC, PSS & Unfixed CVEsA practitioner's running checklist for 2026: agent identity, sandboxing untrusted code, dependency cooldowns, and the post-quantum deadlines, each tied to one concrete action.
Read more: The 2026 AI-Agent and Infrastructure Security ChecklistA practical 2026 guide to securing MCP servers: inspect tool descriptions, scan for poisoning, pin versions against rug pulls, and add a runtime guardrail.
Read more: Harden MCP Servers Against Tool PoisoningHow to discover, scope, and govern service accounts, API keys, tokens, and AI agents before machine credentials become your breach path.
Read more: Non-Human Identity Governance: Field Tips for 202688% of enterprises hit an AI agent security incident in the past year. The cause isn't exotic attacks, it's identities nobody logged out or audited.
Read more: The AI Agent You Deployed Last Quarter Is Probably Your Weakest LoginDependency cooldowns delay installing brand-new package versions a few days, blocking most npm and RubyGems supply chain attacks before malware lands.
Read more: Dependency Cooldowns Beat Fast Supply Chain AttacksNIST's finalized post-quantum standards plus FIPS and CNSA 2.0 deadlines put RSA and ECC on a countdown. Here's why 2026 is the year to start migrating.
Read more: RSA Is on a Clock Now: The 2026 Deadlines Forcing the Post-Quantum SwitchMicrosoft's pg_durable, DBOS, and Temporal are pushing crash-proof, exactly-once workflows into Postgres in 2026. Here's how to choose.
Read more: Durable Execution Is Moving Into PostgresChrome 149's origin trial ships WebMCP, the Google, Microsoft API that lets sites declare callable tools to AI agents instead of being screenshotted and guessed at.
Read more: WebMCP Hands Your Site's Tools to AI Agents, and Chrome 149 Just Made It RealA decade of lessons moving from engineer to leader on building teams that can run the systems they ship, under pressure, without you in the room.
Read more: Leading Technical Teams: Innovation and People, In BalanceA decade of lessons on balancing security, reliability, and the room to grow, with the specific habits that actually hold up at 3 a.m.
Read more: Principles for Building Secure and Scalable InfrastructureNo articles match your search. Try a different term or topic.
Indra G. Prasetya
