Writing

2 posts · tagged security · oldest Apr 2025

REX1 post · 2026github watch demo

2026·09·14A question cannot change your fileREX makes one safety promise: ASK cannot write, ACT edits a copy, and only Approve touches your file. Three times it broke without a sound — a line gone under "Applied to 0 file(s)", a committed file deleted under a notice saying it was put back, a copy removed while the agent was reading it — and what an allowlist, four SDKs and a repository's own settings file taught me about where a boundary actually is.agentsaisecurity11 min

OpenOperator1 post · 2025github watch demo

2025·04·16Shipping a 6 GB ISO to every pod (and then deleting the storage key)An initContainer that pulls once, one PVC projected into eleven mount points via subPath, and a three-month migration from a storage key to workload identity.kubernetesazuresecurityinfra7 min