The shift toward autonomous AI agents running arbitrary, unreviewed code in production environments has ultimately forced the security community to confront the harsh reality that our traditional container abstractions are wholly inadequate for untru...

The software supply chain landscape changed forever in early-to-mid 2026. What began as a series of isolated credential-theft incidents quickly mutated into a highly coordinated, multi-registry, self-propagating worm campaign. By abusing trusted rel...

In this episode of Continuous Delivery Office Hours, Tony Kelly, Bob Walker, and Steve Fenton discuss some of the tangled pathways around AI, the search for efficiency and productivity, and the need to re-focus on effectiveness and outcomes. You'll ...

Last weekend I was looking for a new project for my Raspberry Pi. I was looking for ways to set up a KVM on my Pi5 since it has 8GB of RAM, which is beefy enough for additional virtualisation tasks. Once I started Googling how I should start this tas...

Recap In the previous article../kvm-rust-arm-part1 we ported the register handling of my Rust KVM hypervisor from x86 to ARM64. By tracing QEMU with strace and inspecting the Linux headers, we discovered that ARM64 accesses CPU state through the KV...

I’m working in software supply chain security, with a specific focus on secure Kubernetes deployments. In a DevOps capacity, I’m focused specifically on ensuring that my container images have as few software vulnerabilities as possible. I believe Wol...

> TL;DR: CLAUDE.md and AGENTS.md are excellent at steering how agents write code. They were never designed to capture what the product promises to do. When agents refactor, extend, or integrate code, they need a behavior spec — not more workflow inst...