Tag: infrastructure
All the articles with the tag "infrastructure".
-
Agent Sprawl Is a Skills Problem
I had hundreds of skills scattered across agent harnesses, repos, and drafts folders. No single view of what existed, what was current, or what was actually wired in. The market is hitting the same wall.
-
One Token for Everything Is Still One Token
The case for scoping a service account to one purpose instead of 'everything' is easy to agree with in the abstract. Putting it into practice on a box that runs agents — not a CI runner that exits when the job ends — is where the argument gets tested. Here's what that looked like, including the part where the boundary pushed back.
-
Your Agent Doesn't Need the Secret. It Needs the Result.
Vault-backed credentials are the floor for agent security, not the ceiling. The pattern converging across 2026 security research goes further: scope vaults to the task, expire tokens with the task, and broker credentials so the agent never holds one at all.
-
How This Site Is Built
Updated:The stack behind artificialcuriositylabs.ai: Astro on S3 + CloudFront, DNS on Cloudflare, email forwarding via SES, and an AI-readable content layer. Every decision explained.
-
The Pareto Frontier Is the Model Market Map
Model leaderboards tell you who is smartest. The Pareto frontier tells you which models are still rational choices once price enters the room.
-
When the Tool Doesn't Know About the Vault
op run wraps any process and resolves vault references as normal env vars — so the tool reads credentials without knowing 1Password exists.
-
The Same Pattern, From Solo Builder to Enterprise Scale
The credential pattern in this series works for one person today. It also works for a team of ten, or a company of ten thousand. The vault-and-IdP architecture doesn't change when you add users. That's the point.
-
1Password as the Trust Anchor for an Agent Auth Chain
The previous posts covered what 1Password stores. This one is about what it does — as the live trust anchor when an agent acquires tokens, enrolls MFA, and calls protected APIs without a human passing credentials by hand.