FAPI 2.0 Security Profile: OAuth 2.0 Hardening for Open Banking with PAR, DPoP and mTLS
FAPI 2.0 explained: the OpenID Foundation security profile for open banking, PAR, PKCE, DPoP and mTLS sender-constrained tokens, JAR/JARM, attack models.
Kubernetes ValidatingAdmissionPolicy and CEL: Admission Control Without Webhooks
Kubernetes ValidatingAdmissionPolicy explained: CEL expressions, bindings, parameters, audit and warn actions, MutatingAdmissionPolicy status and when to.
AI Agent Sandboxes Compared: Firecracker vs gVisor vs Kata for Untrusted Code in 2026
Running LLM-generated code safely in 2026: Firecracker, gVisor and Kata compared on isolation boundary, cold start, GPU passthrough and operational cost.
Confidential Containers on Kubernetes: A 2026 Guide
Confidential containers on Kubernetes explained: TEEs, AMD SEV-SNP and Intel TDX, remote attestation, the CoCo project, and running sensitive workloads safely.
Kubernetes Network Policy Egress: RDS & External Services
Kubernetes network policy egress in 2026: lock down pod egress to RDS and external services with NetworkPolicy, CNI gotchas, CIDR rules, and a working example.