Tag: platform engineering
So Agentic Systems Are Messing Up Your SLO Framework
Saqib Jan | | agent monitoring, agentic AI reliability, Agentic Systems, AI agent SLOs, AI infrastructure, AI observability, behavioral correctness, behavioral drift, error budgets, inference reliability, nondeterministic AI, platform engineering, Probabilistic Systems, probabilistic tracing, semantic similarityTraditional SLOs cannot show whether AI agents are behaving correctly. Platform teams need layered metrics for infrastructure, inference and behavioral reliability ...
DevOps Is Drowning in Updates—and Engineering Is Paying the Price
Alex Vakulov | | cloud operations, devops, devsecops, information overload, platform engineering, site reliability engineeringDevOps used to be a manageable rhythm: several core tools, a handful of respected blogs, and a few incident write-ups that made everyone slightly uncomfortable in a useful way. Now it feels ...
GitHub and PyPI Bet On Time to Slow Down Software Supply Chain Attacks
Tom Smith | | automated updates, CI/CD security, dependency cooldown, dependency pinning, dependency updates, devops security, GitHub Dependabot, lockfiles, malicious packages, open source security, package poisoning, package registry security, platform engineering, PyPi, Python Package Index, scoped access tokens, Software Supply Chain Security, supply chain attacksGitHub and PyPI are using time as a security control, delaying dependency updates and locking older releases against new file uploads ...
The Trust Graph: Why Infrastructure Diagrams No Longer Describe Modern Systems
Igboanugo David Ugochukwu | | AI agent security, CI/CD security, GitHub Actions security, IAM governance, identity security, machine identities, non-human identities, OAuth tokens, OIDC federation, platform engineering, reliability engineering, SaaS integrations, secrets sprawl, service accounts, Software Supply Chain, trust amplification, trust bottlenecks, trust cascades, trust graph, workload identityTraditional architecture diagrams miss the identity relationships that now drive breaches and outages. Platform teams need trust graphs that map who and what can act across modern systems ...
HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform
Tom Smith | | Cloud Security, compliance automation, Hashicorp, HCL, HCP Terraform, infrastructure as code, Infrastructure Governance, OPA, Open Policy Agent, platform engineering, policy as code, Sentinel, Terraform, tfpolicyHashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks ...
When AI Agents Get Production Access: The Next Big DevOps Risk
Sannan Ali | | AI agents, autonomous operations, devops, infrastructure automation, platform engineering, Production OperationsIt wasn’t that long ago that AI assistants just watched from the sidelines. They could answer your questions, explain how things worked, sum up logs, and write deployment scripts. Handy, sure, but ...
Platform Engineering vs. DevOps: Why This Is the Wrong Question
DevOps has done what it was supposed to do. It broke down the wall between development and operations, it made continuous delivery a normal expectation, it made shared ownership of production a ...
Risk-Based Review for Infrastructure as Code Pull Requests
Naga Krishna Reddy Muppidi | | automated review systems, blast radius analysis, change approval workflow, change management, CI/CD governance, cloud infrastructure, Cloud Security, deployment risk, deployment safety, devops, devsecops, Engineering Governance, engineering productivity, gitops, IaC review, infrastructure as code, infrastructure auditing, infrastructure automation, infrastructure change tracking, infrastructure compliance, infrastructure controls, infrastructure delivery, Infrastructure Governance, infrastructure observability, infrastructure reliability, infrastructure risk scoring, infrastructure security, operational risk management, platform engineering, platform operations, platform team workflows, policy as code, production changes, production deployments, pull request review, reviewer fatigue, reviewer workflows, risk assessment, risk-based review, security review automationNot every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical reviewer load. When every change ...
The Death of the Four Golden Signals: Designing Telemetry for Non-Deterministic Infrastructure
Jyostna Seelam | | AI architecture, AI compliance, AI Governance, AI guardrails, AI infrastructure, AI monitoring, AI observability, AI operations, AI operations strategy., AI performance metrics, AI platform monitoring, AI reliability, AI resilience, AI safety, AI SLIs, AI SLOs, AI system reliability, AI telemetry, AI trust, Enterprise AI, generative AI monitoring, guardrail intervention rate, hallucination detection, LLM monitoring, LLM observability, modern SRE, non-deterministic systems, Observability Engineering, OpenTelemetry, platform engineering, production AI, RAG observability, RAG systems, semantic drift, site reliability engineering, SRE, time to first token, token throughput, TTFT, vector database monitoringIn complex software systems, our traditional definition of operational health has always been comfortably binary. For over a decade, site reliability engineering (SRE) teams have relied on the industry-standard ‘Four Golden Signals’ ...
Why Enterprise AI Infrastructure Is Becoming a DevOps Problem
Most enterprise AI projects start with retrieval. You connect Jira, Confluence, SharePoint, and Slack. Maybe a few internal databases nobody has touched in five years. You tune embeddings, optimize chunking, wire up ...
The Automation Layer Wants to Own Enterprise AI
Alan Shimel | | AI agents, Automation Layer, Enterprise AI, Infrastructure Governance, Operational Trust, platform engineering, Probabilistic Systems, runtime securityOrganizations want AI systems capable of prioritizing alerts, routing workflows, coordinating across applications, initiating remediation steps, summarizing operational data and adapting dynamically based on changing context. The system is no longer following ...
The Five Biggest Mistakes Organizations Make When Implementing SRE
Akash Thakur | | AIOps, cultural transformation, error budgets, incident response, observability, platform engineering, site reliability engineering, SLO, SRE, toilFrom cargo-culting Google's playbook to rushing AI-powered observability into production before the fundamentals are in place, here's where SRE transformations quietly go wrong, and how to course-correct. ...
