Containers
How containers really work: VMs, namespaces, images, networking and the cloud underneath.
Why is everyone suddenly putting AI agents in a box?
AI tools used to suggest code. Now they run it. What an agent sandbox is, and why every team running agents needs one.
Review the Dockerfile your agent wrote
Agent-written Dockerfiles build, run and often ship your keys. Six things to check in review, what to change, and how to make the agent get them right first time.
How a container gets a GPU
Containers were built for CPUs. Here is how one reaches a GPU, why the driver never lives in the image, and what changes when several containers share one card.
Run your MCP servers in a box
An MCP server is a program that runs as you, with your keys and your network. How to put each one in a container, and what that does and doesn't protect.
What's hot: agent sandboxes, Claude Fable 5.1 and TypeScript in Rust
Agent sandboxes became infrastructure, Claude Fable 5.1 and Opus 5.5 cut the cost of agent loops, and Cloudflare rewrote TypeScript in Rust. What happened, and why it matters.