Notes on Infrastructure AI|Cloud|Security|Networking
Field notes and practical guides from Sebastian Maniak — gateways, agents, Kubernetes, and the systems that keep production running.
The Art of the Possible: Governed Sandbox Agents, and an Arista Operator That Can't Go Rogue
Ask a network engineer if they’d let an AI run commands on their production fabric and you’ll get a very short answer. The instinct is correct: a model that can configure, clear ip bgp, or shutdown an …
Read article →Latest writing
View the full archive →How To: Build an AWS Budget SandboxAgent on kagent + Agent Substrate
I already wrote the why — why secure sandbox substrates are the future. This one is the how. Same agent, but from the build side: every object you apply, where …
A GCP Budget SandboxAgent on kagent — and the Value of an Agent That Says "Unavailable"
This is the GCP sibling of my AWS budget SandboxAgent: a gVisor-isolated agent that answers What’s our us-east1 spend this month, and are we over …
A ServiceNow Triage SandboxAgent on kagent — Where Write Tools Belong
Every ITSM demo I’ve ever sat through answers “how many tickets are open.” That’s a COUNT(*). The actual manager question is harder: …
Asking My Home FortiGate Questions: A gVisor SandboxAgent on kagent
My AWS and GCP budget agents read cloud bills. This one reads something with considerably more consequence in my house: the firewall my family’s internet …
An F5 BIG-IP SandboxAgent on kagent: 19 VIPs, 2 Up, and 18 Tool Calls to Find Out Why
The other four agents in this series answer what is the state of things — AWS spend, GCP quota, open tickets, firewall policy. This one answers something …
Why Secure Sandbox Substrates Are the Future of AI Agents
For a couple of years, “AI safety” in production mostly meant content safety: don’t let the model say the wrong thing, leak a prompt, or …