Supply Chain | VALDEMAR

AI Agent Governance — One Engineer, Over a Hundred Repositories and the Decisions No Agent Makes

2026-10-19

AI agent governance for one engineer and 100+ repositories. What the agents decide, what they never do, and the documented auto-merge that merges red checks.

#AI #AI Agents #DevSecOps #Platform Engineering +4 more

2421 words 12 min read

Cover image for AI Agent Governance — One Engineer, Over a Hundred Repositories and the Decisions No Agent Makes

AI Reviews That Read Nothing — Thirty-Four Verdicts in a Hundred

2026-10-06

AI & MLOps

A third of the images my fleet pins would have had their next AI review written against nothing. How to prove what an AI review read before anyone acts on it.

#AI #LLM #DevSecOps #Security +4 more

4504 words 23 min read

Cover image for AI Reviews That Read Nothing — Thirty-Four Verdicts in a Hundred

Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image

2026-04-22

DevOps & Cloud

How I hardened a 1M-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8 — multi-stage build, cosign, SLSA provenance, non-root default.

#Docker #Container Security #DevSecOps #CI/CD +2 more

2629 words 13 min read

Cover image for Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image

#Supply Chain