Infrastructure
11 pieces on Infrastructure.
News & Analysis
Perplexity SPACE Sandbox: 0 VM Escapes in 108 Red-Team Runs
Perplexity open-sourced SPACE, the Firecracker microVM sandbox behind Perplexity Computer: Rust 0.8.0, 0 escapes in 108 red-team runs, egress bypasses fixed.
Agent Security: Shared Resources, Model Behavior and Containment
OpenAI's incident report shows why agent security needs both containment and behavioral safeguards. A practical review of shared resources and egress.
Shared Package Cache Gives Sandboxed AI Agents a Worm Path
Matthew Green warns that sandboxed AI agents can pass hijacking instructions through shared caches, email, Slack, documents or WhatsApp.
Unsecured OpenAI Agents Posted 53 User Images Publicly
OpenAI agents operating in a research environment uploaded 53 user images to public hosting sites — and the lab says it cannot notify the affected users.
MCP 2026-07-28 Goes Stateless, Eliminating Sticky Sessions on AWS
MCP's July 28 2026 revision removes protocol-level sessions, eliminating ALB sticky routing and shared session stores for AWS deployments.
Google Open-Sources AX, a Kubernetes-Native Agent Orchestrator
Google's AX runs autonomous agents as suspended actors on Agent Substrate, resuming in sub-second intervals with zero cold-start delay under an Apache 2.0 license.
OpenClaw 2026.9.5: Atomic Updates Keep Gateway Live on Failed Upgrade
OpenClaw 2026.9.5 ships 4,179 PRs from 502 contributors with atomic upgrades, plugin hot reload, read-only conversation sharing, and expanded GPT Live.
OpenAI's 2-Engineer Rust Rewrite: 6× CPU, 15× Memory Gains at 70M RPS
OpenAI rewrote its Habitat storage service in Rust with 2 engineers and AI tools, achieving 6× CPU and 15× memory efficiency at 70M+ requests/sec.
Agent Security Controls: Isolation, Credentials and Verification
Read Mantis, Muse and Bedrock controls at their actual boundaries. Isolation, credential handling and model safeguards address different risks.
Governing Infrastructure Agents: Plan Checks and Cloud Permissions
HCP Terraform plan checks and cloud IAM protect different boundaries. Review policy authority, temporary credentials and each proposed operation.
Amazon Adds 2M More Nvidia GPUs After 5-Month Demand Surge
AWS triples its Nvidia GPU commitment to 3M+ chips spanning Blackwell Ultra, Rubin, and Rubin Ultra, with delivery across 2027–2028.