Posts
All the articles I've posted.
AgentCore Gateway Is a Control Plane, Not Your Governance System
Published: at 11:00 AM (10 min read)Define where AgentCore Gateway authorization ends and tenant isolation, business approvals, and transaction safety begin for multi-tenant AWS agent platforms.
What I Got Wrong About Letting an AI Agent Write SQL
Published: at 11:00 AM (13 min read)Five days after I published a design for giving an agent governed SQL access, I threw most of it away. What made me stop, what the first end-to-end test of the replacement showed, and the rules I would follow next time.
AWS Is Not Your Agent's Shell
Published: at 11:00 AM (13 min read)Coding agents make change cheap. On AWS, the real platform challenge is making every change scoped, reviewable, observable, and recoverable.
Enterprise Observability Platform Analysis: Governance, Architecture, and Security — with an OpenObserve AI-Era Update
Updated: at 12:00 PM (30 min read)An enterprise observability comparison of Sentry, SigNoz, and New Relic, updated with a sourced OpenObserve AI/LLM observability addendum covering OpenTelemetry, agents, evaluations, and governance boundaries.
Your AI Agent Can Write SQL. That Was the Easy Part.
Published: at 11:00 AM (11 min read)Letting an agent query a multi-tenant ERP raises two questions that look like one. "May it see this row?" belongs to the database. "Does this number mean what the user thinks?" belongs to something else. Both fail silently.