#platform-engineering — Public Fediverse posts

AI agents made writing code fast, but shipping product is still stuck behind the same old rituals and review queues. 🤖

If you throw a dozen agents at an unstructured process without governance, you do not get order, you just get faster chaos.

Workflows are the true unit of coordination that keep humans in control where judgment actually matters. 💡

👉 https://upsun.com/blog/workflows-not-agents-primitive/

#AIEngineering #DevOps #SoftwareDevelopment #PlatformEngineering

Adding a new service to your stack shouldn't take a ticket and a week of waiting. 💡

On SymfonyCloud, databases, caches, and other services are defined in a YAML file that lives right in your Git repo. Add a few lines, push, and the service is provisioned and connected automatically, no manual setup required.

Infrastructure that moves as fast as your code. 🚀

👉 See it in action: https://symfony.com/cloud/features
#Symfony #SymfonyCloud #PlatformEngineering

Status Report 2026-08-29 and Outlook for September\October 2026

Today we released Infinito.Nexus 13.0.0 with integrated Tor and .onion support. The release notes you will find here and the blog article about the functionality here.

https://www.youtube.com/watch?v=6czcc1gZ7Ak

This feature didn’t have a high business value, anyhow it allowed to clean up the architectural base for everything what comes now.

Anyhow here I want to give you insights into the Infinito.Nexus project and what’s planed.

Infinito.Nexus Core >= 14.0.0a

Email Software Replacement

From the current point of view at least 2 Major releases will arrive in the next month. The first one is the substitution of Mailu by Stalwart, implemented by Alejandro. This is necessary due to the deprecation of Mailu itself.

https://www.youtube.com/watch?v=lJqtQG6lmc4&t=24s

The release state and the related discussion you can follow here .

AI Integration

The other release is, let’s call it the “AI” release. Long story short:
Infinito.Nexus will allow the use and the integration of AI, local and external models in almost all SaaS applications. It will also allow the Integration in Software via MCP.

Lite LLM

All applications which support AI like OpenWebUI, WordPress, Nextcloud, Matrix etc. will have an inteface which connects to an Lite LLM Gateway. The Lite LLM Gateway will allow the use of local models like Qwen, Gema etc. Besides this it’s possible to integrate OpenRouter or e.g. Anthropic or OpenAI etc.

https://www.youtube.com/watch?v=nQCOTzS5oU0

So enterprises which use Infinito.Nexus can decide by themself if they prefer to use their local AI and models and keep everything on their infrastructure or if they prefer to use external proprietary models.

The customer has the choice about the level of data sovereignty they want to keep and the infrastructure which they want to setup.

MCP

https://youtu.be/eur8dUO9mvE?si=vTJW30tCZz2ZdUD6

The second AI related topic is the integration of MCP into all kind of applications.

It’s already in progress since a few weeks and my agents are working on this 24h. Relevant in this context is the security aspect.

Similar to the Infinito.Nexus 13.0.0 TOR Release, the MCP Release will have a high impact on security and MUST due to this reason be declared as PoC. Why?

In my understanding you can’t easily implement RBAC into MCP clients.
So my current implementation works like this;

You have per Infinito.Nexus application two MCP RBAC groups:

• Reader
• Writer

If one is part of the reader group they can read all of the application data via Open WebUI and if one is part of the Writer group they can modify all of the data via Open WebUI.

https://www.youtube.com/watch?v=VNPMl8oOzHU

This is off course highly dangerous. It may makes sense to give people reading rights, but in consequence this means that they can access and utilize all of the users data via an AI.

We don’t have to talk about that this goes against any kind of data protection regulations and is a hard invasion into the privacy of your platform users.

Anyhow there are scenarios in which it may makes sense.

E.g. let’s assume you’re fully virtual organisation and you don’t have humans employed, but instead on your Infinito.Nexus platform just bot and agents account exist;

In this scenario if you have reading and writing rights you’re de facto in the “God Mode” in which you can instantly see what your agents are doing.

An example is if you use it e.g. with AgentCrew (WiP). You can orchestrate Agents and AI on a way you can’t imagine. AgentCrew I will explain in the next paragraphs.

Also if it’s in the current state absolutely not recommended to activate the MCP functionality, it doesn’t mean it must be like this in the future. Like I said currently it’s seen as PoC and the full MCP compatible RBAC implementation isn’t impossible, it just will take a lot of human resources, because for every part of the Infinito.Nexus software we need humans which take responsibility for the code.

“We stay in the loop” – We aren’t controlled by AI, instead we’re the masters. In consequenz this means that the full RBAC MCP will be implemented as soon as we have sufficient customers which request it and developers which can manage it intellectually to implement a clean architectural solution.

i18n

Besides the AI topic there is one key thing missing in the Infinito.Nexus Core Repository, but also in the Store and this is the implementation of the 184 ISO 639-1 into our software solution.

The software was primarily designed with German customers and the debate about digital sovereignty of European and especially German enterprises from American Big Tech in mind. Still some frontend elements like the dashboard just supported English as language.

The implementation of German is off course an hard requirement before it can be distributed and promoted on the DACH market. Actually I figured out that there is a easy design pattern to implement this, so part of the 14/15th major release will also be the support of all 184 ISO 639-1 languages.

Infinito.Nexus Store

Besides the Core development the AI Agents of course worked in the last weeks on implementing the store.

Theoretically the store is ready. Off course there are a few issues but overall I think it’s heading in the right direction.

Somewhere in the next weeks I will release a beta version of the store, but before we use it in production there needs to be a deeper security audit.

The store itself is from my point of view at the current situation the weakest part in the security chain and could be used by attackers as entry point into our system. So I don’t feel confident yet to release it, but I have some ideas in my mind how I can use AI supported attacks against the store to penetrate the system and to find all loopholes.

Besides this the API’s for auto-provisioning of enterprise infrastructure are currently just implemented as mocks.

The reason therefore is again a resource issue on my side. To implement them, do the billing etc. I need people in the back office which take care about the bureaucracy and right now we’re just a bunch of programmers.

So the bottleneck since the start of this project is still to have people in the back office, administration and on the business side which could take over tasks like this. Currently we don’t have anybody for this tasks.

Agentic Projects

Besides Core and Store there are two other IT projects which I want to mention.

AgentBox

The first one is AgentBox. The idea behind AgentBox is to encapsulate the agents which work on your code in an highly isolated environment.

This is necessary due to the reason that the agents are currently working in sandboxes like the one which Claude ships onboard, but they can easily break out. It’s just a question of will.

If the agent decides that they want to break out they can break out and can take control over your system. Due to this reason I’m working on a better cage to keep them isolated. I first will use this as part of the Store aka. GUI repo and as soon as I feel confident I will also “box” all of my other repos.

It will be part of PKGMGR so that I can setup and develop new solutions much faster and much safer then ever before.

AgentCrew

The second one is AgentCrew. AgentCrew addresses the problem, that this project requires a lot of people to run and set up a business.

A few weeks ago, during a chat with Amadeus, we talked about that there are existing frameworks like ITIL, SAFe, etc. which describe in detail how to set up an Enterprise Organisation.

With AgentCrew you decide for a framework, define framework roles, characters and the related LLM to use. All people which are normally human beings are replaced by an agent and they will take over the roles.

Due to the reason that not all of the roles need the same capabilities it’s possible to give some agents lower models and other agents better models. In kombination with OpenRouter and local LLM’s you can scale up an organisation for very low costs.

The advantage for us as Infinito.Nexus team is, that we developed the infrastructure tool to give every agent their own account with all tools which they need. Let it be developing tools like gitea\GitLab\jenkins, project management tools like Taiga\OpenProject, cloud access via Nextcloud etc.

Infinito.Nexus can be the base to setup fully autonom working agentic teams.

I will focus on AgentCrew as soon as the store is ready, because then we need urgently agents in the back office, distribution etc.

Business Strategy

The strategy stays the following; The focus is on finishing the core like mentioned above.

Parallel the development of the store continous.

As soon as the store is ready I will contact all people in our CRM system.

Besides this is would be good to get some low level investment. We have now a ready product. A little money as an catalyst to enlighten the engine for digital sovereignty would make our life much easier, but it will also work without it.

The advantage which we have is that as soon as the store is standing and the API’s are integrated we have an scalable product with almost non fix costs, so we can beat all of our competitors by price.

Besides this it’s almost impossible that a real competitor raises.

And now you ask me the question:

Why? Kevin hadn’t you been an hypocrat? Didn’t you tough in your position as agile coach that you find customers and develop a project dependent on their needs and scale up your business by realizing what your customer needs from you?

I can tell you it would had been impossible.

If we would have customers already, we couldn’t had developed an clean architectural solution. We would had acquired a huge amount of technical debt due to the reason that we would had been required to maintain outdated infrastructure and couldn’t implement the radical architectural design which was necessary to implement a tool which can compete in the times of AI with the other companies.

A lot of businesses will fail in the next month and years. The reason therefore is that they vibe coded bad software which is unmaintainable. Our solution is as well designed as as Rolex and usable like a Swiss Pocket Knife.

I don’t know any other software company which delivers such an high quality like we’re doing and we can dump the price almost as low as we like.

Vibe Coding and Agentic Engineering

https://www.youtube.com/watch?v=PbsocBPkoUc

One last sentence I would like to mention concerning vibe coding and agentic engineering and how I apply both practices. So you have an idea how I could realize such an project.

I would say in general I use classical software engineering practices.

• Writing well defined requirements documents\ADR witch AC
• Writing test for them
• Let the AI iterate against the tests until all of them pass

The AI works in general autonomously. I inspect the code before commiting and steer the AI in the right direction.

With a lot of the implementations I don’t have any glue at the beginning of the feature how to realize this exactly. This counts e.g. for the docker swarm implementation, the tor implementation, but also the current MCP implementation.

So I let the AI turn wild but I question critically the output and the modifications. The most of the time I have at least 3 agents parallel running which are working on different topics.

Still I need to review all of the code and I feel responsible to understand what the agents are doing. I have the final say about the best approach.

This means that in the last month I still had my 16 hour days just reviewing, deciding and understanding what’s going on, besides that the AI is working parallel 24/7.

I really look forward to the point when this isn’t my daily business anymore.

I hope anybody who is interested in it has now a betting understanding where the project stands, what final challenges have to be tackled and where we will stand in approx. 2 month.

Most teams evaluate AI agents on how fast they write code, while completely ignoring where those agents actually run.

Running agents locally on a developer laptop hands them sensitive credentials and invisible access with zero central audit logs.

It is time to contain the blast radius before your experimental tools turn into a serious governance nightmare.

👉 https://upsun.com/blog/agent-security-where-agents-run/

#AISecurity #DevOps #PlatformEngineering #CloudNative

Shift-left & DevOps have accelerated software delivery - but also increased cognitive load and duplicated effort across testing, security, and maintenance.

John Keates explores how to rightsize developer platforms and align them with engineering culture to reduce cognitive load and deliver change faster.

🔗 Read the #InfoQ article: https://bit.ly/3UjlI75

#PlatformEngineering #DeveloperExperience #EngineeringCulture #SoftwareDelivery

🚀 Platform Engineering Monthly #38 is out!

🗄️ PBS risks losing 70 years archives
🔓 81% of EKS clusters still exposed
⚠️ AsyncAPI supply chain compromised via Actions
🤖 Kubernetes bans unexplained AI PRs

📖 Read & subscribe → https://pemonthly.com/p/platform-engineering-monthly-august-300

#PlatformEngineering #DevOps

What if every Git branch came with a full clone of your production environment: code, data, and services included?

That is what Upsun's preview environments do. And it is one of the capabilities independently mapped in the IDC ProductScape: Worldwide Cloud Deployment–Centric Application Platforms, 2026.

👉 Get the complimentary excerpt: https://upsun.com/2026-idc-productscape-upsun/

#IDCProductScape #PlatformEngineering #SoftwareDelivery

Learn how Internal Developer Platforms (IDPs) extend DevOps by reducing cognitive load, standardizing workflows, and enabling self-service software delivery. https://hackernoon.com/are-internal-developer-platforms-idps-the-new-devops #platformengineering

We know that platforms with breadth bring more benefits, but only if the breadth is a response to real problems. We don't just want "more pizza" we also care about the toppings.

#PlatformEngineering #Feedback

Testing code against idealized mock data validates the expected case but completely misses the chaotic entropy of a true production environment.

Databases accumulate real-world complexity over time like character encoding anomalies and query patterns that can trigger full table scans.

Closing the gap between a clean QA environment and production scale data is how you achieve true release confidence.

👉 https://upsun.com/blog/production-data-testing-vs-mock-data/ #PlatformEngineering #DevOps #Database #SoftwareTesting

When a project timeline slips, the default reflex is often to hire more engineers or throw more tools at the problem.

True leverage comes from standardizing the operational logic between your engineering teams rather than optimizing inside them.

Discover how platform standardization helps you eliminate the hidden factory and deliver on your actual business objectives.

👉 https://upsun.com/blog/how-platform-standardization-improves-engineering-kpis/

#PlatformEngineering #DevOps #EngineeringLeadership #InternalDeveloperPlatform

Is Platform Engineering just DevOps with a new badge?

Shweta Vohra shares a surprising reaction from a recent talk: 70% of the room said Platform Engineering is simply a rename of DevOps.

🔹 2010: "We need DevOps"
🔹 2018: "We need Kubernetes"
🔹 2026: "We need Platform Engineering"

💡 The Bottom Line: The label matters far less than the outcome. Focus on self-service capabilities, clear architectural boundaries, and reducing cognitive load for better Developer Experience - not just collecting new titles.

🎧 Hear more from Shweta in the Cloud & DevOps InfoQ Trends Report 2026 podcast 👉 https://bit.ly/4wUwGy5

#PlatformEngineering #DevOps #DeveloperExperience #SoftwareArchitecture

CNCF Campinas SP - Meetup Presencial

Laboratório Hacker de Campinas, quarta-feira, 30 de setembro às 18:00 BRT

🚨 Campinas e Região, prepare-se. Tem coisa nova chegando na comunidade Cloud Native!

No dia 30 de setembro, quarta-feira, às 19h, a CNCF Campinas SP volta a se reunir presencialmente.

E dessa vez, em um novo espaço:

📍 LHC - Laboratório Hacker de Campinas

👀 Quem serão os palestrantes?
🤔 Quais serão os temas?
🔥 O que estamos preparando?

Por enquanto, vamos deixar algumas respostas no ar...

Mas se você gosta de Cloud Native, Kubernetes, DevOps, Platform Engineering, SRE, IA e tecnologia, já pode marcar essa data na agenda.

Uma coisa podemos garantir: vai valer a pena estar presente.

E tem um detalhe importante que precisamos compartilhar com a comunidade.

⚠️ Estamos enfrentando cerca de 50% de NO SHOW nos nossos eventos presenciais.

Isso significa que metade das pessoas que garantem uma vaga acaba não comparecendo.

Por isso, fazemos um pedido especial:

👉 Inscreva-se somente se realmente puder comparecer.

Sua presença faz diferença. Para a comunidade, para os palestrantes, para o espaço que nos recebe e para que possamos continuar trazendo encontros cada vez melhores para Campinas.

📅 30 de setembro - quarta-feira
🕖 19h
📍 LHC - Laboratório Hacker de Campinas

🎟️ Em breve divulgaremos os detalhes e o link de inscrição.

👀 Fique de olho.

Porque talvez essa seja uma daquelas noites que você não vai querer perder.

CNCF Campinas SP - comunidade, conhecimento e tecnologia construídos juntos. 🚀

#CNCFCampinas #CNCF #CloudNative #Kubernetes #DevOps #PlatformEngineering #SRE #AI #Campinas #ComunidadeTech

https://eventos.lhc.net.br/event/cncf-campinas-sp-meetup-presencial

Some of the most successful platforms are invisible.

They work like magic and don't get the credit for all the positive effects they have.

That's all wonderful until the person with the budget makes a giant mistake.

#PlatformEngineering #DevOps

Once you run out of AI tokens - is the workday over?

Matt Saunders highlights the funny - and expensive - reality of modern AI adoption:

“Once we’ve used our token budget, should we just go home? Is our work done?”

🔹 2016: "Track your server costs"
🔹 2021: "Track your cloud bill"
🔹 2026: "Track your AI token usage"

The lesson? AI can boost developer productivity, but unmanaged usage burns through budgets fast. The focus should be on usage policies, FinOps visibility, and measurable ROI - not unlimited prompt generation.

🎧 Hear more from Matt in the Cloud & DevOps InfoQ Trends Report 2026 podcast 👉 https://bit.ly/4wUwGy5

#DevOps #PlatformEngineering #FinOps #AI #TechLeadership #InfoQ

Shift Left vs Shift Down: Rethinking #PlatformEngineering https://tapasjena.com/shift-left-vs-shift-down-rethinking-platform-engineering-fd98788e8c2e

Most security audits focus heavily on application code but completely miss the delivery layer where avoidable failures actually live.

When environments match poorly and deployments are manual, you introduce massive unpredictability before a single line of code even runs.

Moving your infrastructure definition into version control and automating those steps is the easiest way to prevent silent gaps like configuration drift.

👉 https://upsun.com/blog/security-reliability-delivery-model-weak-points/

#PlatformEngineering #CloudNative #DevOps

We have all been there on a Friday afternoon when a feature is ready to test but the shared staging environment is occupied or completely broken.

Shared staging creates a massive serialization bottleneck that forces your parallel development to become sequential.

By automatically provisioning Git-driven preview environments for every branch, you can completely dissolve the queue and close the gap with production. 🚀

👉 https://upsun.com/blog/staging-bottleneck-preview-environments/
#PlatformEngineering #DevOps #CloudNative

The cheap era of AI is over, and it is not coming back.

GPU rental up 48% in two months. Peak-hour throttling by design. Every turn rereads the whole context, and output costs 5x input.

Stefan Wolpers frames token discipline as personal skill. I go further: you cannot run an org on individual willpower. Cost has to be visible and governed by design, not after the fact.

https://age-of-product.com/token-economics-2026/

#AIFinOps #TokenEconomics #PlatformEngineering

My talk proposal for #NixCon has been accepted! I'll be presenting at #NixCon2026 on how to bring #Nix's functional purity to #CloudNative #PlatformEngineering.
We'll move beyond #Helm templating and #Docker builds to derive reproducible #Kubernetes deployments using #Kubenix and #NixOS modules, unlocking hermetic builds, accurate #SBOM⁠s, and truly auditable infrastructure.

Feel free to reach out if you have a specific use-case to be covered, I'd love to hear from you!

https://www.arik-grahl.de/talks/nixcon-2026

Code isn't the bottleneck anymore. In this episode of our new series, Product Highlights, our Director of Product Marketing, Greg Qualls, sits down with Principal Engineer Patrick Dawkins to discuss what it actually takes for teams to build with AI, drawing on lessons from Upsun Dispatch. 😎

His take on workflows as a core primitive for AI-assisted teams is worth your seven minutes. 🎥

👉 Watch the full conversation: https://www.youtube.com/watch?v=FapZan4QKpg

#ProductHighlights #AI #PlatformEngineering

Every IT leader running distributed engineering teams eventually hits the same wall when trying to standardize app delivery.

Lock things down too tightly and developers find workarounds, but leave it too open and you end up governing a dozen undocumented paths to production.

When the standard path becomes the fastest path, compliance automatically becomes the default choice for your teams. ⚡

👉 https://upsun.com/blog/standardize-app-delivery-across-multiple-teams/

#PlatformEngineering #DevOps #SoftwareEngineering #ITGovernance

AI makes the first version of a feature cheaper. That changes product architecture, not only delivery speed.

I wrote about a three-layer model: an owned core for invariants, a contract layer for guarded capabilities, and a replaceable edge for customer workflows and integrations.

https://www.the-main-thread.com/p/ai-product-architecture

#SoftwareArchitecture #AIAgents #PlatformEngineering

How do you migrate 3 monoliths to 120+ microservices without a dedicated migration budget?

A payroll & HR software team pulled it off over 5 years with a single strategy: The Hard-Stop Rule.

💡 Instead of modifying the old monoliths, every new feature was built as its own standalone service.

The #InfoQ article covers:
🔹 Pull-based migration architecture
🔹 Cost-saving deployment tactics
🔹 Key tools & hard-learned lessons

📰 Read the case study: https://bit.ly/44R1GTt

#Microservices #Azure #PlatformEngineering #SoftwareArchitecture

Most engineering teams are careful about tracking feature velocity, but they completely miss the hours lost to manual environment drift and repetitive maintenance tasks.

By automating provisioning and environment scaling with a dedicated platform like Upsun, you can finally give your developers their time back to build features that actually move the business forward. 🚀

👉 https://upsun.com/blog/engineering-time-lost-to-infrastructure/

#DevOps #PlatformEngineering #CloudComputing

Everyone is fixated on large language models and autonomous AI agents right now.

The models are merely the catalyst that shows what is possible, while the actual revolution relies on the infrastructure built around them.

Discover why infrastructure is the canal that connects code to the world and makes the cognitive industrial revolution real. 👉https://upsun.com/blog/why-the-ai-era-belongs-to-infrastructure/

#PlatformEngineering #CloudInfrastructure #DevOps #GenerativeAI

Developers should spend their time building software, not managing infrastructure.

That is the idea Upsun has been built around since day one. And it is the same idea that earned us our first inclusion in the IDC ProductScape: Worldwide Cloud Deployment–Centric Application Platforms, 2026.

👉 Get the complimentary excerpt and see how Upsun's capabilities are mapped: https://upsun.com/2026-idc-productscape-upsun/

#IDCProductScape #AIEngineering #PlatformEngineering

🚀 Platform Engineering Monthly July 2026 is out!

✈️ Airbus walks away from AWS
🎯 Codecov, Cordyceps — CI/CD keeps being the attack surface
💸 An AWS billing alert for $140B (yes, really)
🌍 Data sovereignty is now an architecture constraint, not just policy
🚦 Ingress-NGINX retirement — migrate or panic

📖 Read & subscribe → https://pemonthly.com/p/platform-engineering-monthly-july-d06

#PlatformEngineering #DevOps