Articles
Writing
Essays on why, guides on how, updates on what shipped.
- 2026-07-11Why MCPG existsGeneric API gateways treat the payload as opaque. Agent tool calls are the payload — so governing them takes a gateway that speaks MCP natively.
- 2026-07-10Minimalism as the moatagentd is 3 MiB, three dependencies, and no local code execution. That is not asceticism — it is the product strategy.
- 2026-07-09Keep secrets out of LLM trafficA practical guide to the mask → forward → rehydrate pattern: run SCRUBR in front of your LLM provider and stop shipping credentials to the model.
- 2026-07-07The lethal trifecta, gatedPrivate data, untrusted content, and external communication are individually fine and jointly fatal. The stack's job is to make the fatal combination structurally hard.
- 2026-07-05An OS where the agent is PID 1What changes when the sandbox is the whole machine: deterministic replay, zero egress by construction, and an agent that boots from USB in 30 milliseconds.
- 2026-07-03Giving AI agents real identityA guide to replacing agent API keys with short-lived cryptographic identities: run apd, enroll workloads secret-free, verify statelessly.