AI
How to audit what your AI coding agent did
Audit Claude Code with OpenTelemetry tool_decision and tool_result events, plus hooks that keep a local copy. Refusals show in tool_decision, never tool_result.
5 min read
Blog
504 posts · Page 4 of 42
Kubernetes
NIST 800-53 controls for Kubernetes: a mapping guide
Kubernetes policy can evidence NIST 800-53 controls on privileged pods, RBAC, Secrets and images. It can't show a control is met; only an assessor can.
6 min read
AI
How to track AI coding tool cost per developer
Track Claude Code cost per developer with OpenTelemetry identity and contracted rates. Copilot shows cost per developer in its dashboard. Budgets set the cap.
9 min read
AI
How to investigate an AI agent incident
Rebuild what an AI agent did from logs with trusted timestamps, and detect later edits with digests kept away from the logs they cover, not beside them.
7 min read
AI
How to stop Claude Code from reading secrets and .env files
Block Claude Code from reading .env and secret files with Read deny rules, a PreToolUse hook and sandboxing, and see which reads each layer misses, and why.
6 min read
AI
How to find MCP servers in your codebase and clusters
Find MCP servers in repos with .mcp.json and claude mcp list, then in clusters by listing pods and images. Covers scopes, approvals and shadow servers.
6 min read
Kubernetes
How to document policy exceptions as audit evidence
Record a Kyverno PolicyException as audit evidence: its policy and resource scope, the approver and expiry, and the PolicyReport entry that proves it applied.
6 min read
AI
How to audit MCP tool calls
Audit MCP tool calls in Claude Code with OpenTelemetry tool events and OTEL_LOG_TOOL_DETAILS=1, plus hooks that record each server's source and denied calls.
6 min read
AI
Claude Code managed settings for enterprises
Claude Code managed settings sit above every developer file. Deploy managed-settings.json per OS or through MDM, check it with /status, then lock the rules.
7 min read
Kubernetes
SOC 2 controls for Kubernetes you can automate
Kubernetes policy can automate SOC 2 checks on privileged pods, Secrets, RBAC, service account tokens and images. It can't cover access reviews or approvals.
4 min read
AI
How to route Claude Code through an AI gateway
Point Claude Code at an AI gateway with ANTHROPIC_BASE_URL and a gateway credential, verify it with curl and /status, then roll it out with managed settings.
6 min read
AI
How to control MCP servers in GitHub Copilot
Control MCP servers in GitHub Copilot with the MCP policy, registry-only mode, managed-settings allowlists and cloud agent settings. See where each one applies.
5 min read
Stay up-to-date with the latest in AI, governance, and infrastructure
Subscribe to our free monthly newsletter to get industry news, DevOps tips, and articles right to your inbox on Kyverno, containerization, Kubernetes deployment & management and more.