Kubernetes
How to collect Kubernetes compliance evidence for auditors
Pair Kyverno policy reports, which show current state, with the API server audit log, which shows history. Reports alone are not an audit trail by themselves.
6 min read
Founder & VP Product, Nirmata
Ritesh Patel
Ritesh Patel is a founder of Nirmata and leads its products. He writes about governing AI coding agents, MCP security and Kubernetes policy as code.
268 posts · Page 2 of 23
AI
How to allowlist MCP servers in Cursor
Allowlist MCP servers in Cursor by command or URL pattern in the team dashboard, then limit tools and network access for each server. Enterprise plans only.
6 min read
AI
Cursor rules vs enforced policy: what stops an agent
Cursor rules are guidance, not enforcement. Learn which Cursor controls block a tool call or command, which only advise, and how to configure each one of them.
8 min read
AI
Measuring the value of AI coding agents
Claude Code's docs count usage, cost, PRs and accepted lines, not value. Record an outcome baseline before rollout, then compare the vendor counts against it.
5 min read
AI
How to onboard 1,000 developers to Claude Code without manual setup
Onboard many developers to Claude Code with one managed policy, delivered by server, MDM or file, then checked per machine with /status and claude doctor.
5 min read
AI
How to govern Claude Cowork in the enterprise
Govern Claude Cowork with managed keys for egress, folders and tools, per-group policies, OpenTelemetry export and Compliance API transcript retrieval.
7 min read
AI
Using Claude on Amazon Bedrock with Claude Code and Cowork
Set up Claude Code and Claude Cowork on Amazon Bedrock with AWS sign-in, pinned model IDs, a managed model allowlist and the IAM policy that each one needs.
10 min read
AI
How to run Claude Code in a sandbox
Turn on Claude Code's Bash sandbox, set its file and network limits, or run the whole session in a dev container. Settings and commands from the docs.
7 min read
AI
Governing Claude Code, Cursor and Copilot with one policy
Claude Code, Cursor and Copilot each have different admin controls. Compare their permissions, MCP, hooks and network limits, and see where each one stops.
8 min read
AI
Prompt injection defense for agents: what actually works
Prompt injection defense for agents that holds: deny rules, hooks that exit 2, sandboxed shell and MCP approval, each with the limits its docs spell out.
7 min read
AI
How to cap AI coding agent spend per developer
Cap AI coding agent spend per developer with per-member limits, gateway caps by day, week or month, Copilot per-user budgets and a per-run dollar flag.
7 min read
AI
AI coding agent security risks (and the controls for each)
The main risks of AI coding agents, from prompt injection to leaked secrets and unvetted MCP servers, each paired with a control and the point where it stops.
5 min read