Skip to main content

Posts

How to Move AI SRE Agents From Demo to Production

An AI agent that works on an engineer’s laptop can feel like a breakthrough. It can read logs, query observability tools, inspect cloud resources and connect a failed deployment to a bad configuration change in minutes. For a single investigation, under close human supervision, that is real progress. It is also the easy part. The hard part is making that same capability available across production environments. On a laptop, an agent does not have to manage concurrent sessions, preserve investigation history, control token spend or enforce scoped permissions. It can act with borrowed access and temporary context. The same setup can break down quickly once the agent becomes part of real incident response. In production, the agent has to keep working after the first session, leave behind evidence others can trust, and stay inside the access, cost and automation guardrails the business has set. A Supervised Session Is Not a Production System Local agent frameworks make experimentation...
Recent posts

The DevOps Standard Gives Teams a Shared Model for Software Delivery

A release can pass every pipeline check and still leave an organization uncertain about whether to proceed. Security evidence may exist in another system, the recovery plan may be incomplete, and nobody may own the final decision. The difficulty lies in how the delivery system connects its capabilities and responsibilities. The new DEVOPS INSTITUTE Official Book: The DevOps Standard , published by PeopleCert on October 1, 2026, addresses that problem with a vendor-neutral definition and operating model. It gives practitioners a shared reference for examining delivery across organizational boundaries, including AI-assisted work. It helps teams identify which capability needs attention and what evidence would demonstrate improvement. I served as the book’s lead contributor. PeopleCert and many professionals who reviewed the material helped shape a reference intended for use across different organizations and technology environments. The question is how that reference changes ever...

From Software Supply Chains to AI Vulnerabilities: Why Neither Solves Enterprise Linux Security

For nearly a decade, cybersecurity has been dominated by one overarching concern: securing the software supply chain. Organizations invested heavily in Software Bills of Materials (SBOMs), artifact signing, provenance frameworks, reproducible builds, and vulnerability scanners capable of identifying compromised dependencies before software reached production. The software supply chain became the industry’s focal point, accelerated by incidents such as SolarWinds, Log4Shell, XZ Utils, and the increasing sophistication of nation-state attacks targeting open source ecosystems. Today, however, the spotlight has shifted once again. AI models, autonomous agents, prompt injection attacks, model poisoning, insecure MCP servers, and malicious agent interactions have become the new security frontier. Vendors are rapidly introducing AI security platforms capable of monitoring prompts, identifying unsafe agent behavior, validating tool usage, and detecting model vulnerabilities. This trans...

IBM Moves Its Bob Coding Agent Inside the Firewall

Plenty of enterprises want AI coding agents. Fewer are willing to send their source code to someone else’s cloud to get them. That tension has slowed adoption at banks, insurers, government agencies and other organizations that build software under strict rules about where code and data can live. IBM is betting a self-hosted option will help close the gap. This week, the company announced that IBM Bob, its agentic software development platform, can now run on-premises, in private clouds, in sovereign clouds and in fully air-gapped environments. IBM made Bob generally available as a SaaS offering in April. At the time, it said on-premises deployment would come in a future release. That release is now here. Bob is meant to do more than complete code. IBM pitches it as a partner across the software development lifecycle, from planning and design through coding, testing, deployment, and modernization. It coordinates specialized agents for code, tests, documentation, and pipelines. ...

AWS AI Agent Surfaces Recommendations to Optimize Cloud Computing Environments

Amazon Web Services (AWS) today made available a preview of an artificial intelligence (AI) agent that surfaces recommendations to optimize cost, security, performance and resilience based on the business objectives an organization defines. Jill Fariss, vice president of AWS Support, said the AWS Well-Architected Agent generates code that can be implemented via a command line interface (CLI), an infrastructure-as-code tool or some type of runbook automation. The overall goal is not to eliminate the need for humans to manage IT infrastructure but rather make it simpler for engineers and IT administrators to manage workloads at much higher levels of scale, added Fariss. That capability is critical because most organizations today simply don’t have enough IT staff to effectively manage and optimize the workloads they currently have deployed, an issue that is only going to be further exacerbated as advances in AI make it possible to build and deploy even more applications, she noted. Th...

Introducing Futurum Media: Why Futurum, Why Now?

I am a builder. My career has spanned the rise of the commercial internet, web hosting, application service providers, managed infrastructure, security, DevOps, cloud native computing, platform engineering and now AI. Through all of it, I have been a builder and a leader. I didn’t think, after all these years, I would be building again quite like this. But in the age of AI, we can all be builders. I am happy to be doing this. Today, The Futurum Group is launching Futurum Media , bringing Techstrong, Tech Field Day and Visible Impact together into a go-to-market execution business. It becomes the umbrella for Futurum’s editorial properties and media services, backed by the broader organization’s research, intelligence and expertise. For those of you who read DevOps.com and our other publications, participate in our programs or work with us, here is why I believe this is a significant next step. A Community Worth Building On DevOps.com grew alongside a community changing how softw...

Survey Surfaces Sharp Increase in Amount of Code Written by AI

A global survey of 705 developers and IT leaders finds 42% of respondents reporting that artificial intelligence (AI) now writes at least half their code, with only 21% of developers now spending more than half their week writing new code from scratch. Conducted by BairesDev, a provider of software development services, the survey also finds nearly 80% of developers now spend less than half their week coding. As a result, developers on average are saving 13 hours a week on coding, allowing them to devote more time to reviewing AI output (67%) and debugging it (52%). Developers are also now spending, on average, nine hours a week learning AI tools and new technologies. That investment appears to also be paying off, with AI tool fluency (29%), system architecture (20%), and human skills (15%) expertise driving pay increases for developers, the survey finds. A full 86% of respondents also report they now find their role in their organization more fulfilling, according to the survey. I...