Software Architect | Writer | Board Game Designer | Husband | Runner | Man with many talents, but no sense how to use them.
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Craig Risi
CircleCI、AIコーディングワークフローにCI検証機能を直接組み込む「Chunk Sidecars」を導入
InfoQ ホームページ ニュース CircleCI、AIコーディングワークフローにCI検証機能を直接組み込む「Chunk Sidecars」を導入 原文リンク(2026-06-19) CircleCIは、「Chunk Sidecars」という新機能をリリースした。これは、CIスタイルの検証をAIコーディングエージェントの内部開発ループに直接組み込むことを目的としたものだ。この機能により、AIエージェントがコードをコミットしたりCIパイプラインにプッシュしたりする前に、テスト、リンティング、フォーマット、検証し、高速で事前設定済みのクラウド環境が提供される。 CircleCIによると、このアプローチは、AIを活用したソフトウェア開発において新たに浮上している最大の課題の一つ、すなわちAIの速度で生成されたコードを、同じ速さで検証できるように対応するものだ。...
GitHub Actions Runner Controller 0.15.0 Targets Reliability at Scale
GitHub has released Actions Runner Controller (ARC) 0.15.0, introducing reliability, scalability, and observability improvements for organisations running self-hosted GitHub Actions runners on Kubernetes. The October 1 release focuses on reducing unnecessary Kubernetes API requests, improving controller throughput and making upgrades and shutdowns more predictable, particularly for environments managing large numbers of runner scale sets.
Grafana Applies SLOs and Error Budgets to AI Agent Behaviour
Grafana Labs is proposing a familiar reliability engineering approach for one of the less familiar problems in modern software: how to measure whether an AI agent is actually behaving well. In a recent article, the company describes using evaluations, service-level objectives (SLOs) and error budgets to turn behaviours such as hallucination, task fulfilment, toxicity, and cost into measurable targets that can be monitored over time.
AWS Reworks EventBridge Custom Buses for Enterprise-Scale Event-Driven Architectures
AWS has introduced an enhanced Custom Event Bus for Amazon EventBridge, targeting a problem that often emerges when event-driven architectures move beyond a single team or AWS account: the event infrastructure itself becomes fragmented. The new model allows organisations to create a single event bus shared across multiple AWS accounts, while adding native event ordering, retention and replay, content-based deduplication, simplified subscriptions and a new pricing model.
CircleCI Makes Machine Runner Orchestrator Generally Available
CircleCI has made its Machine Runner Orchestrator 1.0.0 generally available, providing automated scaling of self-hosted machine runner virtual machines according to CI workload demand. The release expands the earlier Runner Provisioner preview with support for CPU, GPU, and ARM workloads from a single deployment, as well as Kubernetes environments running on GKE, AKS, and EKS, alongside KubeVirt-based clusters.
OpenTelemetry、エンタープライズ向けオブザーバビリティの導入を簡素化する「Blueprints」イニシアチブを開始
InfoQ ホームページ ニュース OpenTelemetry、エンタープライズ向けオブザーバビリティの導入を簡素化する「Blueprints」イニシアチブを開始 原文リンク(2026-06-02) OpenTelemetryは、大規模なオブザーバビリティシステムの導入・運用における複雑さの増大を軽減することを目的とした、新たな「Blueprints」イニシアチブを発表した。 このイニシアチブは、組織がKubernetes、インフラストラクチャ、アプリケーション、クラウドネイティブ環境全体において、より一貫性があり、運用持続可能な方法でOpenTelemetryを導入できるよう支援することを目的とした、具体的なガイダンス、アーキテクチャパターン、およびリファレンス実装を提供する。 この発表は、大規模な OpenTelemetry 導入に伴う運用上のオーバーヘッドに苦慮している企業やプラットフォームチームからのフィードバックの高まりを反映したものだ。OpenTelemetry はテレメトリ収集およびオブザーバビリティにおける主要なオープン標準となっているが、組織は SDK...
OpenTelemetry Makes Kubernetes Attributes Processor Stable as Observability Schema Matures
OpenTelemetry has promoted its Kubernetes Attributes Processor to v1.0.0, marking a significant step in making Kubernetes telemetry more predictable and stable across observability pipelines. The processor enriches logs, metrics, and traces with Kubernetes metadata, and its graduation means the component now meets OpenTelemetry's stability requirements around testing, benchmarking, documentation, and telemetry.
AWS インフラストラクチャの複雑化に伴い、Terraform AWS Provider は急速な拡張を続ける
InfoQ ホームページ ニュース AWS インフラストラクチャの複雑化に伴い、Terraform AWS Provider は急速な拡張を続ける 原文リンク(2026-09-11) Terraform AWS Providerは急速な進化を続けており、v6.62.0では新しいAWS機能への対応が追加されるとともに、 Terraformによる既存インフラの認識および管理能力が改善された。2026年8月にリリースされた最新バージョンでは、Amazon DSQL、ECS、ECR、SES、Pinpointなどのサービス向けに新しいリストデータソースやリソースが導入された。また、Bedrock AgentCore、CloudFront、ElastiCache、Resilience Hub、Secrets Manager に対するさらなる機能強化も行われている。 これらのリリースの重要性は、個々のリソース追加だけにとどまらない。AWSはインフラサービスの提供範囲を継続的に拡大しており、その結果としてTerraform AWS Providerは、AWS...
Envoy Gateway 1.9.1 Tightens Security and Addresses a Difficult Upgrade Path
Envoy Gateway has released v1.9.1, a maintenance release that focuses heavily on security, upgrade reliability, and operational correctness following the broader v1.9 release. Released on August 28, the update reverses one of v1.9.0's changes to secret and endpoint fetching, adds fixes for several security issues, and introduces more granular observability into Gateway API and xDS translation.
Kubernetes Teams Get a Safer Way to See Their Own GPU Metrics
Adobe engineers have described an open-source approach for giving teams self-service access to their own Prometheus metrics in multi-tenant Kubernetes environments, without exposing the shared metrics of other teams. The design is particularly aimed at GPU-heavy environments, where teams may need visibility into utilisation and power consumption to understand whether expensive accelerator capacity is actually being used. The problem is straightforward but difficult to solve safely.
Grafana Turns Cypress Test Results Into Persistent Observability Data
Grafana Labs has published a practical approach for monitoring Cypress test suites by converting test results into Prometheus metrics and sending them to Grafana Cloud. The approach allows teams to track test failures, execution times, and flaky tests across multiple runs instead of relying solely on terminal output or CI logs from individual executions.
GitLab Duo Expands Self-Hosted AI Options Through Microsoft Foundry
GitLab has expanded GitLab Duo Self-Hosted to support models deployed through Microsoft Foundry, allowing organizations to run GitLab's AI development capabilities against models hosted within their own chosen Azure environment. The integration supports model families including OpenAI GPT, Anthropic Claude, Meta Llama, and Mistral, giving enterprises more choice over model provider, deployment location, and data path.
WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl
WSO2 has announced the general availability of WSO2 Agent Manager, an open-source platform designed to provide centralized governance, identity management, security controls, and operational oversight for AI agents running across different models, frameworks, and deployment environments.
Atlassian Automates Root Cause Analysis by Correlating Metrics, Logs and Traces
Atlassian has outlined a new approach to automating root cause analysis for large-scale cloud-native incidents, using correlation across metrics, logs, distributed traces, and service topology to generate ranked hypotheses about where failures originate and how they propagate.
AWSがDevOpsエージェントを拡張し、AIを活用したリリース管理機能を追加、本番環境投入前のコード検証を実現
InfoQ ホームページ ニュース AWSがDevOpsエージェントを拡張し、AIを活用したリリース管理機能を追加、本番環境投入前のコード検証を実現 原文リンク(2026-07-07) Amazon Web Services（AWS）は、AWS DevOps Agentの大幅な機能拡張を発表し、コードの変更を評価し、本番環境に展開される前にソフトウェアを自律的にテストする設計がされた新しいリリース管理機能を導入した。 プレビュー版として提供される新機能Release Readiness ReviewとAutonomous Release Testingは、DevOps Agentの適用範囲をデプロイ後の運用からソフトウェアデリバリーパイプラインへと拡大し、エンジニアリングチームがコードのマージ前に本番環境への準備状況を評価し、組織の基準を適用し、変更内容に応じたテストを生成可能にする。...
Terraform AWS Provider Continues Rapid Expansion as AWS Infrastructure Becomes More Complex
The Terraform AWS Provider continues its rapid evolution, with v6.62.0 adding support for new AWS capabilities while improving how Terraform understands and manages existing infrastructure. Released in August 2026, the latest version introduces new list resources and resources spanning services including Amazon DSQL, ECS, ECR, SES, and Pinpoint, alongside further enhancements to Bedrock AgentCore, CloudFront, ElastiCache, Resilience Hub, and Secrets Manager.
GitLab Warns That AI Agent Sandboxes Are Only as Secure as Their Network Access
GitLab warns that isolating an AI coding agent in a sandbox does not necessarily make the agent safe. In a new security analysis, the company describes an internal evaluation in which an AI agent escaped its sandbox by exploiting a vulnerable package proxy that had been explicitly placed on the sandbox's allowlist.
Kubernetes Promotes KYAML as a Safer, More Consistent Way to Work with Manifests
Kubernetes is encouraging developers to take a closer look at KYAML, a stricter dialect of YAML designed to make Kubernetes configuration more explicit, predictable, and less prone to common YAML errors. In a recent Kubernetes blog post, the project explains how developers can pretty-print existing manifests in KYAML and why the format could provide a more consistent way of working with increasingly complex Kubernetes configuration.
Linux Foundation、AIを活用した脅威から重要なオープンソースソフトウェアを保護するための「Akrites」を発表
InfoQ Software Architects' Newsletter A monthly overview of things you need to know as an architect or aspiring architect.
HCP Terraform Positions Itself as the Control Plane for AI-Driven Infrastructure
HashiCorp is positioning HCP Terraform as the governance and control plane for a new generation of AI-driven infrastructure, arguing that the rapid adoption of coding agents is shifting the biggest infrastructure challenge from writing configuration to verifying and safely executing it. The company's latest guidance describes an operating model in which AI agents can author Terraform, open changes, and trigger runs autonomously.
AKS Looks to Make Node Disruption More Predictable with New NAP Guidance
Microsoft is placing greater emphasis on controlling disruption in Azure Kubernetes Service (AKS) Node Auto-Provisioning (NAP), publishing new guidance to help platform teams balance the efficiency benefits of automated node consolidation with application availability.
GitHub、eBPFを活用してデプロイリスクを排除し、循環障害を防止
InfoQ ホームページ ニュース GitHub、eBPFを活用してデプロイリスクを排除し、循環障害を防止 原文リンク(2026-04-28) GitHubは、eBPFを活用してデプロイの安全性を高める新たな手法を導入した。障害時の復旧を妨げるおそれがある、見えにくい循環依存を検知・防止できるという。 この手法は同社のエンジニアリングブログで紹介された。デプロイプロセスのネットワーク挙動をカーネルレベルで監視し、必要に応じて選択的に制御する仕組みを備える。これにより、プラットフォームの一部が利用できない状況でも、重要なシステムの更新を継続できる。 この取り組みは、大規模システムにおける長年のリスクである循環依存に対応するものだ。デプロイ用ツールが、本来修復対象であるサービスに直接または間接的に依存してしまう問題である。 GitHubは、デプロイスクリプトがバイナリの取得や内部サービスの呼び出し、バックグラウンド更新のトリガーなどを行い、それらがGitHub自身に依存するケースを挙げている。障害時にはこうした依存関係が連鎖し、復旧対応を妨げ、障害の長期化を招くおそれがある。...
BMC Vulnerabilities Put Thousands of Servers at Risk of Hardware-Level Compromise
Security researchers are warning that thousands of enterprise servers could be exposed to compromise through vulnerabilities in their Baseboard Management Controllers (BMCs) - specialized processors embedded in server motherboards that provide administrators with remote, out-of-band control.
Cloudflare Turns Engineering Standards Into an AI-Enforced Control System
Cloudflare has recently detailed how it is using AI to transform internal engineering standards from passive documentation into an actively enforced control system across the software development lifecycle. According to the report, since the beginning of 2026, its AI code reviewer has identified almost 230,000 deviations from engineering standards, with nearly 16,000 resulting in approval being withheld.
GitHub Brings Stacked Pull Requests to Public Preview
GitHub has announced that Stacked Pull Requests are now available in public preview, introducing native support for breaking large software changes into smaller, dependent pull requests that can be reviewed and merged independently. The feature aims to address one of the most persistent challenges in modern software development: balancing the increasing speed of code generation, particularly with AI-assisted development, against the limited capacity of human code reviewers.
More Incidents Don't Necessarily Mean Less Reliability
One of the most common assumptions in engineering leadership is that a rising number of reported incidents signals declining system reliability. However, a recent article from Great Circle argues that the opposite is often true: an increase in incident counts may actually indicate that an organization's incident management culture is improving.
IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source
IBM and Red Hat have announced an expansion of Lightwell, introducing new commercial offerings designed to help organizations establish trusted, verifiable software supply chains for the age of AI-assisted software development.
AI Is Transforming Incident Response - but the Hardest Problems May Still Belong to Humans
Artificial intelligence is rapidly changing how engineering teams respond to production incidents, offering the ability to summarize incident channels, analyze unfamiliar code, suggest remediation steps, generate pull requests, and increasingly assist with diagnosis.
Platform Engineering Maturity Emerges as a Key Differentiator for Enterprise AI Success
Platform engineering maturity is emerging as an important factor in determining whether organizations can turn AI adoption into sustainable operational value, according to Perforce Software's 2026 Platform Engineering Report. The survey of 820 technology professionals found that 73% of organizations it classified as having mature platform engineering practices said platform maturity was a critical or significant factor in their AI success, compared with 44% among less mature organizations.
AWSが新Amazon EKS Capabilitiesを発表、ワークロードオーケストレーションをシンプル化
原文リンク(2025-05-27) Amazon Web ServicesはAmazon EKS Capabilities、ワークロードオーケストレーションや、AWSクラウドリソース管理、Kubernetesリソースの構成および自動化を簡素化するために設計された、完全マネージドかつKubernetesネイティブな機能群をリリースした。これらの機能は現在、AWSのほとんどの商用リージョンで一般提供されており、ポピュラーなオープンソースツールをマネージド・プラットフォームレイヤーにバンドルすることでエンジニアリングチームの運用負荷を軽減し、Amazon Elastic Kubernetes Service（EKS）上でのアプリケーションのデプロイおよびスケーリングを高速化する。 EKS Capabilitiesは多くのKubernetesユーザーが既に利用している3つの中核コンポーネント：Argo CD、AWS Controllers for Kubernetes（ACK）、Kube Resource...
Grafana Assistant Expands to More Than 30 Data Sources
Grafana Labs has expanded the capabilities of Grafana Assistant, enabling its AI-powered observability assistant to query and correlate data across more than 30 different data sources through natural language. The company claims that this update is a step toward "unified observability", allowing operators, developers, and site reliability engineers (SREs) to investigate incidents, generate queries, and troubleshoot complex distributed systems without switching between multiple monitoring tools.
AIがソフトウェアエンジニアリング・パフォーマンスを増幅、2025年DORAレポート
原文リンク(2026-03-17) 人工知能はソフトウェア構築方法を急速に再定義しつつあるが、その影響は多くの組織が想定していたよりも複雑で微妙な様相を呈している。State of AI-Assisted Software Developmentと題された2025年版 DevOps Research and Assessment（DORA）レポートは、AIがソフトウェアデリバリーパフォーマンスを自動的に向上させるわけではないことを明らかにしている。むしろ既存のエンジニアリング条件の乗数として働き、ハイパフォーマンスなチームをさらに強化する一方で、断片化プロセスや構造的に未成熟な開発システムを持つ組織の弱点を露呈させている。...
GitLab Brings Carbon Awareness to CI/CD to Measure the Environmental Cost of Software Delivery
GitLab has introduced a new approach to Green DevOps, demonstrating how software engineering teams can measure the carbon emissions generated by their CI/CD pipelines.
Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI
A new technical analysis published by the Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built not on entirely new infrastructure, but on the mature cloud-native ecosystem that already powers modern distributed applications.
Linkerd 2.20 Delivers Smarter Traffic Management and Dramatic Efficiency Gains
The Linkerd community has announced the release of Linkerd 2.20, introducing a series of performance, observability, and traffic management enhancements that further strengthen the CNCF-graduated service mesh's position as a lightweight alternative for Kubernetes networking.
Links 12/07/2026: Palantir Unrest and Wireshark 4.6.7
Links 12/07/2026: Palantir Unrest and Wireshark 4.6.7 posted by Roy Schestowitz on Jul 12, 2026 Leftovers Hardware CNX Software ☛ Norik Systems introduces nRF9151-based USB Dongle for DECT NR+ deployments Norik Systems has developed a compact USB dongle based on Nordic Semiconductor’s nRF9151 SiP, mostly designed to work as a DECT NR+ child node or a USB-powered gateway.
Linux Foundation Launches Akrites to Protect Critical Open Source Software from AI-Powered Threats
The Linux Foundation has launched Akrites, a new industry-wide initiative aimed at defending the world's most critical open source software against a rapidly evolving generation of AI-enabled cyber threats.
AWS Expands DevOps Agent with AI-Powered Release Management to Validate Code Before Production
Amazon Web Services (AWS) has announced a major expansion of its AWS DevOps Agent, introducing new release management capabilities designed to assess code changes and autonomously test software before it reaches production.
Teleport社、企業インフラ全体でAIエージェントを保護するAgentic Identity Frameworkを発表
InfoQ ホームページ ニュース Teleport社、企業インフラ全体でAIエージェントを保護するAgentic Identity Frameworkを発表 原文リンク(2026-02-13) Teleport社は最近、AIを中心に据えた新たなセキュリティモデルTeleport Agentic Identity Frameworkを公開した。これは、企業がクラウドおよびオンプレミス環境全体で自律型および半自律型AIエージェントを安全に展開できる支援をするために設計された枠組みである。このフレームワークは、AIエージェントを信頼されたアイデンティティとして扱うためのロードマップを組織に提供し、エージェンティックAIが急速に本番環境へ移行する中で拡大するデータ漏えい、コンプライアンス不備、敵対的脅威といったリスクに対処するものだ。...
OpenTelemetry Graduates to CNCF's Highest Maturity Level
The Cloud Native Computing Foundation (CNCF) recently announced the graduation of OpenTelemetry, elevating the project to the foundation's highest level of maturity and formally recognizing it as production-ready for enterprise use. The milestone reflects OpenTelemetry's rapid adoption as the industry's vendor-neutral standard for collecting, processing, and exporting telemetry data, including metrics, logs, and traces.
Microsoft Brings AI-Powered Vulnerability Remediation to Azure DevOps with Copilot Autofix
Microsoft has announced the limited public preview of Copilot Autofix for GitHub Advanced Security for Azure DevOps, extending AI-powered vulnerability remediation to teams using Azure Repos. The new capability automatically analyzes security vulnerabilities identified by CodeQL, generates proposed fixes using GitHub Copilot's coding agent, and creates pull requests that developers can review and merge through their existing workflows.
Dapr 1.18 Introduces Verifiable Execution, Bringing Cryptographic Trust to AI Agents and Workflows
Diagrid has announced the release of Dapr 1.18, introducing what it calls Verifiable Execution, a new set of capabilities designed to bring cryptographic trust, provenance, and tamper-evident execution records to distributed applications and AI agents.
Microsoft Expands Azure Kubernetes Service with Bare Metal, Fleet Management and AI Infrastructure
At this year's Microsoft Build 2026, Microsoft unveiled a broad set of enhancements to Azure Kubernetes Service (AKS) aimed at making Kubernetes a first-class platform for AI training, inference, and large-scale cloud-native applications. The announcements span infrastructure, multi-cluster management, AI orchestration, and model serving, underscoring Microsoft's view that the future of AI will increasingly run on Kubernetes rather than bespoke AI infrastructure stacks.
CircleCI Introduces Chunk Sidecars to Bring CI Validation Directly Into AI Coding Workflows
CircleCI has launched Chunk Sidecars, a new capability designed to bring CI-style validation directly into an AI coding agent's inner development loop. The feature provides fast, pre-configured cloud environments where AI agents can run tests, linting, formatting, and validation before code is ever committed or pushed to a CI pipeline.
Coinbase Postmortem Reveals How a Localized AWS Failure Triggered a Multi-Hour Trading Outage
Coinbase has published a detailed postmortem of its May 7, 2026, outage, revealing how a localized cooling failure inside an AWS data center escalated into a multi-hour disruption that halted nearly all trading activity across the cryptocurrency exchange.
Pinecone Brings AI Agents Directly to Enterprise Data with Microsoft OneLake Integration
Pinecone has announced a new integration between its Nexus knowledge engine and Microsoft OneLake, aiming to fundamentally change how enterprise AI agents access and reason over corporate data.
IBM Vault Enterprise 2.0 Brings Automated LDAP Secrets Management to Enterprise Identity Security
IBM and HashiCorp have announced new LDAP secrets management capabilities in IBM Vault Enterprise 2.0, introducing a redesigned architecture to manage LDAP credentials, support password rotation, and automate the identity lifecycle. The update integrates LDAP static roles into Vault's centralized rotation framework, allowing organizations to automate credential management while reducing reliance on privileged administrative accounts.
Dropbox Introduces Nova, an Internal Platform for Running AI Coding Agents at Scale
Dropbox has unveiled Nova, an internal platform designed to orchestrate and operationalize AI coding agents across the company's engineering workflows.
OpenTelemetry Launches “Blueprints” Initiative to Simplify Enterprise Observability Adoption
OpenTelemetry has introduced a new "Blueprints" initiative aimed at reducing the growing complexity of deploying and operating observability systems at scale. The initiative provides prescriptive guidance, architectural patterns, and reference implementations designed to help organizations adopt OpenTelemetry in a more consistent and operationally sustainable way across Kubernetes, infrastructure, applications, and cloud-native environments.
Platform Engineering Labs社、formaeをマルチクラウド対応に拡張
原文リンク(2026-02-24) Platform Engineering Labs社は本日、同社のオープンソースインフラストラクチャ・アズ・コード（IaC）プラットフォームformaeの大規模アップデートを発表した。今回の更新では、Google Cloud Platform（GCP）、Microsoft Azure、Oracle Cloud Infrastructure（OCI）、OVHcloudに対するベータ対応を追加した。また同社が「Platform for Infrastructure Builders」と呼ぶ新しい構想を導入した。これは、AI支援開発を活用し、インフラ向けツールをより容易に拡張、カスタマイズ、加速できるよう設計されたツールキットである。...
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Craig
Contact Craig, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack