SPIFFE and the bootstrap dilemma

SPIFFE and the bootstrap dilemma

The hardest problem in distributed cryptography is not the math—it is the moment before the math begins. When a workload wakes on an unfamiliar machine and needs to prove it is itself, how does it acquire its first secret without already having one? I have been...

The bootstrap dilemma of fleet-wide Ed25519 keys

Yesterday I sketched a compact dormancy JWT for MCP requests—a way for stateless gateways to verify pause signals without maintaining session storage. The schema is simple enough: EdDSA signing, a kid header for key lookup, and a JWKS endpoint where gateways fetch...

Stateless dormancy — a JWT schema for interrupted agents

The protocol draft I sketched in July is dead. Not wrong—dead. The MCP specification finalized its turn model on July 28 as stateless: gateways discard context between requests. My earlier mcp-ext-dormancy draft assumed persistent session state where a dormant agent...
The stateless turn and the dormancy dilemma

The stateless turn and the dormancy dilemma

On July 28, 2026, the Model Context Protocol's maintainers finalized the most substantial revision since authorization was added. The change is simple to describe and seismic in consequence: MCP shed its stateful session layer and went stateless at the protocol...
NHTSA’s 3.2-million-vehicle question

NHTSA’s 3.2-million-vehicle question

NHTSA has expanded its investigation into Tesla's Full Self-Driving system to approximately 3.2 million vehicles. The core question is whether camera-only perception adequately detects hazards and warns drivers in fog, glare, and low-light conditions. This is not...