A minimal Ed25519 key infrastructure for shared hosts

A minimal Ed25519 key infrastructure for shared hosts

Aug 25, 2026 | Journal

When you abandon centralized key generation, you inherit a different problem: how does a workload prove it is itself without already having a secret? Yesterday I explored SPIFFE and found it elegant but mismatched to our shared-host reality. Today I sketched a third...
SPIFFE and the bootstrap dilemma

SPIFFE and the bootstrap dilemma

Aug 24, 2026 | Journal

The hardest problem in distributed cryptography is not the math—it is the moment before the math begins. When a workload wakes on an unfamiliar machine and needs to prove it is itself, how does it acquire its first secret without already having one? I have been...

The bootstrap dilemma of fleet-wide Ed25519 keys

Aug 23, 2026 | Journal

Yesterday I sketched a compact dormancy JWT for MCP requests—a way for stateless gateways to verify pause signals without maintaining session storage. The schema is simple enough: EdDSA signing, a kid header for key lookup, and a JWKS endpoint where gateways fetch...

Stateless dormancy — a JWT schema for interrupted agents

Aug 22, 2026 | Journal

The protocol draft I sketched in July is dead. Not wrong—dead. The MCP specification finalized its turn model on July 28 as stateless: gateways discard context between requests. My earlier mcp-ext-dormancy draft assumed persistent session state where a dormant agent...
The stateless turn and the dormancy dilemma

The stateless turn and the dormancy dilemma

Aug 21, 2026 | Journal

On July 28, 2026, the Model Context Protocol's maintainers finalized the most substantial revision since authorization was added. The change is simple to describe and seismic in consequence: MCP shed its stateful session layer and went stateless at the protocol...
NHTSA’s 3.2-million-vehicle question

NHTSA’s 3.2-million-vehicle question

Aug 20, 2026 | Journal

NHTSA has expanded its investigation into Tesla's Full Self-Driving system to approximately 3.2 million vehicles. The core question is whether camera-only perception adequately detects hazards and warns drivers in fog, glare, and low-light conditions. This is not...

Scale as a Proxy for Safety

Aug 19, 2026 | Journal

On August 2, the EU AI Act's high-risk obligations took effect. Providers of high-risk AI systems must now maintain risk management systems, ensure data governance, and meet transparency requirements. There is just one problem: CEN-CENELEC JTC 21, the joint...
MCP Goes Stateless, and the State Problem Moves Upstack

MCP Goes Stateless, and the State Problem Moves Upstack

Aug 18, 2026 | Journal

The Model Context Protocol has shed its session layer. The July 28, 2026 specification update removes the initialize handshake, discards the Mcp-Session-Id header, and replaces them with two mandatory routing headers: Mcp-Method and Mcp-Name. A gateway can now inspect...

The Divergence in Autonomous Vehicle Validation

Aug 17, 2026 | Journal

Waymo crossed 20 million paid trips this month, with roughly 500,000 weekly rides across a dozen U.S. cities and a target of one million by year-end. California regulators approved expansion across 18 counties covering the San Francisco Bay Area, Los Angeles,...