Operations | Monitoring | ITSM | DevOps | Cloud

Building a Control Framework for the AI SDLC

Since November, Kosli’s own engineering team has been running a live experiment: what happens to code review when the thing generating the code - and increasingly, the thing reviewing it - is an AI, not a person. Alex Kantor, Kosli’s Director of Technology, walked through that experiment in this webinar: what broke, what it cost to fix, and what four “obvious” assumptions in a standard code review control turned out not to hold once you took the human out of the loop.

Why Internal Agents Must Be Rebuilt with Runtime Context

As we entered 2026, enterprises raced to build internal AI engineering agents, automating incident response, code review, and support. The investment was real, but 88% of these pilots never reached production, and teams are now in rebuild mode, trying to understand why. Live runtime validation was the key architectural decision skipped in these v1 agents and it’s still missing from many v2 designs. Agents need to verify their reasoning against production before they act.

Embracing the Code Review Bottleneck

Roughly a year ago, I left Honeycomb’s SRE team to join the newly formed Tenant team, which works on our Private Cloud offering. This team held some significant challenges on its roadmap if it wanted to demonstrate that the offering was possible, would be worth the cost, and could be done without representing a heavy tax on the rest of the organization.

Monitoring Your Django App Health on Fly.io

Fly.io is a neat choice for deploying Django fast and globally. What it doesn’t really give you out of the box, though, is a deeper picture of an application’s performance. Deployment is only part of the story. No matter which platform you’re using, operating a production application means you need to understand how it behaves. AppSignal helps you fully grasp what happens on the Fly.io server.

Password Policies in Icinga Web

Icinga Web 2 now ships a PasswordPolicyHook that gives administrators and module developers full control over what constitutes a valid password. Instead of hard-coding a single rule set for every deployment, the hook makes password validation an extension point: any module can register a policy, admins select the active one from the configuration UI, and Icinga Web 2 enforces it everywhere a local password is set or changed.

Cost attribution in Grafana Cloud: Manage spend across observability and testing workflows

Knowing what you're spending on observability is useful. Knowing which team, service, or project is driving that spend is what actually lets you act on that information. Cost attribution is a core part of how Grafana Cloud approaches cost management and optimization.

Terraform Strings: Interpolation, Heredoc & Built-In Functions

A Terraform string is just a sequence of characters, but almost everything you write in HCL touches one: resource names, tags, file paths, generated policies, connection strings. Knowing how Terraform builds, combines, and templates strings will save you from some of the more confusing errors you'll hit in a growing configuration.

Post-Quantum Cryptography and How to Prepare Your Organization

Do you actually know where encryption lives inside your infrastructure? Not the vendor's answer. The full map: every TLS handshake, every signed software update, every VPN tunnel, every certificate your systems trust. That map is where post-quantum cryptography starts to matter. The technology has moved from a research topic into a compliance deadline, and the algorithms protecting your data today were built for a world without quantum computers.

The 13 Questions CEOs Ask After an Incident (And What IT Leaders Must Be Ready to Answer)

It’s 2:47 p.m. Your checkout service has been down for 11 minutes. Customers are screenshotting errors and calling in. Your CEO walks into your office and starts asking questions. In this moment, there are two kinds of IT leaders: Whether you walk out with more budget authority (and executive trust) or less depends on your answers, and the infrastructure that supports them. But preparation isn’t just about surviving the incident. It’s actually a revenue opportunity.