Two talks in one week — locking down AI agents with signed policies at Open Source Summit India, and in-toto attestations with Witness on the Maintainer Track at KubeCon + CloudNativeCon India. What I presented, what broke, and what I learned.

A short introduction to aflock, a system for constraining AI agents with signed policies and verifying their behavior with cryptographically signed in-toto attestations.

Why I decided to join TestifySec, explore software supply chain security more deeply, and contribute to Witness and Archivista under the in-toto ecosystem.

A practical walkthrough for packaging a simple Go application for Alpine Linux using APKBUILD, from setup and checksums to building and submitting.

A practical introduction to Witness: generating keys, recording attestations, signing policy, and verifying a simple Go binary against supply chain requirements.

A hands-on overview of Alpine package management with apk, including update, add, delete, search, inspect, verify, and graphing package dependencies.

A practical walkthrough for implementing create, read, update, and delete operations for Kubernetes Deployments using client-go, Gin, and YAML input handling.

A walkthrough of using Kubernetes informers and a workqueue to stream deployment changes over WebSocket in a custom Go controller.

A focused look at scoping Kubernetes informers to a specific deployment and streaming targeted workload updates over WebSocket.

A guide to building a WebRTC-based collaborative portal with video, screen sharing, messaging, file transfer, Monaco, and Yjs-powered collaboration.

Notes from experimenting with Puppeteer, stealth plugins, randomized user agents, and scraping tweet content in a more resilient way.

A small custom TypeScript utility for generating newer, randomized browser user agents instead of relying on stale package defaults.