Introducing aflock: package-lock.json, but for AI agents
Mar 2026 3 min readA short introduction to aflock, a system for constraining AI agents with signed policies and verifying their behavior with cryptographically signed in-toto attestations.
Technical articles and notes on software supply chain security, Go, Alpine Linux, open source, and cloud-native engineering. These are now hosted here on `rahulxf.com`.
11 posts
A short introduction to aflock, a system for constraining AI agents with signed policies and verifying their behavior with cryptographically signed in-toto attestations.
Why I decided to join TestifySec, explore software supply chain security more deeply, and contribute to Witness and Archivista under the in-toto ecosystem.
A practical walkthrough for packaging a simple Go application for Alpine Linux using APKBUILD, from setup and checksums to building and submitting.
A practical introduction to Witness: generating keys, recording attestations, signing policy, and verifying a simple Go binary against supply chain requirements.
A hands-on overview of Alpine package management with apk, including update, add, delete, search, inspect, verify, and graphing package dependencies.
A practical walkthrough for implementing create, read, update, and delete operations for Kubernetes Deployments using client-go, Gin, and YAML input handling.
A walkthrough of using Kubernetes informers and a workqueue to stream deployment changes over WebSocket in a custom Go controller.
A focused look at scoping Kubernetes informers to a specific deployment and streaming targeted workload updates over WebSocket.
A guide to building a WebRTC-based collaborative portal with video, screen sharing, messaging, file transfer, Monaco, and Yjs-powered collaboration.
Notes from experimenting with Puppeteer, stealth plugins, randomized user agents, and scraping tweet content in a more resilient way.
A small custom TypeScript utility for generating newer, randomized browser user agents instead of relying on stale package defaults.
More articles coming soon. You can also follow me on Medium .