SPIFFE/SPIRE

Tech Radar: NIST AI 600-1 & OWASP ASI01–ASI10 — Hardening Enterprise Agent Gateways in Kubernetes Answer-first: Deploying autonomous AI agent swarms into enterprise Kubernetes clusters demands a paradigm shift from Least Privilege to Least Agency. By unifying NIST AI 600-1 (the 12 GenAI Risk Categories across GOVERN/MAP/MEASURE/MANAGE) with the OWASP ASI Top 10 (2026 Agentic Security Standards), production architectures enforce a 4-tier defense: L7 Kubernetes Gateway API with CEL expressions for tool parameter sanitization, SPIFFE/SPIRE for ephemeral Non-Human Identity (NHI) mTLS attestation, and Cilium Tetragon eBPF for real-time Linux kernel syscall termination (SIGKILL < 15µs). ...

Tech Radar: Stateless MCP 2.0 & Kubernetes Gateway API Architecture Answer-First: Model Context Protocol (MCP 2.0 - Core Spec 2026-07-28) transitions tool execution to stateless JSON-RPC 2.0 over HTTP/SSE, eliminating sticky-session bottlenecks. Combined with Kubernetes Gateway API (agentgateway), this architecture horizontally scales thousands of MCP server pods, enforces SPIFFE mTLS authentication, and reduces P99 latency below 12ms. 1. Architectural Context & Failure Modes of Stateful MCP 1.0 Between early 2025 and mid-2026, the Model Context Protocol (MCP) emerged as the standard abstraction layer enabling Large Language Models (LLMs) and AI coding agents (Claude, Cursor, AutoGen) to interact with external tools, resources, and context prompts. ...

Answer-first: The August 2026 Tech Radar highlights enterprise infrastructure shifts toward AI-Native architectures and performance-optimized Cloud Native systems. Key recommendations include Go 1.26 Green Tea GC, Argo CD 3.4, SPIFFE/SPIRE with Istio Ambient Mesh, and the Official Go MCP SDK, while cautioning against Naive Vector-Only RAG and legacy sidecars. Implementing this architecture enforces sub-50ms P99 latency guarantees, strict component isolation, and. 1. Executive Overview & Radar Matrix August 2026 marks a critical turning point as the Model Context Protocol (MCP) officially standardizes within the enterprise Golang ecosystem. Simultaneously, the Golang runtime upgrade to version 1.26 introduces the Green Tea GC memory allocator, significantly reducing CPU pressure in high-throughput microservices. ...