The agent-native software factory
Guides on building, governing, and scaling an agent-native software factory, plus write-ups of the podcasts and talks behind the ideas.
Within Factory Private
Factory Private
Federal Deployment
IL4 and IL5 AI deployment: define the boundary
IL4 and IL5 AI deployment requires an offering-specific boundary and an authorized workload decision. Separate impact levels, private hosting, and airgapped operation.
Read articleFactory Private
Enterprise AI
On-prem AI development inside your security boundary
On-prem AI development needs more than a local agent. Place the control plane, model endpoint, build tools, and telemetry inside the approved boundary.
Read articleFactory Private
Model Governance
Self-hosted models for confidential source code
Self-hosted models give enterprises an inference placement choice. Verify gateway routes, credentials, model policy, and task compatibility before using confidential code.
Read articleFactory Private
Security Remediation
Private AI security remediation with review gates
Private AI security remediation should connect a validated finding to a bounded fix, regression tests, and approval. Keep evidence and execution inside the approved boundary.
Read articleFactory Private
Enterprise AI
Self-hosted AI agents and control-plane ownership
Self-hosted AI agents require clear ownership of the control plane, session data, models, and updates. Compare the responsibilities before choosing a deployment.
Read articleFactory Private
Compliance
SOC 2 for AI coding tools: evidence to request
SOC 2 for AI coding tools requires a review of report scope, operating period, data flows, and customer controls. Evaluate evidence instead of relying on a badge.
Read article
