Cloudflare Bot Preference Sync Keeps AI Crawler Policy Honest
Cloudflare's Bot Preference Sync turns AI bot policy into a generated robots.txt block, reducing drift between what a site says to crawlers and what it enforces at the edge.
Read note↗
Notes from the engineering bench
Technology notes
Technology notes
for people who ship.
Field notes from the A2Techify engineering team on AI, developer tools, and the systems around them.
23Field notes published
31Technology threads
0%Paywalled
Small tests. Primary sources.
Useful judgment calls.
Follow a thread
01
The journal
Recently tested,
Recently tested,
carefully explained.
Practical research on AI systems, developer tools, security, and the infrastructure that makes them useful.
Docker Sandboxes Put CI Agents Behind a Smaller Boundary
Docker's GitHub Agentic Workflows integration gives coding agents a microVM sandbox with a private Docker daemon, making CI automation more useful without handing it the whole runner.
Cloudflare OAuth Makes Agent Permissions Less All-Or-Nothing
Cloudflare's optional OAuth scopes give agent and MCP builders a practical way to request broad capability while letting users approve a narrower task-based grant.
Cloudflare Workers Shows Why Isolation Needs Layers
Cloudflare's Workers Spectre reassessment is a practical reminder that isolate-based platforms need layered containment, not a single clever mitigation.
Coding Agent Allowlists Are Not A Security Boundary
A practical look at why trusted-command allowlists can fail for coding agents, and what teams should move into the sandbox boundary instead.
GPU Scheduling Is Becoming AI Infrastructure Work
A practical look at why GPU allocation order matters for AI teams running mixed training, inference, quantization, and batch workloads.
GitHub's License Data Update Makes SBOM Reviews Less Noisy
GitHub is prioritizing registry license metadata in the dependency graph, which should make SBOMs and dependency review checks easier to trust.
Docker Sandboxes Make ESP32 Agent Workflows Less Risky
A practical look at reproducible ESP32 firmware builds, remote serial flashing, and safer AI-assisted hardware loops with Docker Sandboxes.
What MCP Traffic Detection Can—and Cannot—Protect
Where Cloudflare's MCP traffic detection helps, where it cannot, and which controls still belong at the server.
A Workable Artifact Layout for LeRobot Training Runs
Using manifests, checksums, and Hugging Face Storage Buckets to keep mutable robotics runs under control.
02
How we work
Less hype.
Less hype.
More signal.
We test new technology in the same way we would evaluate it for a real project: run it, inspect the trade-offs, and keep the parts that hold up.
- 01Run itStart with a small, reproducible test.
- 02Pressure-test itInspect the cost, security, and operational limits.
- 03Write it downShare the commands, code, and judgment calls.