Jjudeinsoit-ai.hashnode.dev·Sep 27 · 16 min readWhat your healthcheck actually checks: four probe bugs in a self-hosted agent runtimeThe short version When docker compose ps says the api container is unhealthy, is it right? And what is it actually checking? Our health checks turned out to have one probe that checks too hard, one th00
Jjudeinsoit-ai.hashnode.dev·Sep 24 · 21 min readmax_retries=2, one attempt: counting retries across three layers of an agent runtimeThe short answer How many times does one tool call actually execute in our agent runtime? Exactly once — while the policy gateway's constructor says max_retries: int = 2. Those two facts do not contra00
Jjudeinsoit-ai.hashnode.dev·Sep 18 · 25 min readYour access token lifetime means two different things, depending on one database readThe short version In a self-hosted deployment, "how long does a login last" is never one number. In ours it is two knobs you can turn, six hard-coded deadlines you cannot, and one revocation path: 00
Jjudeinsoit-ai.hashnode.dev·Sep 14 · 18 min readThree signed v1.0.0 images, one release: what attestation actually provesThe four questions, and the one nobody asks Pulling a container image somebody else built asks four separate questions. Most people answer three of them and skip the fourth: Step Question it answer00
Jjudeinsoit-ai.hashnode.dev·Sep 10 · 18 min readFive tables, four kinds of replay, and a status called in_doubtThe short version replay means four different things in our codebase. Here they are up front: # What it is Entry point Re-executes? Cost 1 Evidence replay GET /api/v1/observe/runs/{run_id}/repla00