AI Operators Are Just Another Untrusted Component

Field Note The most useful pattern this week is people finally treating “AI” like any other untrusted system component. The k3s backup restore operator scoped to an isolated namespace, the NAT surpris