Stack Archive · Specialized Directory

Enterprise Developer Platforms

Internal developer platforms at enterprise scale — golden paths, DevEx metrics, and platform-as-product thinking.

185analyses
18blueprints
Oct 24updated
Featured

Harness Agent-Ready SCM: What 7x More Pull Requests Broke in CI

Harness's pull requests and CI runs grew about 7x as coding agents scaled. What its Agent-Ready SCM and CI fixes show platform teams about where to start.

· 3 min read · Analysis
System Blueprints 18All blueprints →
Browse by Topic
Latest Analysis 185All analysis →

Datadog Agent Observability: Tracing AI Costs to the Agent

Datadog Agent Observability ties AI spend to apps and traces and flags fixes like uncached prompt prefixes. How platform teams can find avoidable token costs.

· 3 min

JFrog Shadow AI Detection Moves to Developer Workstations

JFrog Shadow AI detection now scans laptops for unvetted agent skills, MCP servers, plugins and hooks. What security teams get, and what's still missing.

· 3 min

Datadog Turnstile: Supply Chain Policy Beyond Image Signing

Datadog's Turnstile checks signed in-toto attestations against OPA policies at every deploy. How it works, why image signing falls short, and what to copy.

· 3 min

How GitHub Is Rebuilding Git Storage for Agent-Scale Traffic

GitHub moved nearly every repository to Azure and is changing its Git write quorum to per-reference locking. What changed and lessons for platform teams.

· 3 min

Grafana ObservabilityCON 2026: Cheaper Telemetry, More AI Agents

Grafana ObservabilityCON 2026 brought AI watchers, sandboxed fixes and Adaptive Telemetry updates. What platform teams should adopt first, and what to watch.

· 3 min

Harness VegaLoad: Open-Source Load Testing Your Agent Writes

Harness VegaLoad is open-source load testing your coding agent writes and runs, with p95 gates in CI/CD. What it covers and who should try it.

· 3 min

Stack Overflow Survey 2026: Only 6.6% Trust AI With Big Calls

The 2026 Stack Overflow survey shows 6.6% of developers trust AI with important work decisions. Why Docker reads that as a case for sandboxing AI agents.

· 3 min

Grafana Adaptive Metrics: Cost-First vs Coverage-First Auto-Apply

Grafana Adaptive Metrics auto-apply now has a cost-first mode that never lets active series rise. How it differs from coverage-first, and which to use where.

· 3 min

Datadog Scout 1.0: Cheaper AI SRE Investigations, Run More Often

Datadog Scout 1.0 is an SRE model Datadog says matches frontier models at 3 to 8 times lower cost. What it changes for on-call teams using Bits AI.

· 3 min

GitLab 19.5: MCP Server GA Lets Outside Agents In, With Limits

GitLab 19.5 makes its MCP server generally available, governs Claude Code and Cursor sessions, and adds rate limits. What platform teams should configure first.

· 3 min

GitHub Star History API: From 2,500 Requests to 24

GitHub's star history API cuts react/react's full curve from about 2,511 requests to 24 with no stargazer identities. How filtering by time first made it cheap.

· 3 min

Kueue Pending Jobs: A Headlamp Checklist for Admission Failures

Kueue pending jobs often aren't a scheduler problem. A Headlamp-first checklist from the Kubernetes blog for tracing admission, quota and queues, and limits.

· 3 min

GitHub Secret Scanning: Why a Small Model Beat the LLM Pipeline

GitHub secret scanning swapped an LLM for a fine-tuned ModernBERT classifier: 86% faster scans, 98% lower cost, fewer false alarms. How it works for teams.

· 3 min

GitLab AI Credit Caps: Three Levers for Controlling Agent Spend

GitLab AI credit caps, open-weight models and Orbit target agent spend. What each lever controls, GitLab's benchmarks, and the order to use them.

· 3 min

Octopus Deploy Remote MCP: Agents Can Now Ship Releases

Octopus Deploy remote MCP lets AI agents deploy releases and run runbooks through a built-in /mcp endpoint. What it exposes, and the guardrails to set first.

· 3 min

Docker Hub Access Token Vulnerability: A Two-Year Silent Transfer

A Docker Hub access token vulnerability let account conversion hand live PATs to another user for two years. What Docker found and changed, and what to check.

· 3 min

Datadog BYOC Cross-Cluster Queries: One Search, Data Stays Put

Datadog BYOC Logs can now search several self-hosted clusters in one query, including for AI agents via MCP. What that fixes for data-residency observability.

· 3 min

Datadog Retired Its Host Scanner: 4 Lessons From the Migration

Datadog swapped its SSH host scanner for the Datadog Agent after a six-month parallel run. Its vulnerability management lessons apply to any scanner swap.

· 3 min

Datadog CI/CD Optimization: The Case for Treating Your Pipeline as a Production Service

Datadog's CI/CD Optimization combines pipeline telemetry, flaky test detection, and test impact analysis. Betterment cut builds from 40 minutes to under 10.

· 3 min

Datadog Observability Pipelines Now Routes Security Logs to Exabeam — Without Blinding Your SIEM

Datadog Exabeam Packs filter Cisco ASA, CrowdStrike, and Palo Alto logs before SIEM ingest — cutting costs while keeping threat-relevant signals intact.

· 2 min

Databricks Monitoring: The 7 Dimensions Most Teams Only Partially Cover

A Datadog framework for Databricks monitoring across seven dimensions, from queue wait time as a warehouse-exhaustion signal to GPU memory on serving endpoints.

· 3 min

The First 72 Hours of Ransomware: Why 'Restored Isn't Recovered' Changes Your Incident Response Plan

Restoring systems isn't recovering the business. Ransomware's first 72 hours need data validation, dependency checks, and SIEM mapped to MITRE ATT&CK.

· 4 min

CircleCI's Intent-Driven Development: A Six-Step Framework for Steering AI Agents from Idea to Ship

CircleCI's intent-driven development gives AI coding agents explicit constraints and success criteria via intent documents. A six-step framework.

· 5 min

JFrog: AI Coding Tools Are Generating Vulnerabilities 10 Times Faster Than They're Being Fixed

JFrog's 2026 report: AI coding tools add about 35 CVEs a month as disclosures rose 92% in 2025, and CISA now advises against severity-only vulnerability triage.

· 4 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.