Skip to content
360SOFTY
HomeInsights

Insights

Ideas for building
better software.

Engineering perspectives on architecture, product development, AI, and the everyday decisions behind useful software.

From the engineering desk

Browse practical articles or follow the latest technology updates.

Subscribe via RSS →

Curated links from external sources — not 360Softy original articles.

ExternalSoftware Engineering
DEV Community

How we run five coding agents side by side in one window

I build NestMux, a desktop app that runs Claude Code, Codex, Gemini CLI, Copilot and OpenCode in a grid of real terminals, each with its own account and its own git worktree. This is how it works inside, including the parts that are heuristics wearing a confident UI and the parts that do not survive a restart. If you are building something similar, most of this transfers. If you are deciding whether to use it, this is the honest version of what it does. Thirty-five seconds of it running, so the

electronaidevtools
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

I pushed the badBANANA Threat Observatory public

This was one of those projects I had wanted to make for a long time, even before I had a very clear reason for it. Over the years, if you spend enough time around security, you keep seeing threat maps. A lot of them are visually impressive. They pull you in immediately. Lines moving across a globe, attacks firing in real time, counters climbing, everything looking active. But once I started learning more about how threat data actually works, I kept coming back to the same problem: a lot of those

securitycybersecurityopensource
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Trusted AI Agent Transactions, Part 5: End-to-End Proof

Building and proving the complete request path The previous articles covered the identity model, PingFederate token exchange, SPIRE workload identity, and PingAuthorize policy. This final part connects them into one testable application path. The browser workbench signs the user in through PingFederate with OAuth 2.0 Authorization Code and PKCE. The application never collects the user's PingFederate password. After sign-in: the demo agent receives the user access token the agent obtains a JWT-

gopingidentitymcp
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

Making policy decisions with PingAuthorize Part 3 established the transaction context and immediate caller identity. Authorization still needs to answer a separate question: may this verified combination invoke this target and tool for this purpose? PingAuthorize is integrated as a remote policy decision point at the MCP gateway. It does not verify the transaction JWT or the mTLS connection. Those checks happen before policy evaluation. The gateway constructs a typed policy request from values

pingauthorizesecurityauthorization
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Trusted AI Agent Transactions, Part 3: SPIRE Workload Identity

Binding a logical agent to a real workload with SPIRE Part 2 used a SPIRE JWT-SVID as the actor token in PingFederate token exchange. That proves more than a caller-supplied agent name, but it helps to understand exactly what it proves. A logical agent describes an approved application role. A SPIFFE ID identifies an attested running workload. They are related, but they are not interchangeable. AgentID: urn:agent:customer-support SPIFFEID: spiffe://example.org/agent/customer-support The firs

spiffespiresecurity
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange

Using PingFederate as a Transaction Token Service Part 1 separated the user, logical agent, runtime workload, agent execution, and transaction identities. This part shows where they are joined safely. In the Tokenetes architecture, a Transaction Token Service, or TTS, uses the RFC 8693 token exchange protocol to mint a Txn-Token. This implementation assigns that logical role to PingFederate. The agent sends: subject_token = the user's access token subject_token_type = access token actor_t

pingfederateoauthsecurity
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Trusted AI Agent Transactions, Part 1: The Identity Problem

The identity problem behind AI agents An application that calls an API for a user normally answers one identity question: who is the user? An AI agent introduces several more: Which user authorized the work? Which logical agent is acting? Which running workload actually made the call? Which agent execution is involved? Which transaction and purpose does the call belong to? Which service made the current network hop? Putting every answer into a single sub claim creates a dangerous illusion. A l

securityoauthai
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Installing Minikube on Debian

Installing Minikube on Debian Minikube is a practical way to run a small Kubernetes cluster on a Debian workstation or development instance. This guide installs Minikube with the Docker driver, starts a named profile, runs a temporary deployment, and removes the test resources afterward. This is a local development setup, not a production Kubernetes distribution. The commands target Debian 12 (Bookworm), Debian 13 (Trixie), or a compatible newer Debian release on an x86-64 host. The goal is a

kubernetesminikubedebian
DEV CommunityRead original

Let’s start with a conversation

Tell us what you’re working on.

An idea, a challenge, or a system that needs to work better. We’ll help you understand the next step.

Discuss your project

Prefer email? [email protected]