Video summary
The September 2, 2026 meeting of the AI Working Group centered on the strategic integration of AI agents into Cloud Foundry, focusing on three critical pillars: durable execution through checkpointing and snapshotting, robust sandboxing for isolation, and comprehensive identity management. Participants explored how to leverage existing Cloud Foundry primitives such as build packs, staging cycles, and volume snapshots to support agent workloads without necessitating a new lifecycle or heavy disk-based solutions. The group identified two primary use cases: executing agents directly on the platform to ensure secure and compliant operations that prevent secrets from leaking onto developer laptops, and facilitating agentic frameworks like OpenCode through specialized harnesses or build packs.
To address security concerns regarding untrusted code, the team prioritized sandboxing as a fundamental requirement while proposing technical solutions such as workload identity federation to eliminate the need for secrets and integrating Model Context Protocol (MCP) servers via Cloud Controller APIs. Observability was enhanced by extending existing logging mechanisms, and governance was maintained by ensuring all agents operated within Cloud Foundry's controlled environment, thereby inheriting established regulatory safeguards. The consensus emphasized that starting with identity resolution is essential to enable secure communication between agents, while also acknowledging that effective iteration on AI outputs requires human experience and oversight.
Moving forward, the group outlined a clear path to advance these initiatives by creating individual proof-of-concept repositories for each use case, sharing results asynchronously via pull requests, and consolidating findings before the upcoming CF Summit. The discussion concluded with a brief technical exchange about directory creation and a clarification that while the meeting recording is active, transcription features are currently disabled; participants agreed to request these capabilities from Ram for future sessions. The session ended on a positive note, with well-wishes for attendees to experiment with their AI agents at Hidleberg before final farewells were exchanged.
Read the full video transcript
Hello, Reuben.
>> Hello.
>> How is your family doing?
>> Yeah, you're fine.
>> Good.
>> Getting older. All these children and
me.
>> Yeah.
>> The thing that happens automatically, I
guess.
>> Yes.
>> [laughter]
>> as as I've been putting in my writeups.
>> I'm a seven centennial man. So
[laughter]
>> obvious.
>> Hello.
right by hand.
>> Let's see how many people join the call.
I'm pretty sure Wayne was planning to
join. It's on his calendar or at least
this window is blocked off for it.
>> Mhm.
It's a little bit vacation uh season.
>> Yeah.
>> No,
it's all it's done.
>> No, it's not locked down. I I'm leaving
for four four or five days starting
tomorrow.
>> But it's fall like the leaves are
turning brown due to drought. But
[laughter]
>> well, in California, the leaves are, you
know, we only have two seasons.
>> Oh, yeah.
>> Green or dirt.
>> Yeah. They uh there's like one or two
blocks that I know in this area that
actually have trees that actually change
color and actually fall
looking at stuff. So,
and then then I'm able to see uh
sometimes snow on the mountains, but
that's that's about as much snow as I
get in this area.
[snorts]
But
>> at least I can drive to it, which is a
good thing.
There [clears throat] he is.
>> There's Wayne. So, when is Stratles
going to support all this agentic stuff?
>> Stratos.
>> Tell me. You tell me what you want.
[laughter]
>> Just AI everywhere. I I have no problem
putting AI in as long as you tell me
what what do you want
>> I mean right now
>> a dash of AI maybe like start with a
logo that's
>> with a plus AI and then or LLM powered
or something
>> they should just dance basically right
like one of those little dancing logos
>> yeah and I want the UI to be different
every day right like just AI [snorts]
generated so if I click an app that it's
like just [laughter]
Well,
>> takes into account my mood.
>> Yeah, you already know I have two
personas, right? I have my AI persona
>> and I have my, you know, my human
persona and I always argue and approve,
right? [laughter]
>> Flip brain used to be a networking
problem. Not anymore.
>> No, daily reality.
Actually, there's a lot of AI in
the only way I could get done the work I
did on Stratos was with the you know
AI work because I literally
>> I noticed
>> Yeah.
>> Well, I'm not hiding it.
>> No, no, I mean no like my my RFC that I
did uh or route identity. No, what is
it? Route policies.
>> Mhm.
>> That was fully done using AI. I have not
written a single line of code.
>> It's got qualitywise a lot better. I
mean, you still got to like watch what
it's doing carefully, but
>> I find that like acceptance testing is
more important, right? So, creating an
environment where it can like iterate
and have a feedback cycle and then you
get good results.
>> Yeah. Yeah. I got the same same thing. I
mean, that's the type of thing that I
think we should be able to somehow
incorporate into into Cloud Foundry is
some sort of
loop, right?
>> Yeah. Like ideally you can like what I
find really valuable in my home lab is
having like a borch director and like a
cloud foundry because I'm working on
cloud foundry so that my my ed uh agent
can iterate like do actual borch deploys
of the source code or of the changes and
then debug the components right so you
would want a similar thing to happen for
apps right so that I don't know if that
should be the initial thing but ideally
maybe eventually you can have your
agents run on cloud foundry so that they
can iterate with
uh on apps.
>> I think that's a great idea. That would
be great.
>> Yeah. The the thing I did for the my
stratos talk is I wrote it from my AI
persona point of view.
>> So when I said the AI way I'm talking as
if through the AI saying you know you
rejected this but we did a lot of
looping. The reason why he approved so
much is because we did a lot of uh
approvals up front so I don't have to
worry about it.
>> You know, uh when Chris put in his
couple things that he wanted, I went
back and forth a couple times with him
before we do approval. So, it's not that
it's not approving, it's just a
different cycle. So, uh, I have a little
picture of plan, argue, execute,
um, redo because the plan was wronged
and start from the beginning again. And
there's that that was kind of
>> the picture I put in place. So, that's
how I'm doing that's how the AI talk uh,
sorry, the Stratos talk is set up to be
uh, AI based. Hopefully, uh, Dr. go and
I can work that out and make it work.
Right.
>> Um,
should we wait for other people or do we
think this is it? People accept us. I
don't know if we can actually see.
>> Much much smaller group than the last
time.
>> Yeah.
I would just say get started. It's
already seven after. Hi Chris.
>> Yeah.
>> Wild Chris appears.
Hey everybody, how's it going?
>> All right. How you doing?
>> I'm good. It's uh you know, Wednesday
morning, getting stuff done.
Looking forward to H Highleberg in a
couple weeks.
>> Oh yeah.
>> Hey, I just emailed AWS.
>> Thanks. Thank you, Chrissy.
Okay.
Do you had something in mind, Don,
for this meeting?
>> I I was thinking that uh the agenda for
the meeting should be to figure out how
to organize the followup meetings and
the working on the ideas and the uh
uh the on the ideas. So how to organize
the work and then uh look into
how the ideas are clustered in uh um so
um what kind of ideas we have and how we
want to approach this maybe uh one
cluster per uh meeting or something like
that. Um yeah.
>> So basically figure out how to uh
>> um tackle the ideas and
and the research notes so that we at the
end come up come up with um proposal
what makes sense um for the different uh
clusters which idea we think is the best
and whether it makes sense to be
integrated in cloud foundry or not. Um
>> thank you.
Um,
I did a bit of that.
>> Um, not the meeting thing, but I did
have AI do a bit of uh
rating the different research things on
different axes
and um that's fun, looks nice.
Um but I also did ask to um figure out
what the uh
yeah what what strategic idea or clust
potential clusters could be or areas of
interest
and it found three of them
>> and I think that those are also things
that I had like found a bit right so
it's the
durable execution.
>> Um,
so that's so that's about the the the
checkpointing and making sure that these
things can like it's a different type of
workload, right? It's close to a task,
but it has a bit of state in it.
>> Yeah.
>> Uh, and then there's the the
snapshotting and like how do you want to
deal with, right? Like on one end we
have that RFC that's in draft for like
actually having volumes with state in
containers. On the other side you have
things like dapper and those types of
things that have more like provide APIs
to do snapshotting or um checkpointing.
>> Yeah.
>> Uh something along those along those
lines. Uh there's like stuff around uh
identity.
Um
there's a bunch of stuff in that area.
And then there's the the isolation part
like an actual sandbox, right? like um
a sandbox API being able to for a given
session spin up a container that also
has some sort of I mean there's a bit of
overlap with like the durable
addressable execution and the the
isolation aspect of it but uh yeah I
think those are distinct
s uh problems um
>> yeah I think one uh sandbox this
isolation sandbox box is uh something
which uh people discuss a lot in the
sandbox. I also have in um scope like uh
controlling the out egress uh
communication for example and access to
secrets for uh
>> yes
>> yeah and auditing that right
>> and the and the one I added as well the
identity portion which is always
obnoxious but necessary.
>> Yeah.
Uh what are the what are the diamonds on
your little graph here? Is it like
>> Oh, so those are ids. So we have ideas
and research things. So there were some
things show put in as ideas. So
uh so we can go to the full markdown.
That's this one. This is this is by a
notable author.
>> No, no, no. Ignore that guy. [laughter]
He
>> does not know what he talking about. No,
but so like those are Yeah.
>> then. Yeah. I mean that when I was
reading through the ones you were doing,
that just seemed to be the only gap area
that I could find a like a missing that
you weren't kind of covering. Um not not
not no statement there other than like
that that that's the one gap that I
could find when I was reviewing. So I
tried I tried to write to that gap.
>> Yeah, makes sense. Then there were some
research notes already for this which
were related to there were some
standards right around this.
>> Yeah, I think I linked to them in the
footer.
>> Yeah. Okay.
Um
>> what's the other triangle?
>> Um
this one.
Yeah. So that was one. So I've looked at
like the um
dapper seems like an interesting
technology
uh and we already have side uh sidec
cars right so this could be potentially
a thing that putting sidecar
>> what is its like adoption in the
ecosystem is like
>> uh it is um
what's it
>> like it's not something that's going to
possibly just disappear like
>> it's CNCF have uh and it is has been um
what's this? [snorts] How do you call
that?
>> Graduated.
>> Graduated. Yeah.
>> Okay.
>> Right. So that's why I thought that made
it a potential interesting thing to put
in. Right.
>> Okay. Yeah.
>> That and it has like a lot of client app
clients support type of things, right?
So So that was one of the So we have a
few ideas, right? So there's the deapper
stuff [snorts] and then you could even
make router the go router deapper aware
right so that it knows for example uh
where a certain
session is being run right and like it
has checkpointing so if uh a container
gets killed it can uh reassign that work
to another container and then start the
work again from the last checkpoint and
then the go router because it is aware
of the the the chain of like it has some
sort of hashing thing. How does I don't
know what's called again?
Um
but yeah like it it keeps track of where
things are being executed right so then
go router could be aware potentially
>> customizable routing algorithm h based
>> yeah um but then I was thinking about
this dapper thing and then I thought
maybe we just want durable tasks for CF
that was my like thinking along this
>> I mean that's actually where my mind was
going with the Dapper if we can like
kind of add the missing things. Uh
>> yeah, like maybe you don't need all
dapper, right? Yeah.
>> And then just oh look to use dapper you
just configure this or whatever.
>> Yeah. And then I even went as far as I
don't know where I did that. Uh I had
another idea which was basically
durable tasks maybe even was that the
one
um because in the end I realized like
okay if we're we already have staging
which is basically a process that runs
and at the end it snapshots its state
[snorts] and puts it in a blob store.
Right? That's basically what we're doing
when we're creating a droplet. So that
concept already exists. So couldn't we
do the same for agent tasks, right? They
run, but then instead of running to
completion and doing nothing, it would
snapshot its droplets. Not not the
droplet, but its workspace. Maybe it has
a workspace directory that just gets
snapshotted. And
>> the back end of things uh things like
cloud code, they have this space, they
have called the scratch pad. So
>> yep, 100%.
>> Yeah. So basically what you end up with
if you want to run agents on cloud
foundry you basically have the getting
your runtime stuff installed which is
basically staging and build packs right
so you get your droplets
and then you have your runtime state
that you may be also want to snapshot so
I thought these concepts are actually
quite close to what we already have in
cloud foundaries just tying them
together a bit
>> what I'm what I'm wondering is that we
would have like agentic build packs we
would add like so we'd have like a cloud
code build back a
>> um maybe we could use PO or whatever
makes sense.
>> Yeah. And and you could have an MCP
server where you ask for um
where an agent could ask for a different
dependency to be installed, right? So
then it would be the container would go
through a staging cycle again. container
gets killed but the the state is
snapshotted and then it's brought back
resumed with new with a new droplet and
the same works workspace.
>> Yeah. So I wonder if we can map MCP
right onto the OSB API and
>> I don't I don't know. I'm I'm thinking
out loud, but um
>> yeah, I mean
>> like I I think it would make more sense
to maybe have I'm lost in my Windows.
Maybe have uh cloud controller have some
sort of MCP API so that you can have
like agent identity. You can use maybe
MTLS something using the identity search
that you already have in your containers
to talk to cloud controller to be able
to control the life cycle of your own
container, right? So you can ask for a
new revision with new dependencies or
you can ask for a snapshot to be taken
or whatever, right? Like that's that
makes sense. And the reason I was
suggesting the OSB API path is I was
thinking like I was viewing the MCP
connections and as sessions as like on
demand service creations kind of thing
is what I was thinking
>> and then so we use what's already there
and then on the build pack side uh where
it's going through the staging and stuff
have it read from the vcap put it into
wherever it's got to go for configuring
to use the the
service instance MCP service inst
instance that it was provisioned. That's
all I was thinking. Not not
>> um
>> yeah, that makes sense. I mean, there's
still like the use case for more MCP
servers, right? So, you you probably
when you're doing this agentic stuff,
you probably have corporate MCP servers
that provide access to some unique
resource that that that's specific to
your organization. If we had if we had
like an MCP broker where they could just
kind of register their custom MCP with
it and then it facilitates via this
mechanism then the agents themselves can
say hey I need one of these an instance
of this then or I need
>> yeah and then the agent build pack could
be aware of that right and inject it
into it right yeah
>> yeah so that's what I was like if you
play around with these building blocks
that we have in CF a lot of stuff maps
pretty cleanly
>> close very close yeah
>> yeah it's It's really close. So
the big question is where to start?
>> I think uh I think we should we have the
clusters to my understanding. We have
clusters like durable execution. You
mentioned sandboxing isolation
>> um
um
framework SDKs I don't know uh they are
maybe more into the build pack space.
how to expose MCP ser
>> and uh every workshop or uh we can build
working groups which are focusing on the
different clusters and they try to
somehow propose
uh solution for that uh cluster which
technology or what makes sense actually
uh uh I liked your uh uh diagrams at the
beginning I couldn't get whether they
per quest. If we have something per
uh we see
>> it's currently being built that my agent
was not done in time. [laughter]
For example, if we have this per clust
where we have different proposal how we
which technology could be used, we can
see which one is more m mature and then
uh try to think through how that can be
integrated whether it makes sense or not
and then uh come up come up uh uh with a
solution. I I al uh there are some
people who are interested also from MSP
but they on vacation I mentioned at the
beginning. So at at least from SAP side
the people on vacation
>> uh three four colleagues they would
would like to join but uh no
>> we can have another one soon and we can
we can even meet up in person soon.
>> Yeah but I I need to present something
the outcome [laughter] but I but I think
like if we we just have these three
clusters and we have all these research
things I think that that is actually a
good thing
>> the diagrams with what what how the
technology is. So yeah, I think this is
quite
>> the other thing is like I was thinking
is like on principles uh of approach and
stuff like that. So rather than just
saying, hey, let's integrate Dapper in
directly,
I like the idea of ex extending the
functionality that's already there based
on what's already there, like you're
saying with the durable uh
>> items and
the principles of just extending what's
there to be able to then support that
via plugins or build packs or any other
mechanisms. I I think that's the the
best approach. Um
>> yeah, staying CF native, right? Like CF
try keep keep our own spin on things but
then but it's more about like learning
from these these other things like
what's there and what can we
>> and what do we need to add to enable
those use cases
>> yeah and I might support
>> probably there's a big chance that I
will do a dapper P
just to see if it like what it would
look like but then more of like for
learning right so you see like okay
where does this how does this feel right
like what are the things that feel wrong
what what they encounter and take that
like
>> yeah when you do that PS PC I uh what
the question I am here interested do we
need a new life cycle for this workload
or is the current one okay um so uh for
example we have in the current one
evacuation uh option and that evacuation
could be something like persisting the
uh workspace or the workbook or
something and
>> we have also uh hooks when the uh
container is starting again and that can
be used. Is this enough or do we need uh
something uh more uh
uh more uh uh a little bit different a
new life cycle which fits better to this
uh uh concepts they have in the durable?
>> Yeah. So like
>> Yeah. So we have that whole RFC with the
discs, right? So but that feels like ah
last resort kind of thing. I mean we
started there.
>> So it feels like
>> it's it's heavy. It's it's large. It
feels
>> really heavy to connect containers with
volumes.
>> Yeah. And then putting Borch in the
critical part and stuff like that. So
it's like okay
what's the minimal thing we can do to
make this work and still be sufficient
right? So that's uh
>> yeah my gut feeling is you need some uh
hooks to be able to do this and the
decision how is with the implement
>> the person who is
>> yeah another question
um and like I'm still trying to find the
people within ravelo bankank that are
trying to run agents on cloud foundry I
haven't found them I still I think it's
going to happen. Um, so do you all have
like good user potential user visibility
into this topic? Right? Because I think
it's currently a bit from a just
technical interest, right? So it's like,
yeah, I I would like to do these things.
Uh, I don't know if it's like a a
validated use case, right? So that's
another side like how can we validate
that this is actually a use case that
people are interested in.
>> Mhm.
>> This could be part of your session
[snorts] to ask a little bit or
>> Yeah. But I don't know if we have many
developers in the room.
>> All platform engineers [laughter]
>> looking into the schedule. I think uh
people with more technical background
we'll join but
>> I mean developers have a technical
background. Don't be uh [laughter]
elitist about it
>> but they are not platform engineers
>> right. Uh my take on it is is that it is
is it was how I dealt with plugins. It
was it was the same thing.
It's obviously the community wanted it
>> but at the same time nobody wanted to
participate in it.
>> And that's kind of where we're heading
towards and not I say heading towards
this is kind of the environment we're in
a lot. I mean if if it wasn't for
um Dr. down Wayne saying, "Hey, we need
stratos for for our clients." I never
been working on it. I would have never
put the time in.
>> So, it requires some sort of impetus
behind the scenes to make it happen.
>> Um, yeah,
>> my take is is that no one's really
looking at AI relative to the um
governance point of view. I mean, I'm at
a different level, right? I worry about
the governance because all these
transcripts
and if you put a secret in there because
you you know you're working on your
company internal projects whatever you
may be doing that's gets exposed all
that information is exposed and in my
case I'm using you know 100% claude okay
um that information gets exposed and I I
had to train Claude to say anytime you
put secrets into the transcript warn me
right now. He keeps warning me all the
time now because I'm doing stuff in my
lab and I don't care if the lab gets
exposed and that but if I was working on
a client, I want to know that right off
the bat,
>> right? Because I got to tell the client
that, hey, I exposed one of your
secrets.
>> Yeah.
>> Right. So I I think there's a level
there of that we might be able to do
some maybe it's not a physical project
but the warnings behind using AI and and
tying in if if if if some secret from
SAP got out uh or or access to
information or rebel bank getting access
to accounts or at least to the data to
the accounts that's really serious right
And so maybe maybe there's an angle
there that you could put into your talk
in terms of what's going on and what
what we need to do and it's something we
have always have to think about when
we're working on any of these projects.
>> It comes down to compliance, right? In
the end.
>> Yes.
>> And that's like comp. It's a compliance
thing and as a bank we have a lot of
rules and stuff that we have to comply
with. But the problem is or the problem
is not a problem. It's a feature for CF.
we have already taken care of all that
stuff, right? So if we can make sure
that these agents end up or send their
logs and everything through the same
mechanisms that we already have in CF,
then we inherit all the compliance that
we have already done for CF, right? So
application logs for the banking
applications also go through CF, right?
So that's already compliant. So that
will be sufficient for agents stuff as
well, right? So and then if we just use
a local LLM, we are good, right? Or we
we have an LLM that we have a contract
with.
>> The difference is is some of those um
transcripts go to third parties.
>> Yeah. But that's a contractual thing.
>> Okay.
>> From a bank perspective, right? So we
just have
>> So you have to have a contract with each
one of these um LLM companies.
>> Yeah. And so by running your work your
agents on a platform that you control,
right? Then you can enforce these things
glo u centrally, right? Because you
control as a platform you control which
uh LLM are being brokered to these
agents. But if you have people running
all this stuff on their laptops, you
don't have that compliance, right? So
that's what I think the case is for
running agents, actual developer agents
on top of a platform because then you
can do the compliance centrally.
>> I think I think here are two aspects.
One is uh the observability of the agent
what the agent does. The second one is
to uh sandboxing to not get give access
at all because at the at the end it's
running uh
>> untrusted code. Um yes and uh you better
don't provide secrets
>> right
>> it's it's glass radius controls to that
>> right and but you do but how many how
many how many of your uh developers
people are running stuff on their
laptops yes the laptops may be
>> it's a shadow that doesn't exist at the
same time it's not a thing nobody has
that like I mean it's
doesn't exist
So uh that's why if we uh uh we didn't
talk about prioritization but if we
prioritize some clusters my uh uh at
least my opinion is that the sandboxing
should be somehow
uh the first thing you look into to at
least say people hey it's secure to run
your agent here you can connect MTP
servers you connect other backing
services in a secure way and you have
certain possibilities to uh implement
certain use cases and then we can
iterate from them. Do you
>> Yeah, because without snapshotting it's
already valuable, right? Because then
sure you sometimes lose an agent but it
can run, right? Yeah, [snorts] that
that's true. And then like with the uh
additional identity stuff that makes it
so that you can do you use like workload
identity federation, right? So you
basically make it secretless, right? If
you make it secretless, better, right?
We can have dur ephemeral secrets and
that's used to authenticate with
everything else, but it's tied to one
single container with one agent, right?
That's great. That's another built on
top of that. And then there's the being
more resource efficient, which is
basically the okay, we're going to do
the durable addressable execution thing
where we're going to do checkpointing,
snapshotting, and we we can be efficient
with this.
>> Yeah, that's that's great. They build on
top of each other. I also think that on
the observability side we have uh uh
certain things on CA but some looks to
me like people are more on hotel uh APIs
focused will be then maybe interesting
to extend CF. So you uh that we offer
hotel based uh uh options to uh consume
the data the audit works and uh and the
uh agent walks. Um there are already
some uh is some support in CF and I
think this will also be interesting for
all work quotes to offer also autobased
options. Um and that will also comply
with what I observe in other areas how
observability is uh
>> so so we agree that an initial
good like proof of concept to unlock all
this other stuff would be to to have an
agent running on CF
[laughter]
>> insecurely like we we just have one and
then we see like can we make that work
and then we're going to bolt on all this
other stuff, right? And make it better.
But that's like the initial thing we're
going to try because an agent and then
I'm talking specifically about something
like open code, right? Like that to me
is an agent because there's al this
whole class of things which is like
these all these agent frameworks, right?
So I think in the end probably
developers
building agentic stuff want to use more
of that. Yes. Yes,
>> but I think if we can make it work for a
coding agent, make it secure enough for
that,
then we also built the primitives that
would work for for those um those
frameworks, but that's like a
hypothesis, I guess, or that's um I'm
not sure if that if it translates.
>> It seems like we should also be looking
at harnesses uh especially the bigger
public ones like you just mentioned open
code. So maybe that build when we get to
the build packs maybe the build packs
are actually harness packaging.
>> Yeah.
>> So you have a build pack for for open
code you have a build pack for
>> pi.dev you got a whatever cloud code
open yeah
>> I also put that in that space. So in the
build pack space to take care of the um
>> so but I think these are distinct use
cases right. So there's the we want to
provide agents [snorts] a way to run
agents closer to the to the app right
which is running agents on site on top
of a cloud foundry and I think there's a
a good use case for that or there's a
case to be made that it has a compliance
benefit to be able to run these env uh
agents in a controlled environment
compared to on developers laptops. Uh I
think that that that that that's at
least my um
my experience. Um and then there's the
all these agentic frameworks for
building agentic apps, right? And those
should also be able to run
properly on cloud foundry,
but it's different and it could be that
you're using an harness to build an
agentic app, right? Uh but it's it it is
two distinct use cases.
>> Yeah,
>> they are a bit different. And for
example, if you're running an an agent
on top of Cloud Foundry, you have things
like wanting to do to be able to install
dependencies,
right, in your session, which is a a
different problem. You don't have that
problem when you're building an agentic
app, right? because it maybe maybe it
spins up a a sandbox.
>> I mean that might be like where the
durable
>> sandbox
>> that might be where the durable part
comes.
>> Yeah, because then you you might have an
app, right? And it spins a sandbox and
it wants a Python in that sandbox
because it writes a Python script to do
some user
um thing, right? It wants to parse some
data for a user, right? It does it in a
Python in Python executes that script
and it needs a Python runtime. So it has
a bit of overlap
but I think it makes sense to at least
call out these two personas right as
separate
target personas. I mean there's there's
even more personas actually in a working
group, right? So you we didn't even
touch upon the running LLMs on Borch,
right? Which is another persona.
>> I think we intentionally dep prioritize
that for now, but I am super interested
in that myself.
>> Yeah. So that that's one. Uh and then
there's the uh LLMs or stuff for for
Borch operators, right? So being able to
use LLMs to get more or make operating
Borch easier
>> and um we're putting together uh an
approach for using uh rag.
>> Yeah, I saw there was a talk about that,
right?
>> Uh yeah. Well, yeah, I'll be giving the
talk apparently because he he because of
the uh US governmental shenanigans
um he won't be able to travel. So yeah,
uh but anyways,
but yes, he he's put it together and I'm
I'm going to give it for him.
>> But uh let's go again back. I think the
first step should be people will be uh
uh uh relaxed to put the agent on cloud
foundry and connect some services and be
uh uh uh sure that the secrets there
won't be sent somewhere uh you don't
want uh like uh sandboxing uh and we can
go connecting services first we can go
like when suggested with the primitives
we have binding service uh maybe in the
future We can think of uh specific type
of service which uh for example
represent MCP MCP servers or uh skills
or something different. Uh uh but at the
beginning we just can have a PC using
the current primitives and see how it
works and what does it mean
>> where the friction is.
>> Yeah. Um
>> okay.
Okay. Who's going to instruct his agent
to do the work?
>> So I can uh
>> I don't think there's a reason why we
can't all try to do that, you know.
>> Yeah, just all do it.
>> So Norm mentioned, for example, we now
have uh because of the Proxmox CPI, we
now actually all have our own labs. Um,
so we can actually the only thing we
don't have yet is a GPU, but [laughter]
but we can we can spin up uh we can we
can literally take tear things apart and
you know do that. So
>> yeah, I have a local Deep Seek. So
[laughter]
>> CPU based?
>> No, no, I have a DJX Spark.
>> Oh,
shiny.
>> Yes.
I like I like the idea trying to uh
figure out in parallel and then uh try
to consolidate uh uh
>> yeah we we can we can compare notes and
then [laughter]
>> yes
>> you know I have homework
>> yes
>> oh yeah um how can we organize this work
um
>> I mean we we can all we don't need you
just need your own repo, right? So you
can just put it on your own account,
create a repo, proof
>> we can share our results and then figure
out where we're going to go after that.
>> Yeah. And maybe come back with an idea.
So you basically or you just create an
issue on the notes repo pointing to your
for your your proof of concept that you
did and put in some um and maybe we can
create a proof of make a pull request
and create a p uh proof of concepts um
directory right so that we have some
like highle thing where we capture proof
of concepts that have been done.
>> Yes sounds good. Yeah. Um
yeah.
>> Okay,
>> sounds good. And uh we can open PS
against this uh with the different uh
ideas how uh
>> yeah
building stuff it's nice when you don't
have to do the coding. [laughter]
>> Yes,
>> it's fun. Robin, I got feedback that
iterations were needed on the agent
generated stuff. [laughter]
>> I I keep on trying to work on iterating
on ways to improve the output quality of
those things to be honest.
>> Yeah.
>> Um and it has gotten so much better in
in the last year. Um but it still needs
improvement.
>> So yeah, I've found those balanced
reviews uh the ones that you can now do
with Copilot, they find a lot more. So
I've for the um I'm currently working on
a pull request for the UAA for um MTLS
to JWT token so that you can use the
instance identity search to get a JWT
token.
>> Um I think that's a great thing to have
for agents as well, right? Like if you
have that.
>> So because you can use for MCP and like
VIF and everything.
>> Yes. Um,
so if I went through maybe 20 or
something iterations of of these reviews
and every time it found the thing and
then addressed and um I don't know it's
uh find it funny that like Claude didn't
find these things to begin with. But I
mean yeah um um Claude has this issue
that it's in what I call inly focused.
If it's on the edge or just slightly
outside the edge, club will never find
it.
>> Well, it also it's not just it doesn't
find it. It'll like, hey, I see that
thing, but I'm ignoring it because I'm
going to my goal,
>> right?
>> And that's that's the real problem. So,
that's that's why there's so many
iteration loops and repeats and
everything else.
>> Yeah. And I
>> open up that
>> door, right?
>> Yeah. Yeah. And I last week switched to
using all the uh um
OpenAI models again, right? Because I
found those are much cheaper. So the
what's it the Soul and uh
Terra and Luna um those models those are
I don't know interesting.
>> Okay.
So, but then you changed models. So, now
all the things you knew about them is
it's different, right?
>> Right. But that's okay because
>> different flaws. Yeah.
>> Yeah.
>> So, it's uh it's like brewing potions.
You just put things together and it's
like, yeah, I don't know, maybe
something nice comes out this time.
>> It is wizard. It is originally many
cases because
>> there's the only way we I I've only find
AI really useful for people who already
have the experience behind what it takes
to build stuff already
>> and getting new people to get that
experience.
I'm not sure how that's going to be
done.
>> And without that without that
experience, uh what you're going to end
up with is a bunch of crap.
>> Yeah.
Yeah. That's the one thing I've noticed
is like you really need to be able to
call on them like no
>> right
>> go look at that again you
>> what you're doing basically is you're
building that mental model right so you
don't have to look at the code because
you have that mental model of what what
it's building right so you know what
it's building and then you can see like
but this doesn't look right and then you
can say like but focus on this thing
right do that different and that's yeah
that's uh takes experience, I guess.
>> Yeah.
>> Well, right now that takes experience. I
I just don't know if we can
um train that experience into something.
Uh because it, you know, you start with
something simple, you build it up. Oh, I
I saw this, I saw that. You know, it's
it's kind of how humans do it, how we do
it, right?
>> It takes a lot of effort and it takes a
lot of years of time. And the nice thing
about AI is time is compressed.
So we can do something like that. I
mean, one of the things I'm look at uh
relative to the plugins is having an AI
plugin, right? That you plug something
into the the CLI command and then
execute do stuff and have stuff feed off
of that, right? And then now you could
have your your uh whatever uh tool that
you're trying to build actually work
through uh with the this CFCI interface
and do what it needs to do.
>> But isn't that more of like a skill at
this point?
>> It it is and it isn't. Uh because when
it isn't in the case of it needs access,
[snorts] right? And right now the
plug-in gives you the access that you
need in order to do it. Now you build
that if it is a skill but that's a skill
for a skill is for one topic. What you
want is a skill that maybe it's going
across multiple
um envir um CF environments. So you you
want to be able to switch between
u using the CLI getting the data back
right because you get the raw data
basically. I I'm getting the raw data
now through um CFCLI, right? Or or
Cappy. So, I'm using, you know, the
Cappy is the stuff hooked hooked up, but
really all that we're really doing is
talking to Cappy, right? In terms of
getting the stuff done and how you tie
that all together is all dependent
>> and I saw also been seeing PC's having
MCP server behind uh so in front of the
CLI or they cut the APIs.
Okay,
>> MCP is is not what what I find is that
MCP is uh quite heavy. It pollutes a lot
or spend you lose a lot of tokens
because of it, right? So that's why
skills are usually a a good CLI with
with skills is usually more efficient.
>> Okay.
>> So for example, I don't use the MCP
server for GitHub. I just use the GitHub
CLI and say like create a pull request
and it does it right. So
I think the same is true for CF. I
actually don't have to do um I don't
even need a skill. It just knows about
the CF CLI. It's trained in in most of
it because of the documentation I guess.
Um
>> yeah.
Um so uh regarding some timelines uh
should we try to come up with uh some
puscies
before CF submit and then maybe you can
have a little bit time to incorporate in
your talk the different ideas and then
we can discuss during CF submit in uh
person. Uh
>> mhm.
>> So have one hour or two hours sitting
together and discussing those uh puscies
the uh advantages disadvantages and try
out to come with one uh integrated uh
approach how to implement the
sandboxing.
Um
>> I love that. That would be a really
useful
uh
I don't know useful u way to spend our
time. Right. So if we are together at CF
summit, it would be good if we already
have some ideas on our own, right?
Because then we can at that time discuss
in person and be productive hopefully.
>> What I like with sandboxing sandboxing
is also this can be also uh useful for
normal works on CF not only for agents
but uh every workload can profit from
that if you can activate. So I you say
okay I want to run this work quote in a
sandbox mode and then um for whatever
reason because it's a legacy I don't
know someone gave me an application and
I want to run it on CF
>> I also feel like there's a great use
case for when we do have the maybe even
before that but when we do have the
Bosch based
uh LLM serving
>> we can actually also probably I'm not
Sure, there might be more use cases than
just that one, but the isolation
segments feature, I feel like it could
be very useful uh for some some of this
stuff too. Like if they want to isolate
these AI workloads away from application
workloads, for example, we can have an
AI isolation segment or some some kind
of logical partitioning of these things.
>> Uh yeah, that there's something there. I
haven't thought through it, but yeah.
>> Yeah. And I like that we're not
specifying sandboxing too much, right?
because then we can all start with our
own ideas of what that means sandboxing
for CF and then we're going to probably
find that we have really different
ideas. But I think that's good, right?
Because then
>> Yeah,
>> that's why I'm exactly why I'm
suggesting we should all try it like
>> Yeah. do it all and then like just yeah
>> think through the promo of what that
means for you CF and sandboxing like
just really vague high level and then
>> try to come up with a concrete
implementation proof of concept
something
um
>> I like that
>> are we are we going to now this meeting
are we going to like try to other than
summit week obviously but are we going
to uh try to like do this every two
weeks or something or
I uh uh let's discuss this during CF
summit maybe.
>> Okay.
>> But it would be good to at least present
the results of our PC before CF summit.
>> Yeah.
>> Uh I'm I'm I'm around until the 16th I
start traveling. So
before that
>> we think we will be able to we have two
weeks actually. Um I'm not sure.
>> 24 Agents can run 24/7. You know that,
right?
>> Depends.
>> Just need to make sure that you setting
than others.
>> No, no, no, no. But I can run my agents
from my phone, manage them in my lab.
So,
>> it's fine.
>> I want to uh work with and discuss and
uh generate ideas on location.
>> Well, we'll get as much as
>> there's your there's your problem.
You're interacting with humans. You
should be interacting with agents. It's
much more efficient. [laughter] I
learned that doing in parallel and still
using my head and trying to figure out
things still [laughter]
to do.
>> Have your agent handle the humans.
That's better.
>> I see. I see. Um,
>> so you got the split plane as well. The
same problem. [laughter]
>> Yeah.
>> I don't know. I will write some meeting
notes. I want I will just write meeting
notes to people uh see what we discussed
and what we want to work on and uh and
so maybe others can also then in
parallel do stuff
I'm not sure about putting concrete date
before CS submit if you if um we maybe
>> I think it's a short timeline I mean it
can be done but I don't think it's
>> we should just present what we have or
>> we can state that we if we have uh PC's
ready before that we can organize on
demand a meeting and then do it without
committing to a date.
>> We can do it async as well, right? Like
if you just create the issue or the PR
and then we can read it there and then
maybe if needed we can have a meeting
oneonone or whatever.
>> Yes. Yes.
>> That's fine.
>> Have your agents meet.
>> Yeah.
>> There's this agent to agent protocol. We
can just set it up. It's fine.
>> But we don't have the identities yet. Uh
>> the identity. Oh, we should start with
the identity. [laughter]
>> We just found the tension. We need
identities first.
>> First identity so our agents can talk
among themselves and then we are fine.
>> Want them to exchange secrets. I first
want them not [laughter] able to
exchange secrets and then identify
themselves. What I what I love about
this new thing though is like it's
opening up the [clears throat]
possibilities of what we can do by
making us more a a lot more productive.
So I personally spend a lot more time
thinking about what the heck I want to
do instead of doing it
>> basically and calling
[laughter]
>> Yeah.
>> Okay. All right. Can you put the meeting
notes in also a pull request to the so
we keep it all in the same repo? Just
create another directory or something or
something. Mhm.
>> Yeah. Another folder.
>> Yeah. Yeah. Yeah. I hope my agent is
able to do that.
>> Oh, it will be able to.
>> Did Did we record the uh Did we do a
transcribe on this?
>> It says it's being recorded.
>> Yeah. But does it does it transcribe
then or can it?
>> It can be. I mean,
>> okay. Yeah, probably
>> you got to be careful the transcription.
>> Uh, whoever's the host could probably
>> Oh, yeah. It's not Oh, it is. Meeting
summary generate transcript is not
>> It says request.
>> It's not turned on. Okay, that would be
good to ask Ram for the next time.
>> Um,
>> yeah. Okay.
Yeah, sounds good.
>> Great.
>> Thanks. Fine.
>> Now go play with your agents, folks.
Have fun storming the castle. [laughter]
>> Take care. Bye. See you all in
Hidleberg.
>> Thanks for your time. Bye. Bye. Bye.
Bye.
>> Bye. Bye.