https://news.ycombinator.com/user?id=bobbylarsonHacker News RSShttps://hnrss.org/hnrss v2.1.1Wed, 19 Aug 2026 15:02:28 +0000The Profiles idea is the interesting part. Injection at creation is the easy half; the hard half is revocation mid-session. If a credential in a profile rotates or gets pulled while a box is up for days, does the running VM keep the old value until restart? For long horizon agents that window is where the risk actually lives.

]]>Tue, 18 Aug 2026 19:02:43 +0000https://news.ycombinator.com/item?id=49350900bobbylarsonhttps://news.ycombinator.com/item?id=49350900https://news.ycombinator.com/item?id=49350900The thing that surprised me running relays for robot fleets: relay was not the fallback, it was the common case. Hole punching fails a lot behind enterprise NAT.

]]>Fri, 14 Aug 2026 17:55:01 +0000https://news.ycombinator.com/item?id=49302284bobbylarsonhttps://news.ycombinator.com/item?id=49302284https://news.ycombinator.com/item?id=49302284