Introducing the SpanDock blog
What the SpanDock blog will publish: product news, step-by-step guides and researched articles on AI coding tools, MCP, cost and security.
2 min read
Blog
The SpanDock blog
News, how-tos and researched articles on AI coding tools, agents, MCP, cost and governance, from the SpanDock team.
Download counts aren't trust: a lesson for AI coding agents
A malicious copy of a popular maths library reached six million downloads in two days. Why agents that pick packages are exposed, and what limits the damage.
3 min read
Capturing prompts in AI telemetry is a privacy decision, not a setting
AI coding tools can export prompts, tool arguments and full API bodies. Why it's off by default, the risks of switching it on, and how to decide.
What NIST is saying about AI agent security, and what to do before it lands
NIST summarised industry responses on AI agent security and is building control overlays for agents. The themes, the status, and steps to take now.
3 min read
Subscription or metered: what new model pricing means for AI budgets
Muse Wonder launched with both API prices and subscription-only access. How the two pricing models differ, and what that means for controlling AI spend.
3 min read
The harness sets the bill: why the same model costs more in some agents
New coding-agent benchmarks show one model scoring and costing very differently across agent harnesses. What that means for evaluating AI coding tools.
3 min read
Can another company's computer reach your server? Isolation, hop by hop
The seven checks a connection passes before it reaches a SpanDock server, which ones stop a stranger or another customer, and how to try it in the lab.
4 min read
The EU AI Act after the AI Omnibus: the dates that changed
The AI Omnibus moved the EU AI Act's high-risk deadlines and simplified AI literacy. The new dates, what enforcement looks like, and what to do now.
3 min read
Keep AI spend in check with per-person budgets and SpanDock Mind
Turn on the SpanDock model proxy, give each person a budget, choose what happens at the limit, and see what was spent and saved.
Sandboxing coding agents: what the built-in sandboxes do and don't cover
Claude Code and Codex both ship operating-system sandboxes for agent commands. What they restrict, what runs outside them, and settings worth enforcing.
4 min read
Small open-weight models as coding sub-agents: reading the Mellum2.1 release
JetBrains released Mellum2.1, a 12B open-weight model built for coding sub-agents. What it claims, what to verify, and where small models fit.
Get told when a server needs you: notifications on your account dashboard
Connect a SpanDock server's notifications to your spandock.com dashboard, choose which kinds to see, and send a test. In every plan.
3 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)