01 Agent infrastructure2026Sub-secondwarm resume from snapshot
A control plane that places eve.dev agents into Firecracker microVMs across a fleet of bare-metal AWS hosts, plus the routing layer, snapshot-based warm starts, a deploy CLI with per-PR preview agents, and the FinOps view of cost per agent.
- Firecracker
- AWS CDK
- EC2 Metal
- Lambda
- DynamoDB
- EventBridge
Series
02 Inference platform20268parts, all reproducible CDK
VPC to GPU node pools to a TypeScript router that sends each request to local vLLM or to Claude, with KEDA scaling GPUs to zero overnight and Langfuse showing the dollar cost of every call.
- EKS
- vLLM
- KEDA
- Karpenter
- Hono
- OpenTelemetry
Series
$0inside the free allowances
Document Q&A with citations, invoice reading, agent-drafted quotes with human approval, and a shop assistant, all on Workers AI, Durable Objects, Workflows and D1, each with a per-request cost ledger and a budget in front of every model call.
- Workers AI
- Durable Objects
- Workflows
- D1
- AI Search
- TanStack Start
answers.entuit.comshop.entuit.com
1program for code + infra
Retries with backoff, a circuit breaker per destination, duplicates delivered once and a dead-letter list, written in Effect and run on Workers, Queues and Durable Objects, with infrastructure defined in the same program via Alchemy.
- Effect
- Alchemy
- Queues
- Durable Objects
- Foldkit
pipeline.entuit.com
5OWASP LLM Top 10 risks addressed
An auth and rate-limit gateway, gVisor sandboxing for agent tools, prompt-injection guardrails, scoped secrets and signed model weights, mapped to the OWASP LLM Top 10.
- gVisor
- Kyverno
- Falco
- Trivy
- Sigstore