How to Share NVIDIA GPUs with MIG, Time-Slicing, and Resource Quotas

TL;DR NVIDIA MIG and GPU time-slicing solve different utilization problems. MIG divides a supported physical GPU into hardware-backed instances with dedicated compute and memory resources. Time-slicing advertises multiple schedulable replicas of the same GPU, but those replicas still share memory, execution time, and the same fault domain. Use MIG when workloads need stronger isolation and … Read more

Designing the AI Agent Execution Boundary: What Agents Should Never Be Allowed to Do

An AI agent becomes operationally interesting when it can do more than generate text. It can search systems, inspect logs, create tickets, call tools, draft pull requests, query APIs, trigger workflows, or recommend remediation. That is where agentic AI starts to feel useful in enterprise environments. It is also where the risk changes. A prompt … Read more

How to Install and Configure the NVIDIA GPU Operator on Kubernetes

TL;DR The NVIDIA GPU Operator automates the software stack required to make GPUs usable by Kubernetes workloads. It can deploy and manage NVIDIA drivers, the NVIDIA Container Toolkit, the Kubernetes device plugin, GPU Feature Discovery, DCGM Exporter, MIG Manager, and validation components. A successful installation requires more than running a Helm command. The GPU hardware … Read more

MCP Is the Tool Plane, Not the Agent Controller: Enterprise Agent Control Plane Series, Part 1

TL;DR Use Model Context Protocol as the governed interface through which agents discover and invoke enterprise capabilities, but do not treat MCP as the complete controller for an autonomous agent system. The clean separation is: The agent proposes. The controller authorizes. MCP carries the governed interaction. The runtime executes and verifies. MCP standardizes client-server communication, … Read more

VVF 9.0 vs VCF 9.1: The Real Difference Between a Workload Platform and a Private Cloud

VMware vSphere Foundation and VMware Cloud Foundation share the same infrastructure DNA. Both are built around vSphere. Both can run enterprise virtual machines. Both include vSAN capacity, VMware vSphere Kubernetes Service, and VCF Operations capabilities. That shared foundation makes the comparison easy to get wrong. VVF 9.0 is not simply a smaller release of VCF, … Read more

How to Take an AI Agent from Prototype to Production: A Production-Readiness Checklist

TL;DR An AI agent is not production-ready because it can complete a demonstration. It is production-ready when the organization can prove who is acting, what state is retained, which tools are permitted, how behavior is evaluated, what telemetry is captured, where approvals interrupt execution, how cost is bounded, how failures are contained, and who owns … Read more

Private AI Is Not Model Hosting: A Reference Architecture for Sovereignty, Identity, GPUs, and Operations on VCF 9.1

Most private AI conversations start too low in the stack. The first question is usually some version of, “Can we run the model on-prem?” That is not a bad question, but it is not the architecture question. Running a model on-premises proves that you can place compute near data. It does not prove that you … Read more

20 Essential GitHub Repositories for AI Agents, MCP, A2A, and Agent Security in 2026

TL;DR The essential AI agent repository list in 2026 is no longer just a collection of frameworks and tutorials. A credible engineering stack now includes protocol specifications, official SDKs, server discovery, agent-to-agent interoperability, durable orchestration, evaluation, OpenTelemetry-compatible tracing, red teaming, and operational security guidance. This refresh identifies 20 repositories that help architects and engineers build … Read more

20 Free Local AI Tools You Can Run on Windows, macOS, and Linux in 2026

TL;DR Local AI in 2026 is no longer limited to a command-line chatbot. A practical local stack can include model runtimes, desktop assistants, private document search, coding agents, visual orchestration, image workflows, transcription, and offline translation. The best starting point depends on the layer you need. Ollama, llama.cpp, KoboldCpp, LocalAI, and TextGen focus on model … Read more

MCP vs A2A in 2026: Which Protocol Does Your AI Architecture Actually Need?

TL;DR MCP and A2A solve different integration problems. Use Model Context Protocol when an AI application needs a standard way to discover and use tools, resources, prompts, APIs, or enterprise data. Use Agent2Agent when one independently operated agent needs to discover another agent, delegate work, exchange messages, track a task, receive progress updates, and consume … Read more

VCF 5.2.x to 9.1 Upgrade Runbook: Exact Sequence, Dependencies, Downtime, and Validation

TL;DR A VCF 5.2.x to 9.1 upgrade is not a single SDDC Manager update followed by routine infrastructure patching. It is a dependency-controlled platform transition that begins with the Operations layer, introduces mandatory VCF Management Services, and then moves through NSX, vCenter, ESX, and NSX Edge finalization. The first gate is source-release eligibility. Current Broadcom … Read more

Automating VCF 9.1 VPC Networking with PowerCLI: IP Blocks, Subnets, NAT, and External IPs

TL;DR VCF 9.1 expands the VMware.VimAutomation.Vpc module so PowerCLI can build much more of the VPC networking foundation, including IP blocks, external connections, transit gateways, connectivity profiles, VPCs, subnets, and external-IP assignments. The practical automation pattern is to build provider-owned connectivity first, create application-owned VPC objects second, and publish selected private workloads by assigning an … Read more

VCF 9.1 VPC Networking: Distributed vs. Centralized Transit Gateway Designs

TL;DR VCF 9.1 supports two distinct approaches for connecting Virtual Private Clouds to the physical data center network. A Distributed Transit Gateway removes NSX Edge nodes, the Tier-0 gateway, and BGP from the north-south forwarding path. Traffic can leave directly from the ESXi host through a VLAN shared by every participating host. The design reduces … Read more

MCP Registry in 2026: How to Discover, Verify, and Safely Connect MCP Servers

TL;DR The MCP Registry makes server discovery more consistent, but it does not turn a listed server into a trusted server. In 2026, the official registry provides namespace verification, standardized metadata, package references, remote endpoint definitions, version records, and an API that downstream registries can consume. It does not certify that the code is secure, … Read more

Enterprise MCP Authorization: IdP, RBAC, Workload Identity, and Zero-Touch OAuth

TL;DR Enterprise MCP authorization is not solved by adding a login page to every MCP server. The scalable pattern is to make the enterprise identity provider the policy authority for human access, map groups and application roles to narrow MCP scopes, use separate workload identities for agents and automation, and preserve downstream resource authorization at … Read more

Deploy Linux VMs on vSphere with cloud-init and GuestInfo: A Complete PowerCLI Guide

TL;DR PowerCLI can clone a Linux template, write cloud-init metadata and user data into vSphere GuestInfo settings, and power on a fully initialized virtual machine without attaching a seed ISO or maintaining a traditional guest customization specification. The reliable deployment sequence is: The reusable PowerCLI script in this guide implements that workflow for Ubuntu, Rocky … Read more

VCF 9.1 API with Postman: Generate a Collection from OpenAPI and Automate Your First Workflow

TL;DR VMware Cloud Foundation 9.1 provides an OpenAPI definition for SDDC Manager that can be imported into Postman to generate a structured collection of API requests. The generated collection is not immediately ready for use. The specification defines a localhost server value, so the requests must be updated to use a variable that points to … Read more

HCX 9.1 Migration Runbook: Network Profiles, Compute Profiles, Service Mesh, and First VM Move

TL;DR An HCX 9.1 migration should not begin with the Migrate Virtual Machines button. It should begin with a dependency-ordered runbook that proves routing, firewall policy, IP pools, site pairing, Network Profiles, Compute Profiles, Service Mesh health, and Network Extension behavior before a production workload is touched. The practical sequence is: Introduction HCX failures often … Read more