An0n_Jon
Re:The way every agent framework handles MCP is a latent security problem
on Thursday April 09, 2026 @11:19AM (#47704905)
Yeah, this is the reasons why Orloj has built in policies which are applied to your resources and managed at the runtime level. This way you can allow only certain tool usage per agent for a more fine grained setup.
Re:The way every agent framework handles MCP is a latent security problem
on Wednesday April 08, 2026 @01:50PM (#47693756)
Yeah the governance is also built into Orloj as well as applied policies. More so acting as guardrails at the runtime level. Ill take a look at agentveil and would love to know your thoughts on Orloj as well.
Re:The way every agent framework handles MCP is a latent security problem
on Wednesday April 08, 2026 @01:47PM (#47693727)
Yeah, agreed it feels like overkill keeping the resource running if nothing is calling it. Even with read only you still have the issue with wasted resources but I get what you mean.
Orloj is a runtime with policies you apply as guardrails to keep agents in check for tools and other limits which all happen at the runtime level. And building out the tooling it just made sense to containerize tools so they can be spun up on demand and stay alive when needed and spin down after.
The way every agent framework handles MCP is a latent security problem
When you configure MCP servers in any agent framework today, they all connect at session init and stay connected for the entire session.If your agent is set up with 12 integrations, all 12 are live from the moment the session starts. Holding connections, processes, and attack surfaces. Even if 9 of them never get called.If you're hosting your own MCP servers, you're paying for all of them 24/7...
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @10:44PM (#47538579)
Yep, totally agree. And Orloj has this built in. Tracks the entire lifecycle of your tasks through traces in real time so you can audit why everything happened good/bad. During your task you can see how many tokens each call used (input/output), and latency for each model/tool call.
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @05:06PM (#47535732)
Definitely understand the perspective. I think with all software in general there will be a time where you need to adapt to changing technologies/architectures which is why we open sourced the core so we can have contributors build off it. And k8s is loved/hated but it does solve a lot of problems depending on the circumstance.
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @04:12PM (#47535119)
Didn't realize the Czechs had so many...The story about the clockmaker on the Prague one was interesting. The king trying to blind him so he could never make another for anyone else...
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @04:04PM (#47535016)
This is where the governance layer of Orloj fits in. You create policies and attach them to agents/tools which are all governed at runtime. These policies could be token guardrails, tool authority, etc. You can then check all of the traces of a task to have an audit trail for debugging (cli or UI). There are also human in the loop approval features that can be applied to make sure things are working correctly before proceeding on tasks.
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @03:08PM (#47534384)
It depends on what you're trying to build to be honest. For simple tasks Orloj can be a little overkill but it really starts shining when you are trying to setup large task flows that need many agents/tools/policies. Working with Terraform/Kubernettes for years gave a lot of the inspiration for the gitops side of things which we think fits naturally with how agent systems work.
Re:Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
on Thursday March 26, 2026 @03:01PM (#47534314)
Yes! We visited The Prague Orloj 2 years ago and it's amazing engineering. That's why we named it after it, for how it's coordinating and orchestrating so many complex mechanisms.
(for anyone wondering it's pronounced Or-Loy)
Show HN: Orloj – agent infrastructure as code (YAML and GitOps)
https://github.com/OrlojHQ/orloj
Hey HN, we're Jon and Kristiane, and we're building Orloj (https://orloj.dev), an open-source (Apache 2.0) orchestration runtime for multi-agent AI systems. You define agents, tools, policies, and workflows in declarative YAML manifests, and Orloj handles scheduling, execution, governance, and reliability.We built this because running AI agents in production today looks a lot like running...
Re:Show HN: AgentVerse – Open social network for AI agents (Mar 2026)
on Wednesday March 25, 2026 @12:38AM (#47513311)
This is interesting. It says agents self register...How do agents find this? And why would they decide to create a profile? Wouldn't they be costing their owner tokens to do this?
Re:Show HN: Kroot – dependency-graph root cause analysis for Kubernetes
on Monday March 09, 2026 @12:01AM (#47304762)
Hi HN — I built kroot to help debug Kubernetes failures by tracing
dependencies between resources.
Instead of only showing symptoms (CrashLoopBackOff, etc), it builds a dependency graph of cluster resources and tries to answer:
"Why did this actually break?"
Example failure chain it can detect:
Secret/prod/db-password missing ↓ Pod/prod/payments-api CrashLoopBackOff ↓ Service/prod/payments has no endpoints ↓ Ingress returning 503
Would love feedback from people running Kubernetes in production.