Agents that execute code need isolation, but isolation costs overhead. This breaks down six sandboxing approaches — containers, gVisor, Firecracker, ZeroBoot, Apple container, and Wasm — so you can pick the right trade-off for your threat model.
AI Engineering
Total 10 posts
When an agent takes on a task like "help me make a market-research report," the hard part isn't execution but decomposing the task and managing state. This records how I used langchain4j to implement a task tree, dependency checks, retries, and reasoning traces.
A commonly conflated concept: Function Calling is a capability of the model itself, MCP is the protocol connecting model and tools. Clarifies their real differences in tool discovery, security boundary, and portability, and how Spring AI unifies the two.
Every new AI session has to re-understand your project. CLAUDE.md is the project-level memory that solves this. Of the seven sections in this template, the most useful one I've found is "Do not change."
After splitting a document, not every chunk is worth keeping. Ads, nav bars, disclaimers, and duplicates are noise that pollutes retrieval. This walks rule-based, structural, semantic, and LLM filtering strategies, with a Java pipeline you can adapt.
Agent Skills package domain know-how and workflows into a folder an agent can load on demand. This explains how the three-layer progressive disclosure works, how code execution fits in, and how Skills differ from MCP and multi-agent architectures.
The first decision in RAG isn't picking a vector DB, it's what you store after chunking the PDF. Full-text ingestion and structured extraction are two completely different paths; data from a medical scenario makes this very clear.
Once an agent can execute code, it can do everything a programmer sitting in front of a terminal can. Break down the trade-offs among Docker, gVisor, Firecracker, and Wasm sandboxing approaches.
Using the open-source project Horizon plus GitHub Actions' free tier, automatically scrape Hacker News, Reddit, and major official blogs every day; after AI scoring and filtering, generate a daily brief pushed to Feishu. Completely free.
The core of MCP is standardizing your capabilities into tools AI can understand. This walks the full flow — from writing your first tool, to deploying it as a network service that other people and other AIs can call.