InfoQ - Containers - News

Edera's Object Capability Bounded Authority Promises to Isolate Credentials from AI Agent Workloads

Olimpiu Pop — Fri, 06 Nov 2026 06:06:00 GMT

Edera announced Object Capability Bounded Authority, a security model that separates an AI agent's or MCP server's required authority from the credentials behind it. Hypervisor-enforced capabilities limit agents to specific actions without storing secrets in the workload. Initial releases cover scoped command execution and workload identity; credential-brokered API access will follow.

By Olimpiu Pop

Amazon ECS Gateway Arrives with Generated Hostnames and No Custom Domain Support

Steef-Jan Wiggers — Wed, 04 Nov 2026 09:49:00 GMT

AWS has released Amazon ECS Gateway, an account-level ingress resource letting platform teams define networking once and application teams opt services in with a connector. Each service gets a generated hostname and routing is host-based, and neither the announcement nor the documentation covers custom domains.

By Steef-Jan Wiggers

Kubernetes Confidential Containers Get Fortanix Attestation and Key Management

Mark Silvester — Sat, 31 Oct 2026 08:18:00 GMT

Fortanix's CoCo integration connects workload attestation to decryption-key release for Kubernetes AI workloads. GPU-verification settings affect protection, while upstream Trustee and Azure Secure Key Release offer alternative routes to attestation-based key release.

By Mark Silvester