Blog
How we think about running other people’s clouds.
Architecture, the security boundary, and the small unglamorous decisions that make a deploy stop being an event.
BYOC is not self-hosting
The two get used interchangeably and they are opposites: one hands you the operational burden, the other hands you the account it runs in.
What a scoped role actually scopes
Every BYOC vendor says "least privilege". Here is the specific IAM shape Kapten asks for, why each permission is in it, and what it cannot reach.
The deploy should be boring
Health-gated rollouts, addressable images and rollback as a re-point rather than a re-run — the small decisions that make a deploy stop being an event.