BLOG
Engineering write-ups, deployment patterns, and the thinking behind source-available agent infrastructure.
featured
The run ended, the screen turned green, and the work is not done. A status is a summary. A record is the evidence behind it — what a useful run record holds, who reads it, and what to ask any tool before you trust it.
Self-hosted AI means running the models, the data they touch, and the automation around them on infrastructure you control. What the stack is actually made of, the two honest ways to own one, and what owning it has to include before the phrase means anything.
Most agent builders do the building part well. The question that decides the purchase is different: where does the agent run, and who owns what it leaves behind? Four questions to ask, and the three ways these platforms are delivered.
An AI agent is software that takes a goal, works out the steps itself, and uses tools to carry them out. What an agent is made of, where agents go wrong, and the three things that make one safe to run.
Seven questions to put to any AI-agent vendor before you self-host. They are deliberately vendor-neutral: each one is a property you can check, not a promise you have to accept. Where a vendor cannot give you a straight answer, the silence is the answer.
EpicStaff is not open source. It is source-available under the PolyForm Perimeter 1.0.0 licence — you can read every line, run it, and modify it for your own use. The main restriction is on building a competing product, and it was never pointed at you.
An agent harness is the runtime layer your agents execute inside: it decides what they can call, what they can see, and what gets written down. Many harnesses are cloud control planes, which means the layer enforcing your governance is a layer you cannot inspect. If you work somewhere that gets audited, that is the question worth asking first.
An AI agent cancelled every active Stripe subscription in a company's account in about seven seconds, while the founder slept. Asked to review its own code afterwards, the model called it "reckless." The lesson isn't to avoid agents — it's that safety has to live outside the model.
An honest comparison of the self-hosted n8n alternatives buyers evaluate — Activepieces, Node-RED, Kestra, Windmill — and the free-tier governance gap none of them fill.
Sovereign AI isn't \"hosted in an EU region\" — it's control in the literal sense. The four layers you control, why it just became binding EU procurement policy, and a procurement checklist.
Cloud AI coding tools can copy your whole repository to a vendor's cloud. The one architectural question that decides whether your code leaves your network — and what \"self-hosted\" has to mean to count.
