~/ emre.cavunt_

Platform
engineering,
identity &applied AI.

I set technical direction for Sky's multi-tenant AdTech platform and the applied AI that runs on it. Previously co-founded Syntonym — privacy / GAN anonymisation on cloud and edge GPU. On the side, applied AI for healthcare at Asklepion Health.

Emre on the Striding Edge ridge during the Helvellyn hike
Striding Edge, Helvellyn

Emre Cavunt

Principal Engineer — London

Deep dives
  1. Authentication 101: A Complete Guide to Modern Identity Methods22 min
  2. Multi-Tenant Observability: LGTM at Platform Scale8 min
  3. AI Tool Gateways: Sandboxing Agent Access in Kubernetes9 min

Latest writing

View all
  1. The Token Economy of Your Coding AgentAuditing the token economy of your coding agent: 3,004 tokens on a codebase graph vs 67,428 for disciplined grep — and what the README hides.#Tools#Developer-Experience#Software-Development11 min
  2. AI Tool Gateways: Sandboxing Agent Access in KubernetesAI agents have unlimited ambition and undefined access boundaries. You have sandboxed everything else. Here is how to sandbox your agents too.#Security#Software-Development#Kubernetes9 min
  3. Observing LLM Inference: The Metrics That Actually MatterTTFT is your SLO, not throughput. Here is what to measure for LLM inference, and what Google ADK, LangChain, and LangGraph give you out of the box.#Observability#Software-Development#Platform-Engineering8 min
  4. Network Control with Cilium and Kyverno: Policies That Actually WorkNetwork policies in most clusters are cargo cult: written, accepted, changing nothing. Cilium actually enforces them — and shows you the traffic.#Kubernetes#Security#Platform-Engineering8 min
  5. Keyless GCP Secrets in GitHub Actions: Workload Identity, Scoped to One SecretDrop the service-account JSON key. Federate GitHub Actions into GCP with OIDC, then scope the service account to read one named secret — not the whole project.#GCP#Security#CI-CD9 min