mko.run https://mko.run/ en Firecracker on WSL2, without root https://mko.run/firecracker-wsl2-rootless/ https://mko.run/firecracker-wsl2-rootless/ Tue, 10 Nov 2026 00:00:00 GMT How I run each coding agent in its own Firecracker microVM nested in WSL2, with no root at run time: the stack, what it costs, and ten stumbling blocks. Credential proxies fail open in the details https://mko.run/default-deny/ https://mko.run/default-deny/ Tue, 03 Nov 2026 00:00:00 GMT Where credential proxies for AI coding agents fail open: Docker's and microsandbox's advisories of autumn 2026, three decisions a proxy makes, and what d0 does at each. EmbeddingGemma in Go, tokenizer and all https://mko.run/embeddinggemma-in-go/ https://mko.run/embeddinggemma-in-go/ Mon, 02 Nov 2026 00:00:00 GMT How “ask teblo” matches questions with EmbeddingGemma in plain Go: the models measured, the tokenizer, the one output that matters.