Smarter’s MCP server has a set of tools for the people who run a Smarter platform. A sysadmin opens Smarter Sysadmin, a chatbot in the Prompt Engineer Workbench, and asks “Is anything wrong right now?” or “Why can’t this user…
Smarter uses Calico to enforce Kubernetes NetworkPolicies that start its production namespace from deny-all, in both directions, and then admit traffic by pod label. MariaDB and Redis accept connections only from pods labelled app.kubernetes.io/application-group=smarter, the app accepts web traffic only…
Smarter isolates its tenants in Django with two queryset methods, with_read_permission_for() and with_ownership_permission_for(), that every lookup of a user’s resource starts from, plus a profile switcher whose choice is checked against the user on the way in and again on…
Smarter, a Django platform for LLM applications, keeps credentials out of its logs with four habits. Secrets are typed so they can’t print, log helpers leave out the fields that matter, tests assert that a known secret never appears in…
Smarter publishes its Helm chart to GitHub’s container registry signed with cosign, scans its container images in Amazon ECR when they are pushed, publishes its npm packages with provenance, and installs the AWS CLI for its database backups only after…
Smarter extends django-cors-headers and Django’s CSRF middleware so that every deployed chatbot carries its own list of allowed browser origins, declared in its YAML manifest, instead of sharing one platform-wide list. This post explains what that list protects, what it…
Smarter‘s embeddable chat widget treats every reply from the LLM as untrusted input. It renders the reply’s Markdown with marked, turns raw HTML into visible text, allows links and images only from URLs that match a short rule, and passes…
Smarter‘s Helm chart includes a bastion that is a Kubernetes pod rather than a server. An administrator opens a shell in it with kubectl exec, through the Kubernetes API, and from there reaches the MariaDB database, Redis and S3. It…
Smarter‘s API keys are django-rest-knox tokens, extended into a model called SmarterAuthToken. The database keeps only a SHA-512 digest of each key and its first 15 characters. Every key has a separate random UUID that serves as its public name,…
Calico went in because the cluster had become shared, and in a shared, flat network the most valuable thing in it, the database, was protected by a password and nothing else. Calico is an open-source tool that decides which of…