Latest from Tetrate on Envoy, Istio, service mesh, and enterprise AI gateway.https://tetrate.io/https://tetrate.io/blog/solve-llm-provider-lock-in/https://tetrate.io/blog/solve-llm-provider-lock-in/An AI gateway centralizes model routing, fallback, cost control, and observability to solve provider lock-in, outages, and runaway LLM costs at scale.Tue, 09 Jun 2026 04:00:00 GMThttps://tetrate.io/blog/envoy-http2-bomb-cve-2026-47774/https://tetrate.io/blog/envoy-http2-bomb-cve-2026-47774/A single residential connection can exhaust 32 GB of Envoy memory in ~10 seconds. What the HTTP Bomb is, who is affected, and how to patch it.Mon, 08 Jun 2026 16:00:00 GMThttps://tetrate.io/blog/tokenomics-roi-on-tokens/https://tetrate.io/blog/tokenomics-roi-on-tokens/Tokens are the fastest-growing line in enterprise tech budgets. The Linux Foundation named the problem; measuring token ROI is still on you. Here's how.Fri, 05 Jun 2026 00:00:00 GMThttps://tetrate.io/blog/parameter-level-authorization-for-ai-agents/https://tetrate.io/blog/parameter-level-authorization-for-ai-agents/Tetrate Agent Router Enterprise and Ory enforce dynamic, parameter-level authorization on live MCP tool calls, with step-up approval for high-risk actions.Wed, 03 Jun 2026 00:00:00 GMThttps://tetrate.io/blog/ai-cost-attribution/https://tetrate.io/blog/ai-cost-attribution/About half our AI spend last week was on API keys with no team tag, no workload tag, no owner. That's not a discipline problem, it's a product problem — and the fix isn't a better tagging UI.Tue, 19 May 2026 00:00:00 GMThttps://tetrate.io/blog/ai-spend-roi-managers-guide/https://tetrate.io/blog/ai-spend-roi-managers-guide/Your AI budget doubled. Someone is going to ask you whether it's producing anything. Most managers don't have a great answer. Here are the two levers you actually have, and a three-question Monday-morning diagnostic.Tue, 19 May 2026 00:00:00 GMThttps://tetrate.io/blog/what-is-ai-gateway/https://tetrate.io/blog/what-is-ai-gateway/An AI Gateway handles routing to one or more AI models, fallback, authentication, cost control, and observability.Thu, 23 Apr 2026 00:00:00 GMThttps://tetrate.io/blog/sr-11-7-genai-carve-out/https://tetrate.io/blog/sr-11-7-genai-carve-out/The April 17, 2026 interagency MRM rewrite explicitly carves generative and agentic AI out of scope. That's not a retreat — it's an RFI window, and it's the firms with deployed controls that will shape what comes next.Wed, 22 Apr 2026 16:00:00 GMThttps://tetrate.io/blog/agent-security-tool-calling/https://tetrate.io/blog/agent-security-tool-calling/Your agent has AWS credentials. It can execute cloud CLI commands. NIST has opinions about this. Here's what tool-calling security looks like in practice.Tue, 21 Apr 2026 00:00:00 GMThttps://tetrate.io/blog/cost-agent-reliability/https://tetrate.io/blog/cost-agent-reliability/When your agent crashes at tool call 142 out of 150, you'd better hope the first 141 findings aren't lost. Here are the patterns that made our cost agents production-ready.Wed, 15 Apr 2026 00:00:00 GMThttps://tetrate.io/blog/not-everything-needs-llm/https://tetrate.io/blog/not-everything-needs-llm/We built an agent to sync compliance data. Then we built a version without the LLM that runs faster, costs less, and produces identical results. Knowing when to remove the AI is an underrated skill.Tue, 07 Apr 2026 00:00:00 GMThttps://tetrate.io/blog/cost-agent-two-patterns/https://tetrate.io/blog/cost-agent-two-patterns/We built two fundamentally different architectures for our cost optimization agents. One lets the LLM drive. The other relegates it to a single call. Both have their place.Fri, 03 Apr 2026 00:00:00 GMThttps://tetrate.io/blog/cost-agent-gap-analysis/https://tetrate.io/blog/cost-agent-gap-analysis/We built a cost optimization agent. It worked. Then we did the math: it was catching 2.4 percent of the savings. Here's what was missing and what we changed.Mon, 23 Mar 2026 00:00:00 GMThttps://tetrate.io/blog/workflowiq-buildathon-runner-up/https://tetrate.io/blog/workflowiq-buildathon-runner-up/WorkflowIQ's runner-up finish at the first Tetrate AI Buildathon underscores its innovative approach to governed AI workflows—turning plain English into structured, event-driven processes.Wed, 18 Mar 2026 00:00:00 GMThttps://tetrate.io/blog/boe-launch/https://tetrate.io/blog/boe-launch/Built On Envoy is a community-driven marketplace and CLI that makes discovering, running, and sharing Envoy extensions effortless. Try it today!Wed, 11 Mar 2026 00:00:00 GMThttps://tetrate.io/blog/mvio-buildathon-winner/https://tetrate.io/blog/mvio-buildathon-winner/Mvio won the first Tetrate AI Buildathon by turning moving inventory into a simple photo-to-structured-data workflow. Here's how they did it and why it matters.Thu, 05 Mar 2026 00:00:00 GMThttps://tetrate.io/blog/reflections-on-first-tetrate-ai-buildathon/https://tetrate.io/blog/reflections-on-first-tetrate-ai-buildathon/A reflection on the first Tetrate AI Buildathon—the supportive community, the intentional 'Buildathon' approach, 16 demoable projects, and what comes next.Tue, 24 Feb 2026 00:00:00 GMThttps://tetrate.io/blog/cost-agent-executive-summary/https://tetrate.io/blog/cost-agent-executive-summary/Our cloud bill was attracting board-level attention. Instead of hiring a FinOps team, we built AI agents that scan AWS, GCP, and Azure weekly. Here's what we learned.Tue, 17 Feb 2026 00:00:00 GMThttps://tetrate.io/blog/finra-agents-what-it-means/https://tetrate.io/blog/finra-agents-what-it-means/FINRA's 2026 report has a new section on AI agents with seven named risks and four considerations for firms. Here's what that actually means for your engineering team.Tue, 10 Feb 2026 00:00:00 GMThttps://tetrate.io/blog/determinism-transparency-use-cases-unlocked/https://tetrate.io/blog/determinism-transparency-use-cases-unlocked/There's a world where LLMs sit comfortably inside traditional model-risk frameworks. With deterministic inference and transparent models, we're closer than you think.Mon, 02 Feb 2026 00:00:00 GMThttps://tetrate.io/blog/black-box-models-in-a-regulated-world/https://tetrate.io/blog/black-box-models-in-a-regulated-world/Trust me, the training data is fine is not a valid response to a regulator. Proprietary LLMs fail on basic transparency requirements that traditional models satisfy easily.Tue, 27 Jan 2026 00:00:00 GMThttps://tetrate.io/blog/you-cant-validate-nondeterministic-llms/https://tetrate.io/blog/you-cant-validate-nondeterministic-llms/Your model risk team wants to validate your LLM. They run the same test twice. They get different answers. Meeting adjourned.Wed, 21 Jan 2026 00:00:00 GMThttps://tetrate.io/blog/the-tier-3-problem/https://tetrate.io/blog/the-tier-3-problem/Banks are leaving $920bn in operational efficiency gains on the table because they can't get LLMs past their risk teams. The issue isn't caution—it's that current LLMs can't satisfy SR 11-7 requirements.Tue, 13 Jan 2026 00:00:00 GMThttps://tetrate.io/blog/the-golden-signals-of-ai-governance/https://tetrate.io/blog/the-golden-signals-of-ai-governance/When your CEO asks "are our AI systems compliant right now?" can you answer in less than three business days? If not, you're governing blind. Here are the five metrics that matter.Thu, 08 Jan 2026 00:00:00 GMThttps://tetrate.io/blog/automating-seo-implementation-with-an-agentic-workflow/https://tetrate.io/blog/automating-seo-implementation-with-an-agentic-workflow/How we built agents to automate SEO reporting and content improvements—and what Tetrate Agent Router handled for us along the way.Tue, 06 Jan 2026 04:00:00 GMT