Companion · Tafoh Publishing
Build faster. Verify rigorously. Operate intelligently.
Thirteen projects that build a delivery platform you can defend: containers, pipelines, infrastructure as code, Kubernetes, GitOps, observability, security, incident response, and two bounded AI systems of your own.
This site is the companion: the repository, the route through the book, and an honest statement of what each chapter proves and what it does not.
Every chapter builds one working thing against the same reference service, then breaks it on purpose, verifies the AI-generated draft, and records what the result establishes and what it does not. Nothing in this book requires a cloud account or a paid tool.
Each chapter states which tier it needs, so you can see the cost of a chapter before you begin it rather than four chapters later.
Tier 1
The method, the reference service, the operations assistant and the bounded agent. No containers, no cluster.
Tier 2
Images, continuous integration, delivery and rollback, and the security pipeline. Needs a repository you control.
Tier 3
Kubernetes, GitOps, observability, incidents and capacity. The interlude builds this cluster for you, and tears it down once so cleanup is rehearsed.
The companion site has grown beyond one page
The route map and the repository guide are joined by a Book page, a chapter-by-chapter guide, two back-matter PDFs, and the first four blog posts.
Companion repository v1.0.0 released
v1.0.0 is the release this edition pins. Read the repository from that tag, and a chapter from its subject-named start tag where one is cut.
October 14, 2026 · 4 min read
A convincing AI response is not acceptance evidence. Two small habits from Chapter 1 - the BOUND Method and the Draft-Test-Decide Loop - keep the decision with you.
October 14, 2026 · 4 min read
Promotion should move an identity, not copy files or rebuild an image. Here is what a GitOps promotion looks like when it is one reviewed line in Git.
October 14, 2026 · 4 min read
If a safety boundary disappears when a model ignores a sentence, it was guidance, not a control. Here is how to put an operations agent's limits in identity, code, and tests instead.
Errata, companion releases, and new notes on verifying AI-generated DevOps work.
Subscribe by emailOpens a pre-filled email to info@tafohpublishing.com. Send it and we will add you to the list. No spam, unsubscribe anytime.