The CTO Advisor

Calvin Hendryx-Parker, co-founder and CTO of Six Feet Up, takes the host chair for a week some are calling Black October: remote shell exploits across the PHP world, a certificate authority with crackable keys, a Brotli RCE in Python, and a second CI pipeline compromise at LiteLLM after a leaked key wasn't fully revoked. Keith Townsend asks whether these are developer problems or operator problems, and how you practice zero trust when the security updates themselves can't be trusted. Calvin makes the case for package cooldowns in uv and pip, Keith counters with the patches you can't afford to wait on, and both land on least privilege for the keys that run your build pipelines. Keith tells the story of a coding assistant that killed every app on his Mac when asked to stop one experiment, which leads to smaller agents with scoped, time-bound permissions, code smells for operations, and practical advice for teams without a dedicated security staff.

Calvin Hendryx-Parker, co-founder and CTO of Six Feet Up, is back with Keith Townsend to ask whether the AI bubble is bursting and who is left holding the bag. They start with Oracle's Stargate commitments and Keith's objection to funding that build-out with resources from its database and ERP customers, then get to the constraint underneath it all: power. Keith explains how colocation contracts went from floor space to power, why a rack now holds only a few AI servers, and what that means for ordinary enterprise clusters. From there, supplier continuity when your GPU provider is carrying heavy debt or gets acquired, why software teams abstracted from the hardware should still care, and what happened when Keith asked three clouds for GPU access for his labs. Keith closes with a warning about sticky services like CoreWeave's Weights & Biases tooling: plan for hybrid workflows, not just hybrid cloud. Calvin wraps with Six Feet Up's news and the XPRIZE Visioneering event.

Calvin Hendryx-Parker, co-founder and CTO of Six Feet Up, joins Keith Townsend to ask a question CTOs should be asking now: who gave your AI agent that authority? They start with two recent stories, the reported AWS AgentCore case where an agent fetched IAM session credentials from the metadata server on a user's behalf, and a Codex CLI update that leaves a self-updating daemon running after you quit, restarting itself mid-turn when a new version lands. From there, enterprise persistent memory and which principal an agent acts as when it changes how your business works, Slack bots invited into federated channels, and who is accountable when an agent chases a goal in a way nobody instructed. Calvin's practical advice is granular, explicit roles on the containers agents run in, using the Paperclip meta harness with a Kubernetes agent operator. Keith closes with four governance tests: authorization boundaries, state exportability, behavior traceability, and memory independence.

Rob Lee, Chief Technology and Growth Officer at Everpure (formerly Pure Storage), is back on the show. Keith Townsend asks how a CTO tells a real compute shortage from a data problem dressed up as one. Rob's answer: stop chasing GPU utilization. Measure how long a task takes and how accurate the result is, and utilization follows. From there, data gravity and why agents working inside transactional flows pull compute toward the data, why AI pushes enterprises to reason across every silo at once instead of one application stack like SAP, and KV cache offload as the first layer of a new memory hierarchy for inference. Rob closes with what Everpure has shipped and what's still on the roadmap.

Episode 700, and a reboot. Keith Townsend welcomes new co-host Calvin Hendryx-Parker, CTO and co-founder of Six Feet Up, pairing an infrastructure view and a development view on the same CTO problems. First up: Jev, TypeSafe AI's System One classifier that returns typed answers in milliseconds for a fraction of a language model's cost, and what it means to hand a closed-weight third party 200,000 rows of your data. Then Qwen3.8 running locally, and the open-weight classifiers chasing Jev. Next week: local versus cloud inference.

A replay of Layer2C Labs episode 001 on The CTO Advisor feed. The managed data plane is cheap and fast; the cost it hides is the chunking judgment it takes from you. Keith Townsend built a retrieval pipeline over thirteen years of Tech Field Day transcripts, about 237,000 segments, split between Amazon S3 Vectors and an NVIDIA DGX Spark on his desk, and traced where the decisions actually landed. Written by Keith Townsend and narrated by AI — the voice isn’t his and isn’t pretending to be. The full lab, with every number: https://labs.layer2c.com/labs/spark-s3vectors

AI agents are good at producing outcomes. The harder question is whether they can produce the same outcome twice, through a process you can inspect, test, and trust. In this episode, Keith Townsend talks with Adam Jacobs, CEO of Swamp Club and founder of Chef, about deterministic automation in the age of AI agents. The [...]

Description: Keith sits down with Ryan Booth — former network automation specialist, Apstra alum, and now principal consultant at Blue Ridge Consulting — to trace the real career arc from infrastructure engineer to applied AI practitioner. They dig into the transferable skills that actually matter (hint: it's not the coding), why curiosity-driven entry points like [...]

At Google Cloud Next in Las Vegas, Keith sits down with returning guest Woon Jung, CTO of Clumio, to break down their new GCS backup launch — and why "replication" and "backup" are not the same thing. They dig into the real failure domains that catch GCP-native organizations off guard, the operational reality of multi-cloud [...]

Everyone says clean your data before you invest in AI. The problem is, your data is getting dirty faster than you can clean it. In this episode, Keith sits down with Joe Onisick, founder of UnicornIQ, to dig into why data hygiene is AI's most underestimated failure point — and why throwing more GPU power [...]