The Workstation Blog
All Posts
Hands-on guides to AI infrastructure, MLOps, models, and shipping to production.
WSL Vault for Compliance: One Tenant Never Opens Another’s Secrets
How WSL Vault keeps app, team, and environment tenants cryptographically isolated — so a stolen root-style token cannot empty the estate — and why dual-tenant control beats secrets sprawl.
Balinder WaliaRead 
Workstation AI Shop: Promoting the AI Sales Storefront Through int → test → acc → prod
Workstation AI Shop sells GPU machines with a fully autonomous AI Sales Agent that configures the basket. See how Ring Promoter moves each build through int → test → acc → prod — with Orbit screenshots release engineers and stakeholders share.
Balinder WaliaRead 
Ring Promoter vs Argo CD, Kargo and CI: Which Tool Answers Which Release Question
Argo CD syncs, CI builds, Ring Promoter promotes. A fact-checked look at the comparison, its honest limits, which tool fits, and how to record the choice as an ADR.
Balinder WaliaRead 
NVIDIA OpenShell: Secure Agent Runtime on Mac Studio and GPU Workstations
NVIDIA OpenShell governs autonomous agents with sandboxes, policy, and credential isolation. Workstation explains how to run it on Mac Studio (Apple GPU host inference) and on Linux with NVIDIA --gpu.
Balinder WaliaRead 
The Half-Built House: Why IT Projects Stall, and How to Get Them Moving Again
Why IT projects get stuck between 'nearly done' and 'live', and a simple way out: the house analogy, MoSCoW, a stakeholder vote, clear options and a deadline. Plus how to use AI with non-technical stakeholders.
Balinder WaliaRead 
Stop paying for idle CI: GitLab Runners on Kubernetes
Most teams pay for CI as if every night were still Monday morning. GitLab Runners on Kubernetes flip that: ephemeral job pods, scale up under load, scale down when quiet.
Balinder WaliaRead 
How We Protected the Payments Secure FinTech App with WSLProxy Edge, an Open-Source API Gateway
How we put WSLProxy Edge, our open-source API gateway, in front of Payments Secure (payments-secure.fictionally.org): real-IP checks, scanner detection, login throttling and audit logs, rolled out safely in audit mode.
Balinder WaliaRead 
Claude Code Routines: Scheduled Cloud Agents, Sub-Routines and Co-Routines
Claude Code Routines run saved agent tasks on Anthropic's cloud on a schedule, via API or on GitHub events. How they work, how to set one up, and how to chain them.
Balinder WaliaRead 
