# Blog > Guides, product notes and engineering writing from the people who own the hardware: shipping AI-built apps, the hard limit, agents over MCP, regions and sovereignty. What we are building and why, written the way we would explain it to you in person. One post a week, and every post is also available as raw Markdown for the agents reading along. 20 posts · Product · Guides · AI & agents · Sovereignty · Engineering · Comparisons - **[Ship an AI-built app in 90 seconds: from git URL to live](/blog/ship-an-ai-built-app-in-90-seconds)** (Guides, 22 Jul 2026) — A complete walkthrough of the first deploy: what detection reads, what the build actually does, where the ninety seconds go, and what to do when the detection guesses wrong. - **[The hard spending limit: why we cap instead of billing you more](/blog/the-hard-spending-limit)** (Product, 15 Jul 2026) — Every platform has a budget setting. Almost none of them stop the bill. Here is the mechanical difference, the balance sheet that makes it possible, and the two things that fall outside it. - **[Let an agent run your infrastructure: MCP, scopes and safety](/blog/let-an-agent-run-your-infrastructure)** (AI & agents, 8 Jul 2026) — Giving a model write access to your production platform sounds reckless. It is reckless — unless the blast radius is a number you set. Here is the full safety model, mechanism by mechanism. - **[Connect Claude Code, Codex or Cursor to cmdz over MCP](/blog/connect-claude-code-codex-cursor-over-mcp)** (AI & agents, 1 Jul 2026) — The configuration for each client, what the authorisation flow actually does, how to pick a profile, and how to tell whether it is working. - **[Passwordless from day one: how passkeys work on cmdz](/blog/passwordless-from-day-one)** (Product, 24 Jun 2026) — No password, no username, no emailed code, no authenticator app. What that means in practice, what happens when you lose a device, and why we will not add a fallback. - **[Deploy a Next.js + Postgres app without writing a Dockerfile](/blog/nextjs-postgres-without-a-dockerfile)** (Guides, 17 Jun 2026) — The most common stack on this platform, end to end: detection, the database, migrations on release, environment variables, preview environments and what the whole thing costs. - **[Deploy Laravel on cmdz: Octane, migrations and queues](/blog/deploy-laravel-octane-migrations-queues)** (Guides, 10 Jun 2026) — A real Laravel deployment: the release command, queue workers as their own workload, the scheduler, Octane, storage on object storage, and where the horizontal-scaling surprises are. - **[Deploy FastAPI with a vector database for RAG](/blog/fastapi-with-a-vector-database-for-rag)** (Guides, 3 Jun 2026) — A retrieval-augmented app end to end: FastAPI on Uvicorn, pgvector, where the embedding cost actually lands, and why the spending limit matters more for this shape of app than any other. - **[Choosing a region: data residency and your own redundancy](/blog/choosing-a-region)** (Sovereignty & regions, 27 May 2026) — What a region actually guarantees, what it does not, and how to run one app in two of them — including the honest limits of what we promise across regions. - **[Buy a domain and manage DNS in one place](/blog/buy-a-domain-and-manage-dns-in-one-place)** (Guides, 20 May 2026) — Search, buy, attach and certify in one flow — plus why domains are the one thing charged outside your spending limit, and why we always show the renewal price. - **[Preview environments per pull request, explained](/blog/preview-environments-per-pull-request)** (Guides, 13 May 2026) — What gets created, what is shared with production and what is not, how sleeping keeps twenty of them nearly free, and the two mistakes that make previews expensive. - **[What counts toward your limit — and what does not](/blog/what-counts-toward-your-limit)** (Product, 6 May 2026) — The complete list, both columns, including the two things outside the ceiling and the reason for each. No "and more", no asterisks. - **[cmdz vs a hyperscaler: cost predictability for AI builders](/blog/cmdz-vs-a-hyperscaler)** (Comparisons, 29 Apr 2026) — Three concrete workloads priced against the published rates of Vercel, Railway, Render, Fly and Cloudflare — including the two profiles where they win. - **[EU data, EU law: what sovereignty actually means for your stack](/blog/eu-data-eu-law)** (Sovereignty & regions, 22 Apr 2026) — Beyond the region dropdown: where the control plane lives, where the logs and backups go, who the subprocessors are, and which questions to ask any provider claiming an EU region. - **[Scaling to zero and back: how cold starts work](/blog/scaling-to-zero-and-back)** (Engineering, 15 Apr 2026) — What actually happens between a request arriving at a sleeping app and it being served, where the milliseconds go, and when scale-to-zero is the wrong choice. - **[Rollbacks in seconds: the 90-day deploy history](/blog/rollbacks-in-seconds)** (Product, 8 Apr 2026) — Why a rollback here is a cutover rather than a rebuild, what it does and deliberately does not undo, and how to make your migrations rollback-safe. - **[Metering explained: how usage becomes credits](/blog/metering-explained)** (Engineering, 1 Apr 2026) — The full chain from a 15-second sample to a line on your invoice: what we measure, how precise it is, which way the imprecision points, and why rounding happens exactly once. - **[Secrets and environment variables, done right](/blog/secrets-and-environment-variables)** (Guides, 25 Mar 2026) — Where secrets live, why `env pull` writes names and never values, what an agent can and cannot see, and how to rotate a credential without a redeploy. - **[How we isolate customer workloads with Kata micro-VMs](/blog/how-we-isolate-workloads-with-kata)** (Engineering, 18 Mar 2026) — The difference between a namespace and a hypervisor as a security boundary, what it costs in memory and boot time, and why it matters more now that a model wrote the code. - **[Building an app entirely by talking to an agent: an end-to-end walkthrough](/blog/building-an-app-entirely-by-talking-to-an-agent)** (AI & agents, 11 Mar 2026) — A complete session from empty directory to a live app on a custom domain, without touching a dashboard — including the two moments the agent had to come back and ask.