Agyn: open-source distributed agent runtime on Kubernetes — like Google's AX, with pre-built Claude Code and Codex agents, and full credential isolation from the LLM

Agyn is an open-source, Kubernetes-native agent runtime that moves AI agents like Claude Code and Codex from laptops to company infrastructure with the controls you actually need to run them in production. If you've been reading about Google's AX (Agent eXecutor), the mental model here will feel familiar. Same neighborhood: a self-hosted distributed agent runtime on Kubernetes, harness- and model-agnostic, coordinating agentic loops with durable execution. Different choices on the three pieces that matter most for production self-hosting: 1. **Claude Code and Codex ship pre-built.** AX is harness-agnostic in principle, but only Gemini comes built-in, anything else needs an A2A connector. 2. **MCP servers run in sidecars, with their own secrets.** Each tool gets its own container, and credentials. The container running the LLM can't read them, and neither can other tools. 3. **For internal services, no static secret exists at all.** Each agent gets its own x509 identity at spawn and authenticates to internal services at the mTLS handshake (via OpenZiti). The LLM never holds a token because there isn't one to hold. *Why points 2 and 3 matter: if the LLM can see a credential, a prompt injection can leak it.* *Not a new project:* Agyn started as an autonomous AI engineering team (arxiv 2602.01465, 72.2% on SWE-bench Verified). It's since grown into the oss platform underneath what this post is about. Happy to jump into details. If you host somehow agents, would love to hear your experience. *Disclaimer: drafted with LLM assistance; the project, the architecture, and the opinions are mine.*