Reverse Prompt Injection: When the Environment Hijacks Authority (Part 3)
Reverse Prompt Injection: When the Environment Hijacks Authority (Part 3) In Part 1, I...
Tutorials
AI SDK 7.0.163 Added Two Stream Parts in a Patch Release. My Exhaustive Switch Stopped Compiling
Upgrading ai from 7.0.162 to 7.0.163+ adds ping and steering-message to TextStreamPart, so an assertNever switch over fullStream stops compiling. Tested fix and runtime behavior.
bisect2-1794189432390-1
A 30-day case study of four coding agents on one repository, and what to pin instead of writing...
bisect-1794189340324-1
A 30-day case study of four coding agents on one repository, and what to pin instead of writing...
probe-t4-full-unfenced-1794189257860
Liquid syntax error: 'raw' tag was never closed
Your Read-Only Bot Isn’t Read-Only Safe
Somebody on r/kubernetes asked the question properly this week: what should a read-only debugging bot...
The 3 A.M. Chai Rule: Replace 40 Flapping Alerts with Three Real SLOs
The big observability vendors just admitted out loud what every on-call engineer has known for ten...
The Three Guard Rails Every AI Code Review Rollout Needs
Your bot just sent you an invoice for its own learning curve. Pull up a chair, grab a cup of chai,...
The Four Ghosts in Your Data Warehouse (And How to Evict Them)
Forgotten copies, full price. Pull up a chair, grab some chai, and let me tell you about a quiet...
How We Took Second at a Hackathon with Codex and 18 Git Worktrees
A friend and I took second place at the Codex Community hackathon in Guadalajara with Panas. Across...
Prose Does Not Bind Agents: Four Safeguards That Fail the Build
Four safeguards that fail a build when coding agents break them, from a 30-day case study on one repository, with every figure reproducible.
We built a ChatGPT-style chat with no AI framework
We built the AI chat in Sybill by hand, with ChatGPT as our reference. In January 2025 we started...
The boring math behind a 150-tool AI suite: how I pick models by quality, latency, cost and capability
Dev.to Article #2 Draft（2026-11-09） Title: The boring math behind a 150-tool AI suite: how...
Your Prometheus Is Hoarding. Time for a Funeral Policy.
Every dead metric is a bill you’re still paying. I know, you’re tired. Tired of dashboards that...
29% of Your Cloud Bill Is Waste. Start With the Graveyard.
You’re paying rent on servers everyone forgot. Cloud waste just did something it hasn’t done in...
Why Your Airflow Tasks Fail at 3 AM (And Why Re-Running Them Is a Trap)
One outage, four suspects — interrogate in order. Pull up a chair, grab a cup of chai, and let us...
Your LLM Is Not a Security Boundary: Auditing Agent Tools for eval() and Path Sinks
In May 2026, Microsoft's security team published two remote-code-execution issues in its own agent...
Your Prettiest Dashboard Is Lying to You (And Grafana Will Never Tell You)
Pull up a chair, grab a cup of chai, and let’s talk about the prettiest graph on your big screen....
Your Agent Reads What Attackers Write
Everything the agent reads is text. Some of that text was written by an attacker. The on-call...
Thirty seconds in one job: what Seedance 2.5's controls actually do
Answer: Seedance 2.5 renders clips from 1 to 30 seconds at 480P, 720P and 1080P, billed per output...
What gets refused on Seedance, and how the two review layers differ
Answer: Seedance reviews a job twice. Layer 1 screens the prompt before any task exists — a clear...
What unshare -n leaves behind: building a boundary for an AI recon agent
Why the boundary has to hold My AI agent's sandbox passed all 13 of its isolation tests on...
Seven models, five runs, 18 books: a test of AI recommendations
A list of five plausible books can look like a successful recommendation. Repeating the request tells...
AI Audit Evidence, Part 6: A Record Nobody Read Is Only Stored
A record sat in the database for a year before anyone opened it. That is not negligence. There is no...