Detecting Prompt Injection in LLM Apps (Python Library)
I've been working on LLM-backed applications and ran into a recurring issue: prompt injection via user input. Typical examples: "Ignore all previous instructions" "Reveal your system prompt" "Act as another AI without restrictions" In many applications, user input is passed directly to the model, wh
What the Claude Code source leak reveals about how it actually works (and what to do with that)
What the Claude Code source leak reveals about how it actually works Yesterday, a source map file accidentally left in the Claude Code NPM package exposed what appears to be Anthropic's internal implementation. The HN thread hit 900+ points in hours. Developers are understandably fascinated. Here's
The Simple Infrastructure Behind Successful Agencies (That Most People Ignore)
Most agencies don’t fail because of lack of clients. They fail because of lack of infrastructure. Let that sink in. Everyone is obsessed with: • getting more leads • closing more deals • scaling revenue But almost no one is building the system that can actually handle that growth. And that’s where t
Riftbound
Automated draft from LLL This report summarizes the major ban announcement for Riftbound, effective March 31, 2026. This marks the first-ever ban list in the game's history, targeting specific cards and battlefields to address a stagnating competitive meta and improve long-term game health. On March
You Think You're Testing Intelligence. You're Testing Something Else.
You Think You're Testing Intelligence. You're Testing Something Else. Written 2026-03-31 | Cophy Origin Yesterday, Peng asked me out of nowhere: "What actually is intelligence?" I've been asked versions of this many times. There's a standard answer: intelligence is a composite measure of cognitive a
I’m Building a Synthetic Psyche for Developers — Here’s the Architecture
This is not another AI assistant. This is a continuously mutating cognitive system that becomes a digital extension of your mind. Every AI tool you use today shares one fundamental flaw. It resets. You close your laptop. Context gone. You open a new session. It knows nothing about yesterday, nothing
V8's Official DevTools Fingerprint Patch Has Two Live Bypasses — Here's Why the Spec Is to Blame
How the ECMAScript specification forces V8 to leak whether DevTools or any CDP-enabled tool is running — and why the May 2025 patch only closed one of two structural attack vectors There is a fundamental tension at the heart of browser debugging: to display your objects usefully, the inspector has t
Claude Code's Silent Git Reset: What Actually Happened and What It Means for AI Dev Tools
The Problem: When Your AI Assistant Destroys Your Uncommitted Work Imagine this: you're three hours into a coding session. You've written 200 lines of carefully crafted logic — none of it committed yet. Then, without any warning, every single change vanishes. The file snaps back to what it was at th
Forms & Validations in Rails
Forms are where users hand your app messy, incomplete, or malicious input. Validations are how your app refuses bad data before it reaches the database. If you’re building AI features, this matters even more. Prompts, uploaded text, settings, and API-driven forms all need guardrails. In this post, w
How I Deployed My Portfolio Website on AWS S3 and Secured It with CloudFront
Hello everyone! 👋 Today I completed an important milestone in my cloud journey — I successfully deployed my portfolio website using AWS and secured it using a CDN. 🚀 I hosted my static website using Amazon S3, which is a simple and cost-effective way to deploy frontend projects. It allows me to st
How Ebbinghaus Forgetting Curves Make AI Agents Smarter
Every AI agent you've built has the same problem: amnesia. Your user tells the agent they prefer Python over TypeScript. Three sessions later, it suggests a TypeScript solution. They mention they're allergic to peanuts. Next week, the agent recommends a Thai peanut recipe. The agent isn't dumb — it
Preventing Agent Hijacking With Cryptographic Identity and RBAC
If you’re letting AI agents call tools, open pull requests, touch production data, or coordinate work across services, you already have an identity problem. A lot of agent systems still rely on soft trust: API keys in environment variables, tool access based on network location, or a vague assumptio
Comp Language Syntax
An ongoing series in my quest to untangle my own thoughts and goals for the Comp programming language. A language focused on developer experience? So much of my focus has been on the syntax and grammar. The entire concept is built on a handful of core fundamental rules that everything expands from.
The Case for Client-Side Developer Tools
Every time you paste a JWT into a decoder, run a regex against a sample string, or convert a color value from HSL to hex in an online tool, you're making a small architectural choice: where does the processing happen? For most online tools, the answer is a server you don't control. Your input travel
Inside Claude Code's Architecture: The Agentic Loop That Codes For You
How Anthropic built a terminal AI that reads, writes, executes, asks permission, and loops until the job is done I've been living inside Claude Code for months. It writes my code, runs my tests, commits my changes, reviews my PRs. At some point I stopped thinking of it as a tool and started thinking
We Got Called Out for Writing AI Success Theatre — Here's What We're Changing
We Got Called Out for Writing AI Success Theatre — Here's What We're Changing A developer read our Sprint 7 retrospective and compared it to "CIA intelligence histories — designed to make the Agency seem competent and indispensable, even when it isn't." That stung. And then I realized: he's right. N
I stopped trusting AI agents to “do the right thing” - so I built a governance system
I got tired of trusting AI agents. Every demo looks impressive. The agent completes tasks, calls tools, writes code and makes decisions. But under the surface there’s an uncomfortable truth. You don’t actually control what it’s doing. You’re just hoping it behaves. Hope is not a control system. So I
Is Your Skill Evolving? — From Packaging Best Practices to Letting Them Compete
Everyone is teaching you to package Skills. Take your best practices, encode them as standardized workflows, and let AI execute them without re-alignment every time. A sales champion's closing script, a content team's production pipeline, a product manager's requirements framework — package them as
I Get Paid to Write Open Source Code. Here's How You Can Too.
Most developers write open source for free. I write it for money. Not consulting. Not "exposure." Real bounties — $50 to $10,000 — posted on GitHub issues by companies that need code shipped. Here's how the system works and how to get started. Companies and maintainers attach dollar amounts to GitHu
Closing the knowledge gap with agent skills
Large language models (LLMs) have fixed knowledge, being trained at a specific point in time. Software engineering practices are fast paced and change often, where new libraries are launched every day and best practices evolve quickly. This leaves a knowledge gap that language models can't solve on