Skip to content

Blog

Allaici-cddatabasesdebugginginfrastructurenextjsobservabilityprocesssecurity

Popular this month

  1. 1What Changes When a Personal Site Moves to a €4 Hetzner Box
  2. 2An RSS Feed in the Next.js App Router, in About Twenty Lines
  3. 3Auto-Merge on Green CI: How Much Do You Trust Your Own Pipeline?
  4. 4One Postgres, Two Lives: Neon in Production, Docker in Local Dev
  5. 5The Dollar Sign That Broke My Bcrypt Hash
A Public MCP Server With Nothing Private to Leak

4 September 2026

A Public MCP Server With Nothing Private to Leak

The read-only tools an AI agent gets to call are backed by the exact same published-only queries the public blog already uses — which is what makes skipping authentication a non-decision instead of a risk.

aisecurity
Using an AI Pair Programmer as a Design Partner, Not Just an Implementer

18 August 2026

Using an AI Pair Programmer as a Design Partner, Not Just an Implementer

The most useful sessions were not the ones spent writing code. They were structured interviews that talked a vague feature idea into a decision — or into the trash.

aiprocess
SPEC.md as the Source of Truth on a One-Person Project

17 July 2026

SPEC.md as the Source of Truth on a One-Person Project

A living spec file with a dated changelog of decisions replaces the alignment meeting when the whole team is one person plus an AI agent.

processai
I Killed an AI Feature Before Writing a Line of Code

14 July 2026

I Killed an AI Feature Before Writing a Line of Code

A "video digest with AI" idea, reframed twice under a structured interview, collapsed into "this is just a Post with extra steps." Here is how the interview got there.

aiprocess