Search
Posts
Stop Crying Wolf: A 3-Strike Gate for Uptime Monitors
Fix uptime monitor alert fatigue with a 3-strike debounce gate and real per-probe diagnostics. Stops false positives, keeps real outages visible.
ReadHuman-in-the-Loop Is a Delivery Guarantee, Not a UI Feature
Human-in-the-loop agent delivery is exactly-once, fail-closed. Two repos shipped the same four-move discipline the same day — convergence, not coincidence.
ReadNine Days Silent: When the Blog's Own Pipeline Stopped Publishing Itself
A 9-day publishing blackout went unnoticed because monitoring reported success while producing nothing. Git worktrees + orphan branches + timeout logs = silent failure at scale.
ReadThe Wrong Product, Built Perfectly
A new site was scaffolded, deployed, and live with valid TLS in under an hour — then declared the wrong product. The decoupling made the reversal cheap.
ReadFrom one adopter to two: the discovery-affordance spec just got named
A 39.7k-star skills repo adopted my discovery-manifest pattern by name. What changed, why it matters, and the install_source_url work that comes next.
ReadVite Dev Server in Production: The 871-Byte Tell
scorecardecho.com shipped the Vite dev server to every visitor. Three signals catch it in a minute; a multi-stage Dockerfile fixes it for any SPA container.
ReadCI gap: shellcheck + ruff caught 4 findings
Plugin scripts had zero lint coverage. Added shellcheck + ruff to CI; caught four issues on first run. Behavior tests missed them.
ReadCodeQL Caught the Race I Dismissed
Static analyzer caught a real TOCTOU race in audit-trail code I'd dismissed. How FD-based patterns beat suppression and lock-free approaches.
ReadThe Unicode Layer Your Validator Can't See
Schema validation can't see invisible Unicode. A stdlib-only CI gate that catches tag-char injection, Trojan Source bidi overrides, and homoglyph attacks.
ReadSelf-Expiring Report-Only CI Gates: From Advisory to Enforced
How a meta-gate enforces deadline-driven CI hardening without freezing contributors — one logical concern per PR, permanent blocking by design.
Read