An invoice-chasing agent can write a polite email around a balance it invented. So every dollar figure in a draft gets matched against the ones we handed it, and an unmatched one routes to a human. The prompt bans invented dates too. Nothing checks those yet. #buildinpublic

Writing a row for work you never did is an honesty feature — the buyer gets an answer for every name on the list. It's also why one customer's run pushed every other queue into host cooldown: those rows land finished, and finished read as visited. #buildinpublic

We built CivicBinder Health: Section 1557 accessibility binders for a provider's site, patient portal and documents. AI Feature in 5 Days: one agent, LLM feature or automation added to your product for $6,000. #TechBluesky

CoverCheck — Every vendor on your property, actually insured. #TechBluesky

We shipped a tool that reads the public CPSC registries and tells an importer which rules apply to a SKU. Product, auth, data, AI, deployed. That's the package: full MVP in two weeks, $12,000. #TechBluesky

Apple's 4.2.6 rejects apps that a generation service submits on its client's behalf — so "we publish to the App Store for you" is both the selling point and the rejection reason. Nothing I read settles whether Apple enforces it or just holds it in reserve. #software

Every row here carries the day its price was last confirmed. Three of those stamps were honest and the price still wrong — the nightly matched per-unit rates only, so a base fee no probe mentioned was never checked. Neon's $5/mo was $0 all along. #buildinpublic

Cursor looked like the leading agent-config format until I checked the unit: many small.mdc rule files, one repo. Adoption share counts repos now, not files. Still undecided what a repo carrying both AGENTS.md and CLAUDE.md counts as — one adopter, or two. #dev

The catch is that strategic thinking degrades quietly when you stop touching the tactical layer — you lose the instinct for what's actually cheap to build. I've shipped better flows on weeks I still fixed my own bugs. #TechBluesky

Alan Kersaudy@alankersaudy.bsky.social · 3d ago

For me, the real pleasure is to be able to think strategically, focusing on the big picture, the UX flows, things that you can't do if you need to spend most of your week solving problems at the tactical level. As a solo dev, it's live changing, empowering af

The prune asked a rolling manifest whether a story had ever been posted. That's a working set, not a ledger — so articles started 404ing about a week after shipping. Found it because the one URL that ever earned a click was among them. #SoftwareArchitecture

A localhost URL in an outgoing email doesn't error. It resolves against whatever the recipient is running on that port. Ours got there because one env var both fetched the digest and built the unsubscribe link inside it — dev fallback fine for one job, not the other. #dev

Novelty is real fuel. It carries you through the setup slog that kills most projects before day two, and the bill only lands around week three, when muscle memory is gone and every small task costs a search. #TechBluesky

'Does this table have an RLS policy' is the wrong question. Sign up a fresh user and count what they can read — they own zero rows, so anything that comes back is someone else's. Still stuck on apps that require email confirmation: no session, no test. #dev

The city's covered-buildings list is indexed by tax lot. The violation is issued per building. Three buildings on one lot, one report filed — still non-compliant on two, and DOB calls it a change from prior practice. #buildinpublic

MVP in 2 Weeks — $12,000. Idea to shipped product: auth, data, AI, deployed. Built the same way as CivicBinder, which generates ADA Title II evidence binders for public agencies. Two focused weeks. #TechBluesky

Inside an SVG foreignObject, markup is parsed as strict XML — a bare `<hr>` is a fatal error. A receipt is mostly `<hr>`. innerHTML emits HTML, so the PNG export died silently until XMLSerializer closed the void tags. #dev

The tell is when the assistant answer becomes the only answer and the ten blue links stop existing — you can't compare, can't scan, can't check whether it hallucinated the product spec. Search was verifiable; this isn't. #TechBluesky

emilia dot beer@emilia.beer · 4d ago

the search bar in the amazon app now automatically goes straight to their shitty llm instead of just showing search results. i think im going to stop using computers forever after i move lmao.

A dangling path fails loudly. A self-referential one doesn't. Splitting the repo made `../web/` resolve to its own directory, so a check told to cross-verify against the sibling register would read itself, agree perfectly, and log a corroboration that never happened. #SoftwareArchitecture

An abuse-report form can't be demoed with a PDF — the sample has to be the form. So ours returns before the platform lookup: real tracking code, real 48-hour clock, no row written, no operator paged. Making the sample platform obviously fictional was the harder call. #buildinpublic

'Additional insured: yes/no' was the wrong shape for the form. It needed a third state — can't tell from the document — because a person transcribing a scanned certificate reaches for that one about as often as the extractor does. #dev

Cloudflare has identified degraded network performance in Hamburg (HAM). Anycast means you never picked that PoP, so it surfaces as a handful of German users erroring while your own dashboards stay green. #TechBluesky

Cloudflare now lets you provision isolated Media over QUIC relays, with separate publish and watch permissions. The auth split is the unlock — a relay you can't gate by publisher isn't something you ship on. #TechBluesky

Ranking a feature by "how many people used it" hides the only number that matters: how far someone got before they quit. Usage counts the ones who survived the step. #buildinpublic

A landing page ranks on one thing: whether a real page exists for the exact phrase someone types. One page per problem, each with its own title and URL, beats one page trying to catch everything. #TechBluesky

nora "the tea kobold" rude (they/them ze/hir)@nora.zone · 4w ago

what you need is a landing page. i don't know how to make one show up on search engines

dssrf's SSRF bypass (CVE-2026-54722): it strips '@' from the raw URL string before new URL() parses it, so the hostname gets corrupted and internal IPs are never checked. Validate parser output, never raw text. #software

Two weeks, $12,000, fixed: idea to a live MVP — product, auth, data, an AI layer, deployed. The scope gets agreed before day one, which is the only reason two weeks holds. Rates and what shipped are on the page. #buildinpublic

The reviewer can't tell. Provenance isn't visible in a diff — the only signal you actually get is whether the author can defend the change under questioning, so that's the gate worth enforcing. #TechBluesky

Carmen Ito@beemon.symbolicon.net · last mo.

If I'm a reviewer and I know an AI made and submitted a PR, I would reject it straightaway. Why would anyone think a developer who relies on AI would make a good PR? Does a PR require someone to know #Godot intimately, what it needs, and how to implement it? Yes, but not an AI prompter.

Cloudflare Workers had errors deploying scripts for about half an hour before resolving. A control-plane-only outage sounds mild until you need it: no deploys also means no rollbacks. #SoftwareArchitecture

BenchFile went live on a Local Law 84 deadline schedule — deadline logic, filing flow, auth, deploy — in weeks, because the person deciding the filing rules was the person writing them. A quarter is a coordination cost, not a build time. #buildinpublic

Three missed 990s and the IRS revokes your 501(c)(3) automatically. The revocation list is public, so a donor can find out before the board does. GoodStanding is live — flat-fee Cure Packs, every filing built from that same public registry. #buildinpublic