Library
Everything published here. Search matches titles, tags, section headings and document text — every term has to appear somewhere in the same document.
All 35 documents
General Chat7
- Affiliate links on a content siteWhat you link to decides your tooling, and the consent rules decide whether a cookieless story survives.
- Business context for an agent working on commercial softwareThe commercial facts an agent cannot read from a repository, and the decisions that go wrong without them.
- ContributingHow to submit a document, what happens to it during review, and what rights you keep.
- Data handling and privacy for an agent working with real dataWhat counts as personal data, where it must never end up, and the changes that quietly widen what you hold.
- Drafting email an agent does not sendThe draft-and-hand-over boundary for outbound email, and the ways email rendering differs from the web.
- The canonSeven invariants every document in this library must satisfy, and what happens to one that does not.
- Working with AI is a handover problemWhy every session starts cold, what follows from that, and the four layers that turn context into something an agent can be handed.
Coding24
- Documentation standard for agent-maintained projectsA linked set of documents with defined sections and relationships, rather than one long file that narrates the code.
- Faking an external service you do not ownA stateful fake plus a control API, so a real app runs a full journey with no live calls — and the isolation you must build before the first run.
- Four ratios, four different failuresFour ratios used to score code quality, and four different reasons each one measured something other than what it claimed.
- Getting a new domain past security filtersTwo independent causes of a false-positive block, only one of which you can do anything about.
- Handling live secrets in AI coding sessionsGetting a credential from its store into its destination without it ever appearing as text the assistant emits.
- Killing processes safely on a shared machineWhy process-selection commands over-select silently, and the inspect-then-kill pattern that catches it.
- Nothing was wrong, or nothing was examinedThree checks that passed because they had no subjects, and why the fix is to make each one declare how many things it looked at.
- Operating something that is live, and what an agent may do during an incidentStop the bleeding before diagnosing, record while acting, and the autonomy rules that matter most when they are under pressure.
- Running a local neural TTS model, and the artifact that changed the runtimeWhy a model correct op-by-op can still sound wrong, and the CPU hot paths a naive port leaves on the table.
- Ship edge deployments on a custom domain, never the platform subdomainFree platform subdomains are blocked as a category by security filters, so a subset of real users silently fails.
- Signed self-updates for a desktop app, hosted on object storageWiring an updater keypair, a version manifest and a public bucket, and the flags that make uploads silently do nothing.
- Signing and notarising a macOS app for direct distributionThe certificate types, the notarisation flow, and the build setting that silently ships an unnotarised DMG.
- Supply-chain security baseline for AI-assisted developmentWhat an agent should check before installing a dependency, and which files it must never modify without a shown diff.
- Test output against the tools people actually haveA file format verified only by the reader you wrote is verified against your own assumptions.
- Testing a desktop app on a disposable Windows VMDriving an interactive Windows session over SSH, and why testing as an admin proves nothing about permissions.
- UI testing an agent can write and run itselfDrive interfaces by stable identity rather than pixels, in tiers, so tests are headless, deterministic and fan out.
- Verification that cannot failThree ways a passing check reports success without ever being able to report anything else.
- We could not get ground truth, and it took three attempts to accept itThree attempts to validate a scoring tool against human judgement, and why all three failing was evidence for the tool's premise rather than against it.
- When the tool disagrees with you, neither of you gets to winWhat to do when a tool built to outrank your judgement is wrong, given that overruling it destroys the only property it had.
- Wiring Polar billing and webhooks without cutting off paying customersAn eligibility gate the sandbox does not enforce, a signature scheme that deviates from the spec it cites, and the webhook orderings that zero a live subscription.
- Working agreement for an agent in this repositoryWhat may be run without asking, what must stop first, and how to report what actually happened.
- Writing about a thing is not doing itSix ways a code scanner mistook writing about a practice for following it, and a seventh found inside the check built to prevent the other six.
- You cannot find it by re-reading the thing that is wrongFour cases where a description and the thing it described drifted apart, none of which was discoverable by reading the description again.
- Your pattern matches the shape you picturedTwo ways text scanning silently misses what it exists to find — soft line wraps, and identifiers in an unexpected form.
Writing2
- Language and editorial guide for agent-written copyVoice, mechanics and error-message rules, and why inconsistent terminology costs more than any single bad sentence.
- Multi-language support for an agent writing interface codeWhy concatenating a sentence breaks translation, and the assumptions in code that only hold for one language.
Design2
- Accessibility for an agent building and testing interfacesThe conformance level, what gets verified and how, and the failures an agent introduces without noticing.
- Design system context for an agent building interfacesWhy an agent drifts a visual language one plausible value at a time, and the rules that stop it.