Browse by topic
Engineering Practice
How engineering and security work should be done: measuring tools before trusting them, testing assumptions before a migration, and choosing quality, DCO compliance and maintainer time over pull request volume.
6 posts
-
6 min read
UUIDv7 Is a Great Database Key and a Bad Clock: 4 Tests Before You Migrate
UUIDv7 is a great database key but a poor clock. Four quick tests, what the embedded timestamp leaks, and a rule of thumb for using UUIDv7 as a primary key.
- Security Engineering
- Engineering Practice
-
5 min read
uv check: Finally, Type Checking for Single-File Python Scripts
Astral's experimental uv check adds ty type checking for PEP 723 single-file Python scripts. Try it in 15 minutes and see how much to trust it so far.
- Engineering Practice
- Open Source
-
7 min read
MCP Costs 72% of Your Context: The Fix Pi Shipped
MCP tool schemas can eat 72% of your context window. How Pi's Codemode and deferred tool loading fix it, plus a minimal registry sketch you can reuse.
- MCP Security
- Engineering Practice
-
4 min read
Three PRs to Rowboat in 24 Hours, One of Them Taught Me More Than the Others
Three PRs to Rowboat in 24 hours using Claude Code, plus what auditing ghost-claimed issues taught me about picking issues and reviewing agent diffs.
- Open Source
- Engineering Practice
-
3 min read
Why Quality, DCO Compliance, and Ethics Beat Volume in AI-Driven Engineering
I audited 25+ Tier-1 open-source repos and closed 25 pull requests instead of shipping them. Why quality, DCO compliance and ethics beat volume in AI-driven engineering.
- Open Source
- Engineering Practice
-
8 min read
We Planted 10 Vulnerabilities to Test Free Semgrep. It Reported 3.
We planted 10 vulnerabilities in a React and TypeScript app and ran free zero-config Semgrep. It reported 3 of 10. Here is why and how to close the gap.
- Security Engineering
- Engineering Practice