Blog

Practical notes on AI agents, Laravel/Vue systems, DevOps, developer tools, and software decisions that need to survive maintenance.

devops · September 5, 2026 · 13 min read

A Green apt Update Is Not a Trusted Key After Saturday

GitHub CLI’s Linux signing key expires Saturday 5 September 2026. Last night’s green apt update is not a trusted keyring. Name the owner of the image before the next CI layer runs apt.

tutorials · Sep 4 · 12 min

Name the Copilot Surface Before You Trust the Exclusion List

A Copilot content exclusion is a policy row. App and CLI now honor it. Agent chat in the editor still can. Name the owner of the list and of the surface before you call a secret recovered.

backend-infrastructure · Sep 3 · 11 min

Leave Copilot Approve Off

GitHub now prints a ready-to-approve assessment on every Copilot review. That line is a note. The admin switch that turns it into a required approval is off by default. Keep it off.

software-engineering · Aug 30 · 11 min

Five Things I Refused This Week

A ranked cheat-sheet of five desk rules from this week: who pins the model, what .gitignore does not lock, who merges, who retries, and who still reads the diff.

ai-agents · Aug 29 · 13 min

I Do Not Let a Coding Agent Pick Its Own Model

The agent that writes the diff does not choose the model for that pull request. A named human pins the model before the session starts. Auto is a vendor default, not an owner.

developer-tools · Aug 28 · 12 min

I Do Not Give a Coding Agent Merge Rights

A coding agent may open the pull request. A named human still owns the merge click. Treat GitHub agent merge and auto-merge as opt-in shortcuts, never as the default.

frontend-engineering · Aug 27 · 13 min

I Do Not Add a Second Chart Stack Mid-Sprint

A green chart lockfile is not permission to add ECharts beside ApexCharts. Name a rollback owner and one failing chart fixture before anyone ships a second visualization stack.

tutorials · Aug 26 · 13 min

Empty Tool Output Is Not Success Until the Harness Says Interrupted

An interrupted MCP tool in a headless coding-agent session used to look finished. Treat empty completion as a bug until the harness asserts an interrupted error.

ai-agents · Aug 21 · 11 min

Your Coding Agent Needs a Map, Not a Bigger Context Window — Part 2

A bigger context window still lets a coding agent search the whole tree. Put the map file on the ticket as an allow-list, fail out-of-map paths, and name who updates the list.

dev-ecosystem · Aug 16 · 13 min

Hermes Agent Multi-Agent Orchestration: How Cron Pipelines Delegate, Verify, and Recover

Multi-agent Hermes setups fail when specialists work unsupervised. Gates, checkpoints, and a coordinator that verifies artifacts before publishing.