Blog

Practical notes on AI agents, Laravel/Vue systems, DevOps, developer tools, and software decisions that need to survive maintenance.

ai-agents · September 25, 2026 · 12 min read

A NUL Byte in a Permission Rule Is Not a Wildcard Allow

A permission rule that contains a NUL byte is not a wildcard allow. Print the rule bytes, the match-nothing result, and the named permission-rule owner before you file an allow-all ticket.

devops · Sep 24 · 14 min

A Timed-Out Job Is Not a Killed Worker

A job that hits its timeout is not a dead worker pool. Print the job timeout, the worker kill, and the named queue:work owner before you file an outage.

developer-tools · Sep 23 · 12 min

One Matching Glob Is Not a Sandbox Exemption for the Rest of the Line

A docker glob that matches one command is not a sandbox exemption for npm ci && docker build. Print the glob, split every part, and name who owns sandbox.excludedCommands before you file a hole.

software-engineering · Sep 21 · 13 min

Handing the Hostname to the Forward Proxy Is Not a Missing Host

A failed local DNS lookup on a Claude apps gateway pod is not a missing host when the pod only talks through a forward proxy. Print the env, read the boot network line, and name who owns proxy-only egress.

ai-agents · Sep 20 · 14 min

A Present AGENTS.md Is Not the Project Instructions While CLAUDE.md Exists

A repo-root AGENTS.md is not Claude Code’s project instructions while CLAUDE.md or CLAUDE.local.md exists. Print the load line, open /config, and name who owns the instruction file.

devops · Sep 19 · 14 min

Ubuntu-latest Is Not a Runner Image You Already Tested

A green Laravel or Vue workflow on ubuntu-latest is still today's image, not the image GitHub will move that label onto. Print the label, the named pin, the test job, and the workflow owner before the migration window.

developer-tools · Sep 18 · 12 min

A Missing Previews Block Is Not a License to Reuse Production Bindings

A Wrangler onboarding write for a missing previews block is a warning, not permission to point preview at production KV, D1, or secrets. Print the block, the placeholder, and the named config owner before you ship.

software-engineering · Sep 17 · 14 min

A Client That Still Sends Initialize Is Not a Broken Laravel MCP Server

An old MCP client that still opens with initialize is a handshake the new Laravel server still answers, not a dead 1.0 package. Print the method, the pin, and the named owner before you file the server.

tutorials · Sep 16 · 13 min

A 300-Second WebFetch Fail Is Not a Hung Model

A red WebFetch at five minutes is a download deadline, not a stuck model. Print the named CLI pin, the deadline env, and the named owner before you page the model.

devops · Sep 14 · 13 min

Every-Turn HTTP 400 on ANTHROPIC_BASE_URL Is Not a Dead Gateway

A wall of HTTP 400s on a named Claude Code base URL is a schema reject, not a status outage. Print the 400 body, the named URL, and the named CLI pin before you page the gateway.