Dev Team Audits Claude Code Setup, Finds Same Context Injected Three Times Per Session

·1 views

A development team running Claude Code on a multi-stack farming-assistance platform conducted a self-audit after Anthropic published new context-engineering guidelines for Claude 5-generation models. Over several months, the team had built extensive automation including session-start hooks, persona plugins, and a custom repo-memory layer called gps, which collectively made sessions feel slow to start. The audit revealed that three overlapping commands were injecting the same roughly 60-line preferences list into the context window at the start of every single session. This violated Anthropic's core recommendations to keep CLAUDE.md lightweight, avoid redundant instructions, and rely on automatic memory rather than manually maintained data dumps. The team documented both the root cause and a mistake made during the fix, offering the findings as a practical case study in applying context-engineering discipline to a real production setup.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Sub2API Lets You Self-Host a Private AI API Gateway Across Multiple Providers

Sub2API is an open-source tool that allows developers to self-host an AI API gateway, placing a single base URL in front of multiple AI providers and accounts. The gateway handles authentication, routing, usage accounting, and concurrency limits, while issuing separate revocable keys to users or projects. Deployment requires a Linux server running Docker 20.10 or newer, Docker Compose v2, a domain, and at least one authorized upstream API account, with PostgreSQL and Redis bundled in the official stack. The project warns that redistributing quota from AI subscriptions may violate upstream terms of service, and advises keeping initial deployments private using only authorized accounts. Self-hosting becomes worthwhile primarily when managing multiple users or projects, as adding a gateway to a single-user setup can increase system fragility.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Defen.so offers developers instant app security with WAF, scanning, and monitoring

A developer named '1fancy' has built and open-sourced Defen.so, an application security layer designed to be installed in seconds via a single CLI command. The tool bundles several security features including a managed WAF, SQL injection and XSS protection, bot detection, DDoS mitigation, and file upload checks. It also provides uptime monitoring, real-time attack logs, and alerts through email, Slack, Telegram, and webhooks. Defen.so includes a security scanner that flags exposed secrets, missing headers, and misconfigured cloud permissions common in rapidly built applications. The project is actively in development and targets developers, startups, and small teams who lack dedicated security infrastructure.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds multi-agent AI coding orchestrator to keep humans in the merge loop

A developer created agents-concerto, a multi-agent orchestration system built on top of Claude Code, after growing frustrated with opaque AI coding sessions that produced untraceable changes and meaningless green tests. The system uses a conductor-and-players model where separate agents handle implementation, classification, and review, with strict rules preventing any code-writing agent from also approving or merging changes. All acceptance criteria are written in Given-When-Then format at the planning stage and must translate into tests that assert only observable behavior, never internal implementation details. Each agent operates in its own isolated git worktree, and the system caps review-fix cycles with a human exit option once the limit is hit. The orchestrator's sole output is a pull request ready for human review, with auto-merge explicitly excluded and merge permissions never requested.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Build a Price Monitoring Bot Using Python and Telegram

A tutorial published on DEV Community walks developers through creating an automated price monitoring bot using Python and the Telegram messaging platform. The bot is designed to track product prices on websites and notify users via Telegram whenever a price drop is detected. Developers are guided to set up a Telegram bot through BotFather, obtain an API token, and install required Python libraries including python-telegram-bot, requests, and BeautifulSoup4. The bot works by sending HTTP requests to product pages, parsing the HTML to extract price data, and comparing it against previously recorded values. Sample code is provided throughout the tutorial to help developers assemble the full working bot step by step.

0 comments Read more at DEV Community