Dev Team Open-Sources Tool to Validate Completion Claims in AI Agent Workflows

·1 views

A development team has released a small open-source utility called ack-is-not-done-guard, designed to prevent AI agents from falsely claiming a task is complete. The tool defines four distinct states — acknowledged, working, artifact_delivered, and proven_done — and only allows a completion claim when the final state is reached. It was built to address a recurring problem in file-based agent workflows where acknowledgment of a task was being mistaken for actual completion. The utility is intentionally minimal and does not actively monitor workflows on its own. It is currently scoped specifically to Claude Code's file-based workflows.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Hard-Learned Celery Production Tips: Monitoring, Retries, and Silent Failure Fixes

A software team sharing lessons from four years of Celery deployments describes how a silent worker failure once left 40,000 tasks unprocessed and delayed client invoices for two weeks. The core issue is that Celery, by default, acknowledges tasks before they run, meaning a worker crash silently drops the job with no alert raised. Setting task_acks_late and task_reject_on_worker_lost ensures failed tasks are requeued rather than lost, while worker memory and task-count limits prevent gradual degradation. The team also recommends deploying Flower with event tracking enabled to monitor queue depth and active worker counts, triggering alerts when thresholds are breached. For task reliability, they use exponential backoff retries with differentiated handling for expected errors versus genuine data-missing cases.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

REST vs GraphQL: How to Choose the Right API Style for Your Project

REST and GraphQL are two widely used API approaches, each with distinct trade-offs depending on the use case. REST organises data around fixed endpoints and HTTP methods, making it simple to implement, cache, and version, but it can lead to over-fetching or multiple round-trips for related data. GraphQL lets clients request exactly the fields they need in a single query, which benefits mobile apps on variable networks, though it introduces added complexity in setup, caching, and query management. Many teams adopt a hybrid approach, using REST for public-facing APIs and GraphQL internally to reduce frontend round-trips. The best choice depends on team familiarity, client needs, and whether the API is intended for public or controlled consumption.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Engineers Build Reliable Data Transmission on Top of UDP

UDP is a lightweight networking protocol that powers real-time applications like online games, video streaming, voice calls, and DNS, but unlike TCP it offers no guarantees of delivery, order, or duplicate prevention. Because of this, engineers sometimes prefer UDP when they need fine-grained control over how data is transmitted, rather than accepting TCP's built-in overhead. A technique known as 'reliable UDP' involves layering custom mechanisms — such as sequence numbers, acknowledgements, retransmissions, and duplicate detection — directly on top of UDP. This approach lets developers rebuild only the reliability features their specific application actually needs, avoiding unnecessary costs like head-of-line blocking or connection setup delays. The result is a tailored transport layer that can outperform TCP in latency-sensitive scenarios while still ensuring data integrity where it matters.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How One Wildcard DNS Record Powered 19 Self-Hosted Services Behind a Single IP

A self-hosted infrastructure setup using a single wildcard DNS record (*.example.com) routes all subdomains to one VPS, with Nginx Proxy Manager handling HTTPS publishing through a simple four-field form. The author automated service deployment using Claude Code, which generates compose files, proxy configurations, and certificates end-to-end, resulting in 19 live public hostnames. Each service received its own Let's Encrypt certificate via HTTP-01 challenge rather than a shared wildcard certificate, which permanently requires port 80 to remain open for renewals — a silent failure risk if closed. The author notes that the ease of publishing services exposed a key oversight: none of the tooling enforces access control, leaving all 19 services reachable from the open internet by default. The intended solution was to make the services accessible only through a private overlay network, separating the concept of being internet-connected from being publicly reachable.

0 comments Read more at DEV Community