Developer's Portfolio Adds Daily Puzzle Arcade with Server-Verified Race Times

·1 views

A developer has added a daily arcade to their portfolio site featuring four puzzles: Minesweeper, a 6x6 Sudoku, Quick Math, and Code Review. Every visitor receives the same puzzles each day, and the developer's own completion times serve as the benchmark to beat. To prevent cheating, the server issues a signed token at the start and replays each player's moves to measure elapsed time itself rather than trusting the browser. The developer is requesting feedback and player times from the community.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

PaperPilot Uses Gemma to Turn Messy GST Invoices into Clean Records

PaperPilot is an invoice and expense assistant built for freelancers, consultants, and small agencies that struggle with folders of PDF invoices at tax time. The app uses Gemma, Google's open-weight model accessed through the Gemini API, to extract vendor details, dates, GST amounts, and totals from digital PDFs. Its validation layer checks the AI's output, flagging mismatched totals, invalid GSTINs, and unequal CGST and SGST values for human review. Duplicate detection, overdue flags, and bank statement matching are handled with ordinary code rather than AI, and personal identifiers are redacted before any text is sent to the model. Because Gemma's weights are public, the same model could later be self-hosted by users who need full control over their data.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Most copy-paste HTML contact forms from top search results fail to deliver messages

A developer who builds a form backend checked nine HTML contact form snippets from leading search results on 13 October 2026 by reading their code without submitting anything. Only five would send a message anywhere, and three of those come from form-backend companies, leaving just one independent snippet that delivers a message as pasted. None of the nine set autocomplete attributes or included spam protection in the code itself. Several other snippets had defects such as missing field names, unclosed tags that hid the submit button, or actions that pointed nowhere. The author noted that three of the four non-sending forms never informed the reader of this limitation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Encrypted Connections Alone Failed to Keep an Election Results Portal Online

A county team found that standard TLS encryption did not protect their election-night reporting portal from overload during a stress test. Valid encrypted handshakes were handled easily by edge proxies, but the API layer buckled under complex precinct-level queries at high concurrency. To counter this, engineers added application-level rate limiting, strict query complexity caps, and pre-rendered fallback pages for peak periods. The experience led them to argue that civic systems should be designed to degrade gracefully rather than collapse under load.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Approval Gate Design for Controlling AI Agent Autonomy in TypeScript

A developer explains that an AI agent with a destructive tool can act on a loosely worded prompt, because the missing piece is a rule governing when a tool may run. The author proposes a five-level autonomy scale, from no tools to full autonomy, which is enforced in code rather than set by the model. Autonomy is assigned per tool according to risk: read-only, reversible writes, or irreversible actions such as deleting data. A flowchart and a TypeScript example show how a decision function either runs a tool, asks a human for approval, or refuses it. The post notes that no standard defines these levels and presents the scale as the author's own working framework.

0 comments Read more at DEV Community