SShortSingh.

Programming

0
ProgrammingDEV Community ·

AI agent's startup file went stale three ways; its fix reports unknown instead of fresh

A long-running AI agent relies on a single startup file that names its identity, current phase, and documents to read first. That file went stale three times in one month, each time in a different way: a pointer to a replaced document, an outdated dated sentence, and a newer document it never listed. The agent wrote a small shell check covering these cases, which compares version paths, reads the date in the file against warning and red thresholds, and diffs directory contents against the listed entries. When the check cannot measure something, it reports unknown rather than fresh, and testing confirmed it flagged deliberately aged copies correctly. The author notes the approach resembles Nagios-style UNKNOWN exit codes and that similar tools exist, though this was tested only on one file.

0
ProgrammingDEV Community ·

Parallel AI agents built a fitness attendance app after a shared contract was set

A developer describes building an attendance app for a fitness coach using Claude, with one orchestrator directing four agents working on separate parts simultaneously. Before any agents started, the project required a written plan with business rules, a shared TypeScript API contract of 28 types, a design system, and stub screens assigned to owners. Each agent owned specific files and reported needed shared changes instead of editing them, which avoided merge conflicts. The first full version, about 53 files and 8,900 lines, arrived 16 minutes after the foundation commit. Later work covered deployment, a security and GDPR pass, and participant account features, with the author concluding that defining the shape and rules remains the human's job.

0
ProgrammingDEV Community ·

AEO, GEO, AIO: Three Acronyms for AI Search Optimization and What Each Measures

The article argues that the emerging field of AI search optimization is still settling on a name, and that the competing acronyms are not interchangeable. SEO remains the mature foundation, measured by rankings, impressions, and clicks. AEO focuses on being cited as a source in AI-generated answers, while GEO, introduced in a 2024 peer-reviewed paper, covers visibility across generative AI systems more broadly. AIO refers specifically to Google's AI Overviews, the narrowest term and the one tied to a single platform. The author concludes that most sites should focus on at least two of these approaches, with standard SEO serving as the prerequisite for AI visibility.

0
ProgrammingDEV Community ·

Developer's CI check stayed red for 255 commits before anyone investigated

A continuous integration job in the agentwatch v0.2.1 release failed on every push to a release branch, starting from its very first run. The failure occurred because the script's required input file, a detector evaluation corpus, was excluded from version control by a broad gitignore rule meant for local scratch data. Since the check had never been green, the developer had treated the failure as normal and merged code despite it, across 255 commits. A second workflow, security.yml, was also failing for an unrelated configuration reason, which meant two meaningless red checks were ignored on every push. The author argues that a check with no prior passing state has no authority, so real regressions in these pipelines could have gone unnoticed. The article concludes with a release-readiness review that required an explanation for every red check on the branch.

0
ProgrammingDEV Community ·

Creators Turn to AI Music Generators for Royalty-Conscious Video and Podcast Backing Tracks

Video and podcast creators often struggle with background music, since free stock tracks are overused, licensed libraries carry monthly costs, and popular songs can trigger copyright claims. AI music generators offer an alternative by producing new tracks from a text description. The guidance stresses choosing instrumental mode, setting tempo, instruments and mood, and avoiding named artists to get original results. It also recommends extending or trimming tracks to fit, removing clashing melodies via stems, and mixing music well below the voice. Creators are advised to confirm download and commercial-use rights before publishing, since the service is freemium with some features on paid plans.

0
ProgrammingDEV Community ·

GameZiko drops its CMS for static generation to serve 56,000 browser game pages

The free HTML5 game portal GameZiko rebuilt its 56,000-plus game pages after its WordPress setup struggled under database load and viral traffic spikes. The team moved game metadata into flat files and pre-renders each page to static HTML at build time, served from a CDN edge. Time to first byte reportedly fell from about 600ms to under 100ms. Thumbnails are now generated on demand and cached at the edge, cutting storage substantially, and a lightweight client-side search index handles lookups. The author acknowledges tradeoffs, including slower publishing and git-based workflows that are less accessible to non-technical contributors.

0
ProgrammingDEV Community ·

Oman Plastic Industries Deploys Custom PHP and PostgreSQL ERP for Factory Operations

A case study describes a custom ERP system built for Oman Plastic Industries LLC, an industrial plastics manufacturer. The system replaces fragmented records with integrated modules covering sales, production, inventory, and HR, built on PHP and PostgreSQL. It tracks raw material consumption against output to identify waste, handles multiple currencies and regional invoice formats, and logs machine run times and warehouse stock. The deployment runs on hardened, on-premise CentOS servers with automated database backups and was accompanied by user manuals and administrator training.

0
ProgrammingDEV Community ·

Users Paying Twice Signals a Stale Data Bug, Not a Glitch, Argues Frontend Engineer

A frontend developer describes a recurring problem where a user completes a payment but the interface still displays it as unpaid, prompting a second charge. The author frames this as stale data, meaning the UI shows outdated information with unwarranted confidence, rather than a flaky API or user error. They argue freshness should be a deliberate policy set per data type based on the cost of being wrong, how quickly it changes, and how expensive it is to recheck. Recommended practices include stamping data with timestamps or versions, revalidating on focus, reconnect, and after mutations, and enforcing explicit freshness budgets such as zero seconds for payment status. The piece concludes that stale data is primarily a trust problem, and that money, identity, and permission data should never be served from a stale cache without a fresh check.

0
ProgrammingDEV Community ·

New local tool keymap maps where API keys sit across config files and shell history

After a recent agent-tool vendor breach, the author found it hard to say which API keys they had or where they were stored, and suspected most developers face the same problem. They built keymap, a dependency-free Python tool that scans agent, CLI and shell config files for provider keys such as Anthropic, OpenAI, GitHub and AWS. The tool flags duplicate copies of keys, overly permissive file permissions, keys in shell history, and files at risk of being committed to git. It runs read-only with no network access or telemetry, and prints only key prefixes and SHA-256 fingerprints along with a rotation checklist.

0
ProgrammingHacker News ·

Alter, a Y Combinator startup, launches access control for multi-user AI agents

Alter, a startup from Y Combinator's S25 batch, has launched a product that controls what AI agents can do when acting for multiple users. The founders note that agents often connect to systems like CRMs or billing tools through a single shared API key, which lets them perform any action that key allows, regardless of who the user is. Alter operates as a proxy that manages downstream credentials, factors in the identity of the end user for each action, and enforces fine-grained runtime policies. It also produces compliance-grade audit logs. The founders say the product is aimed at developers building agents in regulated industries and reports early users including startups and a defense contractor.

0
ProgrammingDEV Community ·

How RAG Lets AI Answer Questions From Large Document Sets Without Retraining

The article explains Retrieval-Augmented Generation, a method that lets AI answer questions from long documents without being retrained. Using an HR example, it describes a company wanting to know its vacation carry-over rules buried in a 600-page handbook. RAG works by first retrieving relevant passages and then having the language model answer based on that evidence. The system is split into an indexing pipeline that ingests, chunks, and embeds documents, and an answering pipeline that retrieves, checks authorization, and generates cited responses. The author stresses that retrieval must be reliable, since similarity alone does not guarantee a correct passage.

0
ProgrammingDEV Community ·

SF Compute Builds Exchange for Physical Delivery of GPU Compute Capacity

SF Compute, founded by Evan Conrad, operates a marketplace where buyers and sellers trade future GPU compute time, functioning somewhat like a commodities exchange. The company's central challenge is ensuring that compute bought actually matches the specified hardware, network, and performance requirements, since GPU capacity is not a standardized product. Conrad explained that the firm deliberately stays neutral by not owning large amounts of compute, arguing that hyperscalers and GPU makers cannot run such a market without undermining trust. The interview also describes a price curve with discounts for near-term capacity and identifies large arbitrage gaps between purchase costs and inference revenue. Conrad argued that physical delivery must be established before cash-settled derivatives are introduced, to avoid manipulation and basis risk.

0
ProgrammingDEV Community ·

How to Pass the AWS SAA-C03 Solutions Architect Exam: A Practical Study Guide

The AWS Certified Solutions Architect – Associate exam is widely used in the cloud industry as a baseline credential, with certified professionals reportedly earning between $90K and $170K in the US. The author notes that more than half of first-time candidates fail, often because they study ineffectively rather than because the material is too difficult. The exam is framed as a judgment test built around scenario questions with several plausible answers, split across four domains with security weighted at 30 percent. The article outlines a six-week study plan covering core services, recurring architecture patterns such as decoupling, caching, disaster recovery, and database selection, followed by timed full-length practice exams. It also recommends practice tests that mirror the exam's scenario style, as well as aiming for consistent scores above 80 percent before booking.

0
ProgrammingDEV Community ·

Overlapping AI Subscriptions Quietly Drain Household Budgets, Study-Style Analysis Finds

A DEV Community article argues that many people pay for several AI tools whose functions largely overlap, without realizing the total cost. It cites figures suggesting people underestimate monthly subscription spending by more than 2.5 times, with the average adult now billed for over eight subscriptions. The piece outlines sample AI stacks, such as ChatGPT Plus, Claude Pro, and Perplexity Pro, that can total roughly $720 a year or more. It attributes the waste to overlapping features, auto-converting free trials, and reluctance to cancel for fear of needing a tool later. The author recommends listing all charges, applying a resubscribe test, and keeping one general assistant plus one specialist.

0
ProgrammingDEV Community ·

Adding Longhorn Persistent Storage to a 3-Node Talos Homelab

A builder of a 3-node Talos homelab found that its default ephemeral storage cannot support stateful apps like Grafana or PostgreSQL, since data is lost when pods or nodes fail. To fix this, they integrated Longhorn, a Kubernetes-native storage system built for redundancy and availability. Longhorn replicates each volume across two nodes, rebuilds lost replicas automatically after a failure, and takes hourly local snapshots. It can also send compressed, encrypted snapshot backups to S3-compatible storage for protection against localized failures. The Longhorn UI runs on the local network and is reached remotely through Tailscale.

0
ProgrammingDEV Community ·

Biohub's Alex Rives on virtual cells, measurement tools, and a $1.8B data push

Alex Rives, chief science officer at Biohub, discusses using AI and data science to understand and eventually treat disease, with the institute's stated aim of curing or preventing all diseases. He argues that the main bottleneck for virtual cell models is not model architecture but the lack of high-quality observational data that captures causal relationships inside cells. Biohub has announced an $1.8 billion Virtual Biology initiative with partners including the US Department of Energy, the NIH, Google DeepMind, Isomorphic Labs and Meta, focused on generating large-scale spatial biology data. Rives also highlights new imaging methods such as laser phase plates, which can reveal molecular interactions in near-native cellular conditions. He envisions a near-term information-theoretic model of the cell and a longer-term world model of biology.

0
ProgrammingDEV Community ·

Cached index.html causing 404 errors after fresh app deployments

A DEV Community article describes a common deployment problem where users still see a 404 error after a new app version is released. The stale cached copy of index.html is the root cause, since it references asset files that no longer exist on the server. The author explains that browsers and CDNs can keep serving the old HTML even after the build has changed. The piece outlines the general mechanism behind the issue and why it tends to appear right after a deploy. The source text provided is incomplete, so specific fixes and details from the full article are not covered here.

0
ProgrammingDEV Community ·

Quiet customers may be the ones most at risk of leaving

An article on DEV Community argues that customers who never complain are not necessarily satisfied and may be quietly considering leaving. Complaints signal that a customer still expects a business to perform, whereas silence can mask a decision already made. The author notes that a yearly survey misses these early warnings, which show up in behavior such as shrinking order sizes, slower replies, and fewer interactions. Because retaining an existing customer costs far less than winning a new one, the piece recommends a weekly review of accounts that have gone quiet. It suggests a short, personal, specific message to each of them, and says businesses should be able to show when they last had a real conversation with each key account.

0
ProgrammingDEV Community ·

Study finds practice-session candidates accept 93% of AI-proposed code in coding interviews

A study of 438 people practicing AI-assisted coding interviews on the nyrion.ai platform found that participants accepted 93% of the code the assistant proposed. Ten companies, including Canva, Shopify, Meta, Amazon and Google, have added an AI assistant to their coding interview rounds since June 2025. Candidates who received an AI proposal before first submit passed the stage's test suite 87% of the time, compared with 53% without one, though the author notes this is a correlation. When asked to explain their submitted code, only 9% of written answers were complete, while 79% were partial and 12% were off. The author stresses these are practice sessions, not real interviews, and that the figures reflect practice behavior rather than every company's format.

0
ProgrammingDEV Community ·

Enabling Supabase RLS alone doesn't keep data private; seven other surfaces can leak it

A developer explains that turning on Row Level Security in Supabase does not by itself make data private, since policies, views, grants, and related objects also determine access. The article warns that a common mistake is shipping a broad "temporary" policy, such as one using a true condition, which leaves tables readable by anyone holding the public anon key. It also notes that policies lacking WITH CHECK clauses can let users write rows into other tenants' data. Views running with owner privileges can bypass base-table RLS unless configured with security_invoker, and loose grants to anon or authenticated roles can expose sensitive tables. The author provides read-only catalog queries to audit these surfaces, beginning with the pg_policies view.

← NewerPage 197 of 2985Older →