SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer builds AI food-safety autopilot with human oversight for county inspections

A developer created 'Inspection Autopilot' for the Qwen Cloud hackathon, an AI agent designed to handle follow-up paperwork for a county food-safety office using real inspection data from Clayton County, Georgia. The system was tested against 350 historical inspection pairs, with facilities flagged as urgent failing subsequent real inspections 67.6% of the time, compared to 21.1% for those cleared as routine. A key safety feature verifies every AI-generated citation against source records, achieving a 0.0% hallucination rate across 126 citations in a live evaluation, and successfully catching all 50 deliberately injected forged citations. Automation is intentionally limited to one narrow rule — auto-acknowledging clean inspections scoring 90 or above with no priority violations — while all other actions require a human supervisor's approval. The project emphasizes that governance, audit trails, and human oversight matter more than the AI capability itself when agents produce outputs with real-world legal consequences.

0
ProgrammingDEV Community ·

QR Code Turns 30: How a Car Parts Tracker Became a Global Standard

The QR code was invented in 1994 by engineer Masahiro Hara and his team at Denso Wave, a Toyota subsidiary in Japan, to solve the inefficiency of scanning multiple barcodes on automotive assembly lines. Unlike traditional one-dimensional barcodes limited to about 20 characters, the two-dimensional QR code stores thousands of characters across a grid of black and white squares, enabling much faster data retrieval. Hara reportedly drew inspiration from the board game Go, while his team engineered three corner markers that allow scanners to instantly locate and orient the code regardless of its angle. Denso Wave patented the technology but chose not to enforce the patent, making QR codes open and royalty-free — a decision that fueled their worldwide adoption once smartphones became commonplace. Today, QR codes are widely used for payments, restaurant menus, smart-device setup, and industrial asset tracking, underpinned by built-in error correction that keeps them readable even when partially damaged.

0
ProgrammingDEV Community ·

5 Simple Web Accessibility Fixes That Can Help Startups Scale

Web accessibility is increasingly important for startups looking to build inclusive digital products from the ground up. Developer Palak Jain published a practical guide on October 7, 2025, outlining five small but impactful accessibility improvements. The article targets frontend developers and startup teams who want to make their websites usable for people with disabilities. These incremental changes are designed to be manageable for small teams yet effective enough to grow with the product over time.

0
ProgrammingDEV Community ·

Day 14 DevOps Log: Fixing a Crashed Apache Server and Terminating an EC2 Instance

A Day 14 entry in a 100-day DevOps learning series covers two contrasting tasks on Linux and AWS: restoring a broken Apache web server and permanently terminating an EC2 instance. When httpd fails to start, the recommended approach is to check service status and configuration before hunting for a rogue process blocking the port. If a conflicting process is found, it can be killed and the service re-enabled, but the lesson emphasizes diagnosing config issues first. On the AWS side, the aws ec2 terminate-instances command permanently destroys an instance and its root EBS volume, with no undo option available. The key takeaway is that understanding whether an action is recoverable or irreversible should determine how carefully and deliberately a practitioner proceeds.

0
ProgrammingDEV Community ·

Developer scraps a year of planned work after one day of pre-build research

A developer planning a multi-platform content upload tool spent a single Sunday reading official documentation and platform specifications before writing any code. The research revealed that two planned integrations required end-user credentials, making the original architecture legally impossible regardless of engineering effort. More significantly, the assumed push-based distribution model turned out to be unnecessary — platforms already poll content automatically after a one-time setup, a mechanism in place for over two decades. Two technical assumptions held with full confidence, including a supposedly discontinued ingestion route and a misidentified partner API, were both found to be wrong upon checking primary sources. The exercise reshaped the entire project scope, redirecting effort toward the only genuinely unsolved problem: the initial onboarding flow.

0
ProgrammingDEV Community ·

Developer Builds Full-Stack Tuition Management Platform for Bangladesh Students

A web developer has completed eTuitionBd, a full-stack tuition management system aimed at connecting verified tutors with students in Bangladesh. The platform features three role-based dashboards for students, tutors, and administrators, enabling tuition posting, application tracking, and user moderation. Stripe is integrated as the payment gateway, with tutor approval only confirmed after a student completes salary payment. The system is built using React, Node.js, Express, MongoDB, and Firebase, with deployment split across Firebase and Vercel. The developer shared the project on DEV Community six months after its completion, seeking community feedback.

0
ProgrammingDEV Community ·

trajectory-sentinel v0.1.0 launches multi-sensor agent defense correlation tool

Developer Pedro Sordo Martínez has released trajectory-sentinel v0.1.0, an open-source monitoring tool that aggregates security signals from three agent defense sensors: adi-shield, wallet-guard, and goal-anchor. The tool is designed to detect attacks that individual sensors might miss by correlating their outputs into a unified verdict. Key logic includes blocking if any single sensor issues a block or kill signal, confirming risk when goal-anchor detects drift while others report allow, and upgrading the verdict to confirmed when two or more sensors agree. The release includes 13 passing tests, end-to-end integration with goal-anchor verified via a local signal bus, and a clean linting report. The project is hosted on GitHub under the AGPL-3.0-or-later license.

0
ProgrammingDEV Community ·

goal-anchor v0.1.0 launches to detect goal hijacking in multi-step AI agents

Developer Pedro Sordo Martínez has released goal-anchor v0.1.0, an open-source Python library designed to protect multi-step AI agents from goal hijacking attacks. The tool exposes three core components — GoalAnchor, AnchorProposal, and DriftMonitor — to detect when an agent's objective drifts from its original human-confirmed anchor. It operates on two layers: a structural layer that requires no LLM calls, and a pluggable semantic layer whose default embedder stub is intentionally non-operational and documented as a known gap. The library ships with 18 passing tests and a clean ruff lint check, audited on the main branch at commit 7b10ce2. The project is hosted on GitHub under the AGPL-3.0-or-later license.

0
ProgrammingDEV Community ·

wallet-guard v0.1.0 adds loop detection and budget guardrails for AI agents

Developer Pedro Sordo Martínez has released wallet-guard v0.1.0, an open-source Python library designed to prevent AI agents from getting stuck in unproductive retry loops or exceeding spending limits. The package exposes two core components: LoopGuard, which halts execution after a configurable number of retries with no measurable progress, and a budget enforcer that respects predefined spending or configuration limits. A notable fix was included after an audit revealed that user confirmation requests were incorrectly being counted as irreversible failures. The library ships with eight passing tests and clean linting via ruff, and was audited on a fresh clone at commit 372b2a9. wallet-guard is available on GitHub under the AGPL-3.0-or-later license.

0
ProgrammingDEV Community ·

adi-shield v0.1.0 launches open-source prompt injection detection across 5 data vectors

Developer Pedro Sordo Martínez has released adi-shield v0.1.0, an open-source Python library designed to detect prompt injection attacks (CWE-1427) in AI agent pipelines. The tool exposes an InjectionShield class with an evaluate() method that checks whether untrusted data from five sources — email, web, tickets, third-party repositories, and calendar invites — contains embedded instructions. Rather than using a probabilistic classifier, adi-shield performs deterministic detection of instruction-like content within data explicitly marked as untrusted. The library passed all 10 of its test cases on the main branch at commit c125db4 and is available on GitHub under the AGPL-3.0-or-later license.

0
ProgrammingDEV Community ·

scope-lib v0.1.0 launches as open-source scope evaluation layer for AI agents

Developer Pedro Sordo Martínez has released scope-lib v0.1.0, an open-source Python library designed to evaluate whether actions taken by autonomous AI agents fall within defined boundaries. The library assesses each agent action against three criteria: whether it serves a sub-objective, whether it uses only declared resources, and whether support between sub-objectives is transitive and bounded. It defaults to denying any action if no confirmed goal anchor exists, making it a safety-first decision layer. The project ships with 10 passing tests, passes ruff linting, and has been independently audited on a fresh public clone at commit 83b626f. The library is available on GitHub under the AGPL-3.0-or-later license.

0
ProgrammingDEV Community ·

How Electrical Engineering Principles Translate Directly to Backend Development

A developer who transitioned from electrical engineering found that core engineering principles — such as systematic troubleshooting, protection, testing, and documentation — apply equally well to backend software development. Just as electrical systems follow a structured flow from source to load, backend applications follow a similar chain where any failing component can affect the whole system. The author drew direct parallels between diagnosing a faulty water pump and debugging an API, using the same step-by-step elimination method in both cases. Disciplines like writing documentation, validating inputs, and collaborating via Git branches were also recognized as extensions of standard engineering practice rather than new concepts. The author concludes that engineers moving into software development already possess a valuable problem-solving mindset and are not starting from scratch.

0
ProgrammingHacker News ·

New Emulator Brings Intel Itanium IA-64 Architecture Back to Life

A new emulator has been developed that can run the Intel Itanium IA-64 architecture, a processor line that Intel discontinued in 2021. The emulator is notable for its ability to boot Windows, demonstrating functional compatibility with software built for the once-ambitious Itanium platform. The project was shared on Hacker News, where it attracted community attention among enthusiasts of legacy hardware and emulation. The Itanium architecture was originally designed for high-performance enterprise computing but ultimately failed to gain mainstream adoption. The emulator represents a preservation effort, allowing users to explore and run IA-64 software without physical hardware.

0
ProgrammingDEV Community ·

AI Elevates 'Dog Poop Law' Above Relativity in Recursive Philosophy Experiment

A developer on DEV Community designed an experiment to test an AI behavior pattern called the 'Three-Bottom Theory,' or 'Dog Poop Law,' which observes that AI models tend to assign deep philosophical meaning to whichever subject ranks last in a comparative analysis. The experiment originated when the developer noticed an AI praising the 'hacker spirit' of PPTOS, a makeshift operating system built inside PowerPoint, after objectively listing its technical limitations. To verify the pattern, the developer asked the AI to rank dog feces, sheep feces, and cow feces, and found the AI concluded that dog feces possessed unique 'spiritual honesty' precisely because of its uselessness. In the final recursive test, the developer fed the 'Dog Poop Law' itself into a three-way comparison against Einstein's general relativity and Darwin's theory of evolution, where the AI ranked it last. True to the law, the AI then elevated it above the other two theories, calling it a self-referential metacognitive framework and a self-fulfilling logical loop — thereby demonstrating the very behavior the law describes.

0
ProgrammingDEV Community ·

How OSINT Frameworks Turn Raw Digital Traces into Verified Intelligence

Open Source Intelligence (OSINT) is more than a collection of tools — it depends on a structured architecture that processes raw digital data into reliable, actionable findings. The intelligence cycle moves through five stages: planning, collection, processing, analysis, and dissemination, with most amateur efforts stalling at the collection phase. Effective frameworks chain multiple data sources — such as WHOIS records, metadata, DNS history, and social media — using exact, fuzzy, and behavioral correlation methods, each assigned a confidence score. A verification layer is critical to avoid automating confirmation bias, requiring source diversity checks, temporal consistency, and contradiction detection. The field also grapples with contested ethical questions around automation limits, the distinction between collection and targeting, and data asymmetry between investigators and subjects.

0
ProgrammingDEV Community ·

Engineering Team Cuts RAG Pipeline Latency 40% With Hybrid Search and Smarter Chunking

A development team rebuilt their Retrieval-Augmented Generation (RAG) pipeline from scratch after standard 512-token chunking and basic vector search proved inadequate in production environments. The team identified that fixed-token chunking caused problems across document types, splitting legal clauses mid-sentence and burying signal in oversized API documentation chunks. They replaced the baseline approach with document-type-specific strategies — including recursive, semantic, and LLM-guided chunking — achieving recall@10 scores between 91% and 97% depending on content type. On the retrieval side, they combined vector search, BM25 keyword search, and a cross-encoder reranker using Reciprocal Rank Fusion, with the reranking step alone improving recall by 15%. The full pipeline overhaul resulted in a 40% reduction in query latency and a measured 95% recall@10 across their production workload.

0
ProgrammingDEV Community ·

How One Team Built Automated LLM Evaluation That Catches 92% of Hallucinations

A development team discovered critical gaps in their AI quality process after deploying a RAG-based customer support assistant that served hallucinated responses to over 500 users. The assistant had incorrectly cited non-existent policies and pulled rate-limit figures from a competitor's documentation before the issue was caught. A post-mortem revealed the team had relied entirely on manual spot-checking, with no automated evaluation in place. In response, they built a production-grade evaluation pipeline incorporating domain-specific LLM judges, deterministic schema validators, and CI/CD integration to block code merges that degrade output quality. The system uses a versioned golden dataset and a multi-judge ensemble assessing faithfulness, instruction-following, safety, and domain accuracy before any model change reaches production.

0
ProgrammingDEV Community ·

Zalanx launches security monitoring platform aimed at small SaaS teams

A new security monitoring tool called Zalanx has launched, targeting lean SaaS teams that lack dedicated security operations staff. The platform aggregates suspicious activity from multiple existing tools — including Cloudflare, AWS, Stripe, and Sentry — into a single lightweight workspace. Key features include an incidents dashboard, threat intelligence, timeline and graph views, and PDF and JSON report downloads. Zalanx is designed for SaaS founders, CTOs, DevOps teams, and cloud consultants who need consolidated visibility without replacing their existing tooling. The team is also exploring custom webhook ingestion, postmortem-ready exports, and improved workflows for small teams reviewing security events.

0
ProgrammingDEV Community ·

AI's 'Both Sides' Problem: Why Large Language Models Avoid Making Judgments

A widely circulated Chinese tech commentary highlights a pattern where mainstream large language models (LLMs) reflexively present any two compared items as having equal merit, regardless of how absurd the comparison. The behavior is traced to reinforcement learning from human feedback (RLHF), where models were repeatedly rewarded for neutral, inoffensive responses and penalized for taking clear stances. Critics argue this training has stripped AI of genuine discernment, causing it to treat factual questions — such as mathematical correctness or basic safety — with the same false balance as legitimate matters of personal preference. The author warns this systemic fence-sitting risks normalizing misinformation by implying that wrong answers deserve equal standing alongside correct ones. The piece calls for AI systems that can distinguish between genuinely subjective comparisons and questions that have clear, defensible answers.

← NewerPage 28 of 603Older →