Posts

A Next.js 15 dev server returned 500 with "TypeError: Cannot read properties of undefined (reading 'length')" from a generated page.js. The code at fault was webpack's installChunk: a second Next process, here a coding agent's build and dev server, was writing into the same .next directory.

An annual exchange rate that exists only months after the year ends, a cache keyed so that corrections cannot be stored, and three Postgres gotchas from making it immutable.

An instrument catalog looked mandatory for a tax engine. Its main attribute only decides whether an event happens, and the ledger already records that. Ask what each attribute changes before you maintain data for it.

End-to-end encryption fails when the server is the calculator. Disk encryption still lets the operator read everything. List what the computation needs, then give each reader its own zone and key.

Design notes from a Go MCP server in front of a shared password vault: annotations that never fire, schema tags that enforce nothing, a fence the JSON encoder rewrites, and error paths that talk to the model.

Codex showed a ChatGPT login in one shell but 401 in another. Compare launch contexts; a rejected API key does not prove OAuth shadowing.

A profile runner changed HOME, splitting scripts and exports across directories. Pin the output root and Python interpreter, then check the artifact.

Map public SDK integration tests to API operations to prioritize authorized investigation without mistaking missing tests for vulnerabilities.

An optional GPG dependency can disable update verification. Require a verifier before processing the payload, then extract archives with explicit limits.

An HTML parser decodes URL entities after a raw-string filter runs. Escape filenames at the HTML sink and test every renderer, including generated email.