We have not accounted for the true costs of AI coding
It is time to face the true costs of AI coding. Reliable results require compute, supervision, review and maintenance that our productivity estimates often leave out.
Topic
system-design
12 articles in this thread. Browse all topics.
What VS Code Remembers on Your Mac
VS Code stores configuration, extension state, workspace state, local file history, plugins, and logs across several locations on macOS. This post maps those directories, explains what they reveal, and separates local editor state from GitHub Copilot CLI and cloud data.
Discussing the Trust Planes of Autonomous AI Work
How to establish trust in autonomous AI systems through identity, secrets management, and continuous assurance.
Stop Prompting Your Agents to Behave: Use Sandboxing Instead
Prompts can shape what an AI agent tries to do. Sandboxing and capability controls determine what it can actually do.
Why Desktop Apps Are Making a Comeback in the Age of AI
The browser won the last decade on reach. AI workloads are local, stateful and long-running, and the browser sandbox was never designed for that. The most serious AI tools of the last two years shipped as desktop apps, and this post argues that is not a coincidence.
Evaluating Overlapping Plugins in Coding Agents
Overlapping plugins complicate attributing coding-agent outcomes to the model or its configuration. This post distinguishes package resolution from per-run behaviour and proposes controlled comparisons using invocation traces, correctness, safety and cost.
Different Types of Wikis and When to Use Them
Code repositories, documents, and agent instructions answer different questions about a software system. This guide maps generated repository wikis, codebase analysis, RAG, linked knowledge wikis, and the Open Knowledge Format to help teams choose the right documentation architecture.
MCP Draft DCR Deprecation: What Client ID Metadata Documents Change
The MCP authorization draft deprecates Dynamic Client Registration as a compatibility fallback, not as an OAuth mechanism globally. Client ID Metadata Documents offer portable, origin-associated metadata, but do not authenticate a running public client. This article explains the operational trade-offs, localhost impersonation risks and metadata-fetch protections that remain.
MCP Client Registration Against Entra ID: The OAuth Proxy Pattern
An OAuth proxy can connect MCP clients to an Entra-backed service while keeping downstream registration separate from upstream application provisioning. This conceptual walkthrough explains the two authorization transactions, per-client consent, token validation and refresh limits that make the proxy a security-critical authorization server.
Lets Talk About Datetime Values in Cloud-Native Applications
Discussing the challenges of handling datetime values in cloud-native applications and best practices for ensuring consistency and clarity.
Understanding AWS IAM using a football analogy - Manchester City
Demystifying AWS Cloud IAM using the roles and strategies of a championship-winning team like Manchester City - a novel approach to understanding complex cloud security concepts
Understanding AWS IAM using a football analogy - Manchester City
Read Understanding AWS IAM using a football analogy - Manchester City on CRUD Flow.