01 — Writing

Notes from the build.

Writing to learn — thoughts on the tools, standards and ideas I'm exploring as I build.

Latest

The Hidden Cost of AI Coding Agents: Context, Retries, and Verification

The price of an AI coding agent isn't $/token — it's the total cost of getting a correct, tested, reviewable change. New 2026 research shows the same task can vary 30× in cost, and context files can add 20% for no gain. A framework for measuring cost per verified change.

22 Oct 2026 · 7 min read

AI Can Find Vulnerabilities, But Who Verifies Them? A Practical Guide to AI Security Scanning

15 Oct 2026 · 8 min

AI vulnerability scanners now find bugs faster than humans can confirm them — Anthropic's own OSS Scanner ships model-generated findings without human review. Here's how to tell a real, exploitable defect from a false positive, with a repeatable triage workflow.

securityaiappsecnodejssoftware-engineering

Node.js 26.10 Explained: New APIs, Practical Examples, and What to Adopt

4 Oct 2026 · 8 min

Node.js 26.10 added crypto.parsePKCS12(), fs.openAsBlobSync(), and a sliding-window latency histogram. What each one solves, a working backend example for all three, and whether to upgrade now.

React 19.3 Explained: View Transitions, Fragment Refs, Trusted Types and What Actually Matters

24 Sept 2026 · 7 min

React 19.3 shipped View Transitions and Fragment Refs as stable, plus browser(), Trusted Types, and Context in Server Components. A feature-by-feature walkthrough — and an honest verdict on what to actually adopt.

reactnextjsfrontendjavascriptweb-development

AI Can Write the Code. Who Is Responsible for Proving It Works?

21 Aug 2026 · 8 min

AI made writing code cheap. It didn't make proving the code correct any cheaper — it made it the bottleneck. On verification, accountability, and who owns the merge button in 2026.

aicode-reviewsoftware-engineeringai-agentsdeveloper-experience

TypeScript 7.0: Why a 10× Faster Compiler Changes the Developer Experience

13 Aug 2026 · 13 min

TypeScript's compiler was ported to Go and it's roughly 10× faster. How it works, what changes for CI, monorepos, and your editor — plus real benchmarks from my 203k-line Next.js monorepo.

typescriptjavascripttoolingperformancebenchmark

Model Context Protocol (MCP): The Standard That Is Reshaping AI Applications

5 Aug 2026 · 13 min

One open protocol between AI agents and every tool, API, and database — what MCP solves, how to build a server in Node.js, and how to keep it secure.

model-context-protocolmcpnodejsai-agentsagentic-ai