Blog

Practical notes on AI agents, Laravel/Vue systems, DevOps, developer tools, and software decisions that need to survive maintenance.

ai-agents · October 10, 2026 · 13 min read

A Withheld Plugin Result Is Not the Tool Never Ran

A denied tool with no result in chat is not proof the tool never ran. Print withheld plugin result versus never ran versus the named Claude Code owner before you file the wrong ticket.

devops · Oct 9 · 14 min

A UNC Path Read Is Not a Local Allow

A quiet Read on a network share after you approved a local folder, or after auto mode, is not proof always-ask is off. Print UNC versus local versus the named Claude Code owner before you file the wrong ticket.

software-engineering · Oct 8 · 14 min

A Leftover Allowed-Tools Rule Is Not You Still in Plan Mode

A skill tool that still runs after you leave plan or auto is not proof the mode never changed. Print leftover allowed-tools, the current mode, and the named Claude Code owner before you file always-ask-broken.

developer-tools · Oct 7 · 13 min

A Repeated Reply ID Is Not a Second Approval

A phone yes that reuses a reply ID is not a second human allow. Print the ID, the open request, and the named Claude Code owner before you file always-ask-broken.

tutorials · Oct 6 · 14 min

An Allowed-Mail List Is Not a Cloudflare Account

A trycloudflare.com URL with --allowed-mail is email OTP on a Quick Tunnel, not a Cloudflare account on either side. Print allowed-mail, account, and the named Tunnel owner before you file Access-broken.

ai-agents · Oct 5 · 15 min

A Nested Deny Is Not a Mod Approval

A user-installed mod that approves one nested piece of a compound shell is not proof deny is off. Print the nested rule, the approval source, and the named Claude Code owner before you file allow-broken.

developer-tools · Oct 4 · 13 min

A 40-Character ghs_ Check Is Not a Valid App Token

A 40-character check on a ghs_ string is not proof the GitHub App token is invalid. Print length, opacity, and the named App owner before you file a broken-auth ticket.

software-engineering · Oct 3 · 14 min

Print the Redirect Before You File Always-Ask Off

A missing always-ask prompt on a dangerous rm is not proof always-ask is off. Print the redirect, the prompt, and the named Claude Code owner before you file the ticket.

devops · Oct 2 · 13 min

A Laravel/AI Lockfile Line Is Not a Patched Fetch Client

Seeing laravel/ai in composer.lock is not proof the chat fetch client is patched. Print the lockfile line, the fetch-client field, and the named Laravel owner before you file an all-patched ticket.

ai-agents · Oct 1 · 13 min

Sandbox Auto-Allow Is Not a Retry Tax on Equals in Inline Scripts

An every-run prompt on python3 -c is not proof that sandbox auto-allow is off. Print the equals matcher, the auto-allow setting, and the named Claude Code owner before you file an auto-allow-broken ticket.