Rate limiting isn't an npm dependency — it's an abuse policy. Before copying middleware, you need to define what asset you're protecting, what abuse pattern you expect, and what a false positive costs you. A guide with a decision matrix, real gotchas, and observability for Next.js.
Jun 22 2026 · 9′ · Tutorials · TypeScript · nextjs
Running the OWASP LLM Top 10 as a real audit is a completely different experience than reading it as a checklist. I ran it against my TypeScript agent stack with system prompts, MCP tools, and Cline — and the findings were uncomfortable.
Jun 20 2026 · 9′ · Tutorials · TypeScript · LLM
Formal methods keeps surfacing on the technical radar as the solution the industry ignored. My read: the problem it points to is real, but the recipe floating around omits costs that change the equation entirely.
Jun 15 2026 · 9′ · Opinion · TypeScript · sistemas distribuidos
The most common mistake when implementing MCP tools is coupling them to the provider's SDK. The spec exists to prevent exactly that. A practical architecture guide: the input/output contract that makes a tool work across Claude, GPT, and local models without rewriting anything.
Jun 10 2026 · 8′ · Tutorials · TypeScript · LLM
Two weeks using Cline as an autonomous coding agent on a TypeScript project. What tasks I delegated, where it screwed up, how it compares to Claude Code, and which workflows I'd never hand over to it. Architecture-grade analysis, not hype.
Jun 07 2026 · 11′ · Tutorials · TypeScript · developer tools
Auth tutorials show you the happy path. The real problems in digital identity show up in revocation, state-change propagation, and the trust model. A decision guide from the inside.
May 30 2026 · 9′ · Tutorials · backend · seguridad
A system prompt isn't documentation for the model — it's a contract. After several redesigns, I landed on a format with fixed sections, explicit limits, and dynamically injected context. Here's what survived and why.
May 29 2026 · 9′ · Tutorials · TypeScript · produccion
Comparing Themis with Web Crypto API is not academic: it changes bundle size, threat model, key rotation, and where each responsibility should live. The tradeoffs are less obvious than they look.
May 09 2026 · 9′ · Experiments · TypeScript · node.js
Spring Boot works very well in production, but its defaults do not always fit PaaS constraints, tight memory, and real observability. These are the points worth reviewing before trusting the initial setup.
May 09 2026 · 10′ · Experiments · Performance · backend
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
210 articles published