Thoughts on building software that lasts
Insights on web development, design, Laravel, the TALL stack, and building software that matters.
Cloudflare Turns On Visitor Tracking By Default. Here's How To Check.
Cloudflare quietly started enabling Web Analytics on free domains, injecting a tracking beacon without an opt-in step. Here's what site owners should verify.
An AI Agent Leaked Private Repos From a Public Comment. The Same Trap Is in Most Agent Setups.
GitHub's AI agent leaked a private repo because of a public comment. It's the lethal trifecta, and the same trap sits in most agent setups.
Your AI Agent Can't Tell Who's Talking. That's Why It Gets Hijacked.
New ICML 2026 research explains why prompt injection is OWASP's #1 LLM risk and can't be patched. Here's what it means before you wire an agent into your business.
One AgentAction, Two Callers: Bridging Laravel AI Actions to MCP
laravel-ai-action v1.0.4 ships an opt-in MCP bridge so the same AgentAction class that handles a Filament form can answer a Claude Desktop tool call — without touching the action itself.
What Is an MCP Server? A Plain-English Guide for Business Owners
MCP servers let AI assistants like Claude talk directly to your business data and tools—in real time. Here's what that means, why it matters, and whether you need one.
The Client Brief Template
A one-page PDF that helps you clarify your project before you talk to any developer. Covers goals, audience, scope, budget, and timeline. Fewer surprises, better outcomes.
Have a project ready to start?
Whether you need a full-stack application, a design refresh, or a technical partner who gets it — we'd love to hear about it.