Archive

AI Engineering

Systems, agents, evals, and applied AI notes.

Stop Leaking Secrets: How to Catch Security Flaws Before Your Pull Request

Finding security vulnerabilities and exposed API keys during pull request reviews or CI/CD pipelines causes unnecessary rework and security risks. This guide explains how to implement "Shift-Left Security" by running static application security testing (DevSkim) alongside dedicated secret scanning (Gitleaks) directly on your local workstation using Git pre-commit hooks. By catching insecure coding patterns and credentials the moment you commit, you eliminate awkward PR reviews and prevent leaks before they ever enter Git history.

From Lost Paper Receipts to One-Tap Profit: How I Built a Custom App for a Cab Driver

Independent taxi drivers juggling multiple aggregators like Uber, Ola, Rapido, and offline private bookings face daily accounting chaos, often relying on paper slips that get misplaced. This case study documents the end-to-end development of SD Travels (Driver Portal)—a lightweight, driver-centric mobile app engineered to deliver instant net-profit visibility, quick single-tap entries for fares, CNG refills, and maintenance, and reliable offline-first local data persistence. Within its first week of real-world use, the app completely eliminated month-end bookkeeping guesswork and provided effortless, real-time daily profit tracking

The AI Code Review Bottleneck Nobody Warned Us About

AI coding tools have made writing an app faster than ever, but that speed didn't remove the bottleneck — it just moved it downstream to code review. This post breaks down why AI-generated code tends to skip architecture and testing by default, how that shows up as cascading production failures, and why the actual engineering work now happens at review time instead of at the keyboard.

The Rise of Agent Harness Engineering

Why the Model Doesn't Matter (As Much As You Think): The Rise of Agent Harness Engineering the transition from vibe coding to the more rigorous discipline of harness engineering in the development of AI agents. While vibe coding allows creators to build software through natural language and "vibes," it often lacks the stability required for complex, production-grade systems. To address this, harness engineering provides a structured software infrastructure—the agent harness—that manages tool use, memory, and state persistence outside of the model's reasoning.

Building AI Chatbots with Python

Master chatbot development from scratch using Python, NLP, OpenAI API, and modern frameworks. Learn to build intelligent conversational AI that understands natural language and provides meaningful responses.