DEV'S DAILY DIGEST

What Claude Code Can and Can't Do with Full Access Inside a Docker Sandbox

Claude Code can do more than suggest a fix. It can edit files, install dependencies, run tests, and start your application. But letting it finish a task on...

Beyond streaks and nudges: ethical gamification & AI design

Part 1 of 3 on designing systems that inspire rather than manipulate.Continue reading on UX Collective »

Jev: How to use it for better, faster, and cheaper user decisions in UX

Why designers need to stop reporting and start recommending at work

Sticky notes don’t help your team. They need your directionContinue reading on UX Collective »

Is Meta’s new AI agent easier to trust because it’s cute?

Muse comes with an avatar you design and a keyring gadget. Few people would hand Meta their passwords, yet it topped the US App Store.Continue reading on UX Collective »

AI skill atrophy: Are we forgetting how to think?

The hidden cost of outsourcing our thinking to AI.Continue reading on UX Collective »

The building was there first

A style’s real output isn’t what it makes. It’s the category it installs in whoever looks.Continue reading on UX Collective »

A Practical Guide To Naming Things

A practical guide to naming UI components, with useful resources, naming conventions, and structures. You’ll find more [useful...

Prompt as self-portrait, De-slopifying your designs, The strategic designer

The Engineering Anatomy of API Vulnerabilities: A Deep Dive into the OWASP API Security Top 10

Most security articles read like threat reports. They describe vulnerabilities from the outside looking in: what an attacker does, what the impact is, and how...

How to Encrypt PII in Data Pipelines While Keeping It Searchable

At Intuit, my team built a data pipeline that processed TurboTax e-filing data. This data needed to be made available for dashboards, analytics, and other...

API Authentication & Authorization: An Engineering Deep Dive into Mechanisms, Trade-offs, and Failure Modes

Every API has some form of authentication. But having authentication and getting it right are two completely different things. I've reviewed production...

How to Break the AI Coding Agent Fix Loop

You've likely seen this movie before: something breaks in an app you built with an AI coding agent. You ask the agent to fix it. It "fixes" it. But the bug is...

How to Use NestJS Observe: An Observability Handbook for Devs

Observability isn't a new problem, and NestJS is certainly not the first ecosystem to tackle it. But NestJS Observe is interesting because it asks a more...

How AI Is Changing Email Deliverability: A Technical Guide to Sender Reputation and Inbox Placement

Sending an email doesn't always mean it will reach the recipient's inbox. Sometimes, an email is sent successfully by an application but ends up in the spam...

How to Avoid JNI Crashes by Managing Local and Global References Correctly

Most JNI crashes don't come from complicated logic. They come from a small set of mistakes around object references: holding on to a reference after it has...

How to Submit a Quarterly Update to HMRC's Making Tax Digital API

Four times a year, every sole trader and landlord in Making Tax Digital (MTD) for Income Tax has to send HMRC a summary of their income and expenses. The...

How to Separate Operational Intent from the Executor

In my previous article, I argued that software automation needs a layer between operational intent and execution. The reason is simple: the specification...

Bounded delegation: How much authority should AI have?

How apps know us better than we do and influence our decisions

The taste paradox: why the skill everyone says matters is the one we’ve stopped building

Experience planes – the big 4: who, what, where and why of experiences

Recently, I was talking to a client and the issue of customer experience came up. They said “we do need to fix the customer experience.” Others nodded. And from that moment on, the...