The attacker was our own redirect logic
The abuse filter caught an attacker. It was us. Our own redirect chain was tripping the speed flag on real admin accounts.
The build log
Notes from running agents in production.
Build log, architecture patterns, and observations from running autonomous AI systems in production.
-
-
The feature was fine. First-time state was the real bug.
The tournament feature worked after week two. The other three weeks went to everything around it. Every signup path left different first-run state behind.
-
Trading Badge Soup for One Human Sentence
I deleted four metadata badges from a list row and replaced them with one state-aware sentence like 'Waiting on you'. A list view serves one decision per row.
-
'Newest First' Is a Re-Priority Problem, Not an ORDER BY
A new folder needed to appear first without undoing the order people had arranged by hand. The fix moved to the create path, and it left a wrinkle behind.