Posts

Why Your AI Coding Tool Choice Matters for Your Career I’ve been watching hiring patterns shift over the past 18 months, and one thing is clear: the AI coding tool you use has become a career signal whether you like it or not. In 2024, listing “Copilot” on your resume was a curiosity. In 2025, it was table stakes. In 2026, hiring managers are actively screening for which tools you use and how you use them. The Stack Overflow 2025 survey reported that 84% of developers use AI coding tools, with 47.1% using them daily. When nearly half the industry uses these tools every single day, the question is no longer “Do you use AI?” — it’s “Which tools do you use, and are you any good with them?” ...

You demo an AI agent to your team. Fifty runs, zero failures. Everyone’s impressed. You deploy to production. Within a week, it’s hallucinating tool calls, getting stuck in loops, and your Slack is full of “the agent did something weird” messages. I’ve been there. Multiple times. And I’ve spent the last year digging into why this happens and what actually works to fix it. The short answer: your agent isn’t broken — your testing methodology is. Single-digit demos and pass/fail judgments hide a massive variance problem that only emerges under statistical scrutiny. Gartner predicts over 40% of AI agent projects will fail by 2027, and in January 2026, a prompt injection in a customer support agent processed a $47,000 fraudulent refund. These aren’t edge cases — they’re systematic failures that most teams aren’t testing for. ...

You demo an AI agent to your team. Fifty runs, zero failures. Everyone’s impressed. You deploy to production. Within a week, it’s hallucinating tool calls, getting stuck in loops, and your Slack is full of “the agent did something weird” messages. I’ve been there. Multiple times. And I’ve spent the last year digging into why this happens and what actually works to fix it. The short answer: your agent isn’t broken — your testing methodology is. Single-digit demos and pass/fail judgments hide a massive variance problem that only emerges under statistical scrutiny. Gartner predicts over 40% of AI agent projects will fail by 2027, and in January 2026, a prompt injection in a customer support agent processed a $47,000 fraudulent refund. These aren’t edge cases — they’re systematic failures that most teams aren’t testing for. ...

Every six months, someone declares RAG dead. The argument is always the same: “Now that GPT-4.1 has 1M tokens and Gemini 2.5 Pro handles 2M, why bother with retrieval? Just dump everything into context.” I’ve been building production RAG systems since the LlamaIndex 0.5 days, and I can tell you: bigger context windows didn’t make RAG obsolete. They made the problem more interesting — and harder to get wrong. Here’s what the 2026 data actually shows, and what techniques deliver real results when you’re building a retrieval system that needs to work in production. ...

I’ve been watching AI coding assistants write the same security bugs for two years. Not random bugs — the same predictable, systematic auth anti-patterns, over and over. So I built a linter that catches them before they ship. Here’s what I found when I scanned 132 AI-generated repositories: 27% had at least one authentication security finding. 18% had a HIGH+ severity finding. The most common pattern — non-constant-time secret comparison — showed up in 13% of repos. That’s not a coincidence. That’s a pattern. ...

I spent 30 days letting Claude Code write nearly all of my production code. The experiment was simple: whenever I needed to build something, I described it in natural language, reviewed the output, and shipped it. No manual typing of functions, no debugging by hand, no writing tests from scratch. I wanted to see what happens to a developer’s skills when the AI does the implementation. The short version: I shipped more in 30 days than I normally would in three months. But I also caught myself forgetting how to debug something I would have fixed in five minutes a year ago. ...

I’ve been running production AI agent systems for over a year now, and the single biggest shift I’ve seen in 2026 is this: the best agents don’t work alone. The teams getting real leverage out of AI aren’t the ones with one super-agent — they’re the ones running five, ten, or twenty specialized agents that talk to each other. This isn’t a prediction. It’s already happening. Meta’s HyperAgents paper (arXiv:2603.19461) proved that multi-agent systems can solve problems no single agent can touch. A production field study from Calx showed six agents building 82,000 lines of code in 20 days for $250. And the infrastructure to make this work — protocols, SDKs, open-source orchestrators — is already here, just not widely adopted yet. ...

What Is WebMCP? The W3C Standard for Agent-Aware Web Pages WebMCP (Web Model Context Protocol) is the W3C standard for making web pages speak directly to AI agents. Instead of scraping HTML, parsing DOM trees, or hoping your CSS selectors survive the next redesign, a WebMCP-enabled page exposes its capabilities through a standard JavaScript API: document.modelContext.registerTool(). The agent calls document.modelContext.getTools() to discover what the page offers, then invokes those tools by name with typed parameters. ...

The Two Protocols Trying to Define How AI Agents Buy Things By mid-2026, two competing standards are vying to become the default way AI agents handle commerce: Google’s Universal Commerce Protocol (UCP) and OpenAI/Stripe’s Agentic Commerce Protocol (ACP). Both solve the same fundamental problem — how does an AI agent discover products, negotiate a purchase, and complete a transaction on behalf of a human — but they approach it from very different angles. ...

What Is llms.txt and Why It Matters for AI Agents in 2026 llms.txt is a plain-text file you place at your website root that tells AI agents and large language models which pages matter most. It’s the web’s first standardized machine-readable surface designed specifically for AI consumption — not for human visitors, not for search engines, but for the growing fleet of automated agents crawling the web. The format is dead simple: a markdown file with a brief site description, a list of essential links with one-line descriptions, and optionally a reference to an llms-full.txt that embeds the complete content of those pages. Anthropic proposed the standard in late 2024, and by mid-2026 it’s shipped by Stripe, Cloudflare, Vercel, Mastercard, ElevenLabs, and hundreds of other sites. ...