home.social

Search

1000 results for “engineer”

  1. Protect your web application from common vulnerabilities with our practical checklist of OWASP Top 10 security fixes, updated for 2026.#devops #cloud #kubernetes #ai #software #coding #development #engineering #inclusive #community
    OWASP Top 10 Security Fixes
  2. I used to treat ChatGPT like a vending machine. Need a React hook? Drop a coin. Need a PR summary? Drop another. Every ask started from zero — stack, conventions, what “done” meant — and every reply drifted a little from how we actually ship.

    The waste wasn’t the tokens. It was re-explaining our frontend rules every single time, then cleaning up the same mistakes.

    So I stopped pasting one-offs and started treating prompts like code: named, versioned, and checked into the repo.

    One-off asks don’t compound


    A throwaway chat is fine for a throwaway question. Frontend work rarely is throwaway:

    • “Write a Modal” without our focus-trap / Escape / return-focus rules
    • “Add loading states” without our skeleton vs spinner convention
    • “Review this PR” without what AI should skip vs what a human owns
    • “Refactor this form” without our form library and error-message pattern

    You get something that compiles. You don’t get something that matches the last three PRs. The next person (or the next you) pays the tax again.

    What belongs in a prompt library


    I keep a small folder — prompts/frontend/ — not a novel. Each file is one job, one outcome shape.

    Mine look like this:

    prompts/frontend/
    pr-review-ai.md # what the model checks vs leaves for humans
    new-component.md # scaffold + a11y buckets + token rules
    design-token-change.md # changelog / RFC checklist before merge
    test-plan.md # real coverage vs fake green
    agent-ui-diff.md # component boundaries, no random token edits
    accessible-react.md # roles / keyboard / contrast report required

    If a prompt isn’t reused at least twice a month, it doesn’t earn a file. Sticky notes in chat stay sticky notes.

    The shape every prompt gets


    Same skeleton so humans and agents know where to look:

    # <job name>

    ## When to use
    One sentence. If it doesn’t match, don’t force it.

    ## Context to paste
    - Framework / router / form lib (or “read from repo”)
    - Design tokens source of truth
    - Related golden files (paths)

    ## Hard rules
    Bullet list the model must not violate.
    Prefer native HTML, keep tokens, no drive-by refactors, etc.

    ## Output format
    Numbered sections the reply must include.
    Missing a section = reject the turn.

    ## Done looks like
    Concrete acceptance — not “looks good.”

    The “output format” line is the whole game. Models fill schemas. They invent vibes when you don’t give one.

    From ChatGPT paste to agent / editor default


    Once the files exist, wire them where work actually happens:

    1. Cursor / Copilot / Claude project instructions — point at prompts/frontend/ or inline the two you use daily.
    2. PR bot / agent — load pr-review-ai.md as the system brief; humans still own product judgment.
    3. Slash or snippet — @new-component expands the scaffold prompt so nobody retypes it.
    4. CI-ish habit — if the agent reply skips a required section, treat it like a failed check and re-run with the same file.

    You don’t need a fancy prompt CMS. Markdown in git is enough. Review prompt changes in PRs the same way you’d review eslint config.

    A tiny migration story


    Week 1 I had twelve ChatGPT threads titled “modal again.” Week 3 I had six files and deleted half the threads.

    What changed in practice:

    • New Button / Modal / Combobox asks started from the same a11y report shape
    • Token edits stopped sneaking hex literals into components
    • AI PR comments stopped arguing about naming when the prompt said “leave naming to humans”

    Same models. Less re-prompting. The library held the team memory the chat UI kept forgetting.

    What not to put in the library


    • Product pitches and marketing copy (keep prompts about shipping UI)
    • One-shot debug sessions that will never recur
    • Entire style guides pasted twice — link the real doc instead
    • Secrets, private URLs, or customer data as “examples”

    A prompt library is DX infrastructure. If it reads like a blog draft, move it to the blog.

    Start with three, not thirty


    Tonight, pick the three asks you keep repeating. Write each as one markdown file with When / Rules / Output / Done. Drop them in the repo. Point your editor agent at that folder.

    Next time you open a blank ChatGPT box for a frontend task, open the matching file instead. Paste once. Reuse forever. That’s the whole upgrade — from one-off asks to a library your future self (and your agents) can actually find.#frontend #ai #dx #productivity #software #coding #development #engineering #inclusive #community
    From One-Off ChatGPT Asks to a Reusable Frontend Prompt Library

  3. This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2

    Orderly: An AI WhatsApp Order-Taker That Refuses to Guess
    Small shops often receive customer orders through WhatsApp like:

    “2 kg rice, 1 litre oil, and 1 kg sugar.”

    But real messages can be much messier — Telugu + English, corrections, unclear quantities, or voice notes.

    The difficult part isn't just understanding the message.

    The real problem is knowing whether the AI understood the complete order correctly.

    That's why I built Orderly.

    What I Built
    Orderly is an AI-assisted WhatsApp order-taker for small shops.

    It converts messy text and voice orders into structured orders and checks them before confirmation.

    The core principle is:

    AI extracts. Code verifies. Catalog decides. Human confirms when evidence is insufficient.

    If the order is clear and the evidence is sufficient, Orderly can mark it CONFIRMED.

    If something is unclear, missing, incomplete, or unsafe to verify, it returns NEEDS_REVIEW instead of guessing.

    Demo
    🎥 Watch the Orderly Demo Video

    The demo shows Orderly processing customer orders, validating extracted items, and handling cases where confirmation should not be automatic.

    Video Transcript
    Hi, this is Orderly, an AI-powered WhatsApp order-taker for small shops.

    It handles messy text and voice orders, including Telugu-English messages.

    The key principle is:

    AI extracts. Code verifies. Catalog decides. Human confirms when evidence is insufficient.

    Orderly checks the extracted items against the catalog and validates the customer's request.

    If the evidence is sufficient, the order can be CONFIRMED.

    If anything is unclear or incomplete, Orderly returns NEEDS_REVIEW instead of guessing.

    The goal is simple:

    Never falsely confirm an incomplete order.

    Try Orderly, explore the code, and share your feedback or ideas for improving safe AI-powered ordering for small shops.

    Code
    🔗 GitHub Repository

    Orderly is built as a small Python application with:

    Web interface
    CLI
    Deterministic validation
    Catalog checks
    Automated safety tests
    Fake extractors for deterministic adversarial testing
    How I Built It
    The pipeline is:

    Customer message → transcription → AI extraction → deterministic validation → catalog verification → confirmation/review

    For voice orders, speech is transcribed before extraction.

    The AI produces structured order information, but the application does not treat the AI response as proof that the extraction is complete or correct.

    The deterministic code checks the extracted information against the customer's message and the shop catalog.

    This separation is intentional.

    An LLM can misunderstand a message, hallucinate an item, or simply miss something.

    So the system is designed so that:

    AI proposes. Code verifies. Evidence determines whether confirmation is allowed.

    Safety First
    One of the biggest risks I focused on was customer-item omission.

    For example, if a customer says:

    “2 kg rice and 5 litres sunflower oil”

    but the AI extracts only:

    “2 kg rice”

    a normal pipeline might accidentally confirm the incomplete order.

    Orderly is designed to treat this as a NEEDS_REVIEW situation rather than assuming that the extracted list is complete.

    I specifically tested adversarial cases involving:

    Multiple products with one item omitted
    Three products with one or more items omitted
    Middle-item omission
    Final-item omission
    The same product with different sizes
    Corrections
    Mixed Telugu + English orders
    “And also” constructions
    Long messages containing unrelated text
    The goal is not to maximize the number of CONFIRMED orders.

    The goal is to avoid falsely confirming an incomplete order.

    Why Open Innovation Matters
    This project uses open-source AI because useful AI systems should not always require a closed cloud service.

    Open models and open-source tools make it possible for developers to experiment, inspect the pipeline, run models locally, and build systems for specific real-world problems.

    For a small-shop use case, local and open tooling can also provide more control over how customer data is processed.

    The important lesson for me is that open AI becomes more useful when it is combined with traditional deterministic software rather than being trusted blindly.

    My Agent Session
    I used AI-assisted development to inspect the project, improve the implementation, create adversarial safety tests, investigate edge cases, and verify the application.

    The development process focused heavily on finding cases where an AI extraction could appear correct while still being incomplete.

    That led to a stronger design principle:

    Never confuse a successful AI response with proof that the customer's complete request was understood.

    Testing
    The automated test suite contains 156 tests: 155 passed, 0 failed, and 1 expected failure (xfail).

    Orderly automated test suite showing 156 tests collected, with 155 tests passed, 0 failed, and 1 expected failure (xfail). The terminal output demonstrates the project's deterministic safety, validation, and adversarial testing results.

    The expected failure is intentional. It documents a known limitation involving an unknown product such as bellam when the extractor completely omits that product and the customer message does not provide enough recognizable evidence for the completeness checker to detect the omission.

    The limitation is documented rather than hidden.

    The tests are primarily deterministic safety and validation tests. They use controlled/fake extraction behavior to test whether the application fails safely when extraction is incomplete.

    Real-Gemma validation was not performed in the current environment, so these test results should not be interpreted as evidence of real-model extraction quality.

    Current Limitations
    Orderly is a prototype, not a production-ready autonomous ordering system.

    Completeness is difficult to guarantee perfectly for:

    Completely unknown products
    Ambiguous language
    Speech-recognition errors
    Unusual phrasing
    Product names appearing in unrelated text
    Corrections that are difficult to resolve
    Messages where the customer's intent cannot be reliably identified
    A particularly important limitation is that a completeness checker cannot mathematically prove that an LLM extracted every possible customer intent from arbitrary natural language.

    Therefore, the safest behavior is to request human confirmation whenever sufficient evidence is unavailable.

    Because of this documented limitation, Orderly should not be considered production-safe for unattended autonomous ordering.

    Final Thoughts
    Orderly started as an AI order-taking idea, but the more important lesson became verification.

    AI is good at understanding messy human language.

    Code is better at enforcing deterministic rules.

    Putting the two together creates a safer system than relying on either one alone.

    AI extracts. Code verifies. Catalog decides. Human confirms when evidence is insufficient.

    The most important design decision was not making the AI say CONFIRMED.

    It was making sure that when the system cannot establish that the customer's complete request is represented, it refuses to guess.

    Try Orderly, explore the code, and share your feedback or ideas for making AI-powered ordering safer for small shops.

    devchallenge #weekendchallenge #hf26challenge #opensource #ai #python#devchallenge #hf26challenge #software #coding #development #engineering #inclusive #community
    Orderly: An AI WhatsApp Order-Taker That Refuses to Guess

  4. Comprehensive cloud GPU pricing audit for AI training and fine-tuning. Compares hourly rates for NVIDIA H100, A100, and RTX 4090 across RunPod, Lambda Labs, AWS, and Vast.ai with egress fee modeling.#cloud #gpu #ai #devops #software #coding #development #engineering #inclusive #community
    Cloud GPU Pricing Guide (2026): RunPod vs. Lambda vs. AWS vs. Vast.ai
  5. In September 2026, a founder posted on r/SaaS that Google was not ranking their new site even though they had done the "basic SEO" work: meta titles, descriptions, indexing. Search Console showed 159 impressions and 1 click in 28 days, with an average position of 48. One of the most useful replies pointed out that people only search an app's name once they already know it; the real demand sits one step earlier, in someone describing the job they want done.

    That is the core problem with keyword research for a first SaaS. If you built your app with Cursor, Claude Code, Lovable, Bolt, Replit or v0, you probably wrote pages about your product, in your words. Customers type their problem, in their words. This guide shows you how to find those words with free tools, check which ones a brand-new site can win, and turn them into a short list of pages to write.

    Quick glossary


    • Keyword (or query): the exact words someone types into Google, like "how to send invoice reminders".
    • Search intent: what the person actually wants. To learn something, compare options, buy something, or go to a specific site.
    • Search volume: roughly how many times per month people search a keyword. Every tool estimates this differently.
    • Keyword difficulty (KD): a score from a tool that guesses how hard it is to reach page one. It is a guess, not a rule.
    • Long-tail keyword: a longer, more specific search with fewer searches, like "late payment reminder email template for freelancers". Easier for new sites.
    • SERP: search engine results page. The page Google shows after you search.
    • Impressions: how many times your site appeared in Google results, even if nobody clicked. You see this in Google Search Console.


    Step 1: Write down your customers' problems in their words


    Do not open a keyword tool yet. Start a text file of phrases real people use to describe the problem your app solves. Look in:

    • Your support emails, chat messages and signup survey answers.
    • Reddit threads where your users hang out. Search for the problem, not your product category.
    • Posts and replies on X complaining about the problem.
    • 1-star to 3-star reviews of bigger competitors. Complaints are full of search phrases.

    Copy phrases exactly. This guide uses a hypothetical example, an invoice tool for freelancers, whose notes might contain "client keeps paying late", "how do I remind a client to pay without sounding rude" and "invoice template that adds tax automatically".

    An AI assistant can pull phrases out of messy notes. Just do not let it invent data:

    Below are raw notes from support emails, Reddit threads and reviews about
    [PROBLEM YOUR APP SOLVES]. My customers are [WHO THEY ARE].

    1. Extract every distinct phrase a customer used to describe their problem
    or goal. Keep their original wording.
    2. Add 10 more phrases a beginner in this audience might type into Google,
    and mark these clearly as "AI guess".
    3. Do NOT include search volumes, difficulty scores or any numbers.
    I will check demand myself with real tools.

    Notes:
    [PASTE NOTES HERE]

    Aim for 20 to 40 phrases. These are your seed keywords.

    Step 2: Expand your seeds with free tools


    Now check what people actually type. All of these are free as of October 2026:

    • Google autocomplete: type a seed into Google slowly and note the suggestions. Google's help page says predictions reflect real searches, but they also depend on your language, location and past searches. Use a private window.
    • People Also Ask and related searches: the question box on the results page and the related searches near the bottom. Each question is a possible section or page.
    • Google Trends: compare two or three phrases to see which is more popular and whether interest is growing. Google says Trends shows relative interest scaled from 0 to 100, not search counts, and very low-volume terms show as 0. So "0" does not always mean nobody searches it.
    • Google Keyword Planner: free inside a Google Ads account. Google's help says you must enter billing information to use "Discover new keywords", but you do not need to run a campaign. Expect volume ranges like "100-1K" instead of exact numbers if you are not spending; Google introduced this limited view for lower-spend accounts, and Google Ads community experts still describe it the same way. Ranges are fine for comparing ideas.
    • Bing Webmaster Tools Keyword Research: free with a Bing Webmaster Tools account. Enter a root keyword and get related keywords, question keywords and the top ranking URLs, filtered by country, language and device for any period in the last six months. The numbers are Bing data, so use them to compare phrases, not to predict Google traffic.
    • Ahrefs Free Keyword Generator: free, no account. Enter a seed and get keyword ideas, including questions, with estimated volumes.
    • Semrush free account: 10 keyword research queries per day, no credit card, per Semrush's own free-account page. Enough to check a shortlist.

    Add everything relevant. In the hypothetical invoice example, you might add "how to politely ask for payment" and "what to do when a client doesn't pay". A list of 50 to 150 phrases is normal; the next steps cut it down.

    Step 3: Check search intent by looking at the results page


    A keyword tool cannot tell you what Google thinks the searcher wants. The results page can. For each promising phrase, search it in a private window and look at the top 10 results:

    • Mostly blog posts and guides? The intent is learn. You need a helpful article.
    • Mostly "best X tools" lists? The intent is compare. You need a list or comparison page.
    • Mostly product homepages and pricing pages? The intent is buy. Your landing or feature page fits.
    • Mostly templates, calculators or generators? People want a tool or template, not an essay.

    Write the intent next to each keyword. If Google shows templates and you planned a long essay, the essay will struggle to rank.

    Step 4: Judge whether a new site can compete


    Most beginners skip this. A brand-new domain has no history and few links, so it cannot beat huge sites on broad terms. On the same results page, look for these signals.

    Good signs (opportunity):

    • Reddit, Quora or forum threads in the top 10. Google could not find a great dedicated page.
    • Small blogs, personal sites or tiny tools ranking.
    • Results that only half answer the query or are outdated.

    Bad signs (skip for now):

    • Every result is a big brand, a huge publisher or a well-known tool.
    • The top results are recent, excellent guides that answer everything.

    Treat keyword difficulty as a hint; the SERP is the real test. Mark each keyword "go", "maybe" or "skip".

    Step 5: Pick long-tail problem keywords and map one main keyword per page


    Now pick your first 5 to 10 pages. Choose keywords that are:

    1. Marked "go" in Step 4.
    2. Close to your product. Someone searching it has the problem you solve.
    3. Specific. Long-tail problem phrases beat broad category words for a new site.

    For the hypothetical invoice tool, "invoicing software" is a skip (big brands everywhere), while "payment reminder email template for freelancers" could be a go if forums and small blogs rank.

    Give each page one main keyword and a few close variations. If two keywords show almost the same top 10 results, they belong on the same page. If the results are different, they need separate pages.

    AI can draft this grouping if you give it your real data:

    Here is my keyword list with the intent and the "go/maybe/skip" verdict I
    noted from looking at Google's results myself:
    [PASTE ROWS: keyword | intent | verdict | volume range if I have one]

    Group these into page ideas:
    - One main keyword per page, plus up to 5 close variations.
    - Put keywords together only if they share the same intent.
    - Suggest a page type (guide, template, comparison, landing page).
    - Ignore anything marked "skip".
    - Do NOT invent or estimate search volumes or difficulty. Use only the
    numbers I gave you; leave blanks blank.
    Output a table: page idea | main keyword | variations | page type | why.

    Check its work against the real results pages, then keep everything in one sheet:

    keyword,source,intent,verdict,volume_range,main_or_variation,target_page,status,date_published,gsc_impressions_28d,gsc_avg_position
    payment reminder email template for freelancers,autocomplete,learn/template,go,(from your tool),main,/templates/payment-reminder-email,draft,,,
    how to politely ask a client for payment,people also ask,learn,go,(from your tool),variation,/templates/payment-reminder-email,draft,,,
    invoicing software,keyword planner,buy,skip,(from your tool),,,,,,

    The rows above are hypothetical. Fill in volume ranges from Keyword Planner, Bing or another tool, and leave the Search Console columns empty until Step 7.

    Step 6: Write each page to answer the query


    You are not writing "SEO content". You are writing the best answer to one question. A simple checklist for each page:

    PAGE CHECKLIST
    [ ] Main keyword (or a natural version of it) in the title and the H1
    [ ] First 2-3 sentences answer the question directly
    [ ] Format matches what Google shows (template, steps, list, tool)
    [ ] Covers the People Also Ask questions for this keyword
    [ ] Includes something real: a screenshot, an example, your own steps
    [ ] Clear, specific meta description written for humans
    [ ] Links to 1-2 related pages on your site, and from your homepage or blog
    [ ] Soft, relevant mention of your product where it actually helps
    [ ] Page is indexable (not blocked, not noindex) and in your sitemap

    If AI drafts the page, give it your notes, real examples and the questions you collected, then edit hard. A page that sounds like every other AI article adds nothing new.

    For the hypothetical invoice tool, the reminder page would open with a ready-to-copy template, add first, second and final reminder versions, and only then mention the app can send them automatically.

    Step 7: Measure in Google Search Console and iterate


    Wait a few weeks after publishing; new pages take time to be crawled. Then open Google Search Console, go to Performance, and use:

    • Queries tab: the actual searches where your site appeared. Google's help explains you can switch metrics on for clicks, impressions, CTR and average position.
    • Pages tab: click a page, then open Queries to see which searches it shows up for.
    • Date range: the default is the last three months. Compare the last 28 days with the previous period.

    What to look for:

    • Queries with impressions but position 8 to 20: improve that page. Add the missing section, make the answer clearer, link to it from other pages.
    • Queries you never planned for: these are new keyword ideas from real data. Add them to your sheet.
    • A page with zero impressions after several weeks: check it is indexed, then check the intent again in Step 3.

    Update the sheet once a month and pick your next batch of pages from what you learn.

    Common mistakes


    • Starting with your product category. Broad category words are owned by big brands. Start with problem phrases.
    • Trusting one volume number. Every tool estimates differently, and Keyword Planner often shows only ranges. Use numbers to compare, not to predict traffic.
    • Skipping the results page. Intent and competition are visible in the SERP, not in a spreadsheet.
    • Letting AI invent volumes. If an AI gives you exact search numbers without a data source, they are made up.
    • One keyword per blog post, ten posts on the same topic. Similar keywords with the same results belong on one strong page.
    • Giving up after two weeks. New sites need time.


    Your action summary


    1. Collect 20 to 40 customer phrases from support emails, Reddit, X and competitor reviews.
    2. Expand them with autocomplete, People Also Ask, Trends, Keyword Planner, Bing and one free keyword generator.
    3. Search every promising phrase and write down the intent.
    4. Mark each keyword "go", "maybe" or "skip" based on who ranks.
    5. Pick 5 to 10 long-tail problem keywords and give each page one main keyword.
    6. Write each page to answer the query in the format Google already shows.
    7. Check Search Console Performance after a few weeks and plan the next batch.

    You do not need an expensive SEO tool to find your first keywords. You need your customers' words, an honest look at the results page and one small spreadsheet, so pick five problem phrases today and write the page that answers the first one this week.#seo #saas #beginners #marketing #software #coding #development #engineering #inclusive #community
    How to Find Keywords Your New SaaS Can Actually Rank For: A 7-Step Free Keyword Research Guide for Beginners

  6. Later: snap a receipt, letter or poster. Open-weight Gemma 4 finds the last sensible day, a Temporal workflow waits weeks for it, and you get one nudge. 35/35 deadlines right.#devchallenge #hf26challenge #gemma #temporal #software #coding #development #engineering #inclusive #community
    Google's free Gemma failed 35% of my calls. My sloth-paced reminder app didn't lose one.
Share on Mastodon

Enter the server where you have an account.