It probably wouldn't hurt to set up Microsoft Clarity - it's a free solution that lets you see how people actually use your product and identify bottlenecks and pain points. It also has a “copilot ai” feature that can offer some suggestions (though it's just a copilot, so don't expect too much). But I’m sure that as soon as you see exactly what users are doing, you’ll be able to spot the problem areas.
So you end up with two parallel permission systems that contradict each other, and the Settings UI only controls one of them. It's not a bug, it's architectural debt that they've decided is cheaper to leave than to fix.
The policy makes sense as a liability shield, but it doesn't address the actual problem, which is review bandwidth. A human signs off on AI-generated code they don't fully understand, the patch looks fine, it gets merged. Six months later someone finds a subtle bug in an edge case no reviewer would've caught because the code was "too clean."
But "teammate" is a stretch. The failure mode is different from a human -- a person will tell you "I don't know how to do this," an agent will confidently do it wrong and you won't notice until something breaks in production. The supervision cost doesn't go away, it just changes shape.
The fact that OpenAI's pipeline had no minimumReleaseAge configured is surprising though. That's basically saying "run whatever npm published 5 minutes ago in a context that has access to my signing keys." For a company that size, with that attack surface, feels like this should've been caught in a security review.
I've been on Max20 for quite a while now, and I remember my transition process very well. Now I'm missing the Max20 subscription, and I’m thinking about buying a second account. I can’t say the problem is with Anthropic, because I really am using the service more and more. With the Pro subscription, I couldn’t afford to run two agents in a separate terminal that restart each other for hours on end. Or run research with 10–15 agents simultaneously, but this really boosts efficiency by a factor of several times, so yes, a second account is the way to go for me.
Borrow checker in a functional concatenative language is a wild combination. I write Rust for real-time audio and Elixir for the orchestration layer in the same project, so I deal with both worlds daily. In Rust the borrow checker saves you from data races but fights you on anything concurrent. In Elixir you just don't have shared mutable state at all, problem solved differently. Curious where Slap lands -- does it feel more like Rust's "prove to the compiler you're safe" or more like "the language just doesn't let you do the unsafe thing"?
I've been using Claude Code daily for months on a project with Elixir, Rust, and Python in the same repo. It handles multi-language stuff surprisingly well most of the time. The worst failure mode for me is when it does a replace_all on a string that also appears inside a constant definition -- ended up with GROQ_URL = GROQ_URL instead of the actual URL. Took a second round of review agents to catch it. So yeah, you absolutely can't trust it to self-verify.
We use ClickHouse for a trend detection pipeline and the agentic coding part resonates. Half my codebase was written with Claude Code at this point. The tricky bit is when the agent makes changes that look right but break some subtle assumption three files away. Curious how they handle that at scale with a codebase the size of ClickHouse.
Been building with MCP lately and security was always in the back of my mind. Right now I just trust whatever the server returns, which is... not great. Does this sit between the client and server as a proxy, or does it wrap the server itself? Also wondering about the latency overhead per tool call.
The money thing is real though. What helped me was starting to build stuff on the side before quitting. Shipped a couple of small projects, got some revenue trickling in, and at some point the side thing became more exciting than the day job. That's when leaving felt obvious, not scary.
Nice, I've been messing around with MCP servers lately too. One thing I ran into, Garmin's Connect API has pretty tight rate limits, something like 25 requests per 15 minutes if I remember right. Did you hit that? Also wondering if you're storing raw data in Postgres or just aggregated stuff. Because with sleep tracking you get a datapoint every 30 seconds, that adds up fast.
I play airsfot every Sunday it's the perfect reset. Equal parts sport, adrenaline, and pain from getting hit by those little plastic balls. But honestly, there's so much laughter that you forget the bruises. Highly recommend if you've never tried it.