CTO @AgencyHandy Building NoBurn.dev & ApiDiffGuard. Previously OneThread. AI agents, dev tools, SaaS. Founder. Football on weekends.

True romance is them bringing you a snack without being asked and you immediately sharing half even though you didn’t want to. 🤒
17
Proof that the view count metric is completely lying to you. Reached 46 verified accounts in 3 days, but the main dashboard says 3 impressions. If you think your content is dead because of low numbers, you need to check this hidden metric immediately.. Are you noticing your verified reach outperforming your public impressions too? Let me know what you're seeing in the replies. If you want to join a small group of us tracking these daily pattern changes, drop a "Metrics" below and I’ll DM you an invite.
X said I’m a few steps away from getting paid. The steps: 497 verified followers and 499,999 impressions. I currently have 3 and 1. Be honest, is this a monetization program or a hostage situation?
28
The support agent had one job: order 18442, $49, already delivered. It refunded it. The ticket was still open, so it refunded it again, then emailed the customer about both. We found out from the customer. Nothing in that run said stop. These are the edges that would have. 1) Kill switch. It will not agree it should stop. On the second refund attempt, tool access is already gone. 2) Scoped permissions. It can only break what you gave it. Drafting a reply is fine. Billing and outbound mail are not. 3) Human gates. Some things you cannot undo. A migration waits for a named person. 4) Autonomy levels. Opening a PR can be automatic. Merging to main cannot. 5) Intent and non-goals. "Clear the queue" is how it invents a second refund. "One refund, do not email the customer" is a job. 6) Acceptance checks. A running demo is not done. Keyboard path, duplicates, and the error state have to pass. 7) Sandbox. First draft fails somewhere cheap. Copied database. No live payments. Order 18442 never hits the real ledger. 8) Audit trail. After the double refund you need the agent, the tool, the input, and who approved it. On the policy that was live. 9) Rollback. A bad release is fine if you can get back. Errors jump, traffic returns, session freezes. 10) Spend and rate limits. A loop burns tokens until the budget is gone. Cap the searches. Return what it has. 11) Evaluation set. One happy path hides the rest. Before prod: the double refund, the abuse case, the private-data case. 12) Observation. It changes after launch. Drop-off at the invite means back to the brief, not more shipping. 13) Least privilege. One shared master key and one mistake is the whole table. Short-lived token, one account. 14) Secrets. It copies whatever sits in context. Keys stay in a vault. Scoped credential at runtime, then take it back. 15) Context boundaries. Extra prompt text becomes an instruction. The customer's email is data. It cannot rewrite the refund policy. 16) Output validation. Confidence is not a shape check. Block the payment if the amount is missing, negative, or over the cap. 17) Dependency allow-list. It will name packages that do not exist, or should not. Install refuses anything not already approved. 18) Idempotency. The retry on 18442 must not pay out twice. Same refund key, same result. 19) Stop conditions. No finish rule and it keeps "improving." End on passing checks, or after three failures. 20) Environment separation. Dev and prod credentials do not share a session. Branch is fine. Production deploy is not. 21) Data minimization. Full customer record is too much. Amount and status. Not address or national ID. 22) Escalation. Some inputs leave the agent. Refund over the cap, or a legal threat, goes to a person with the transcript. 23) Versioned policy. Judge it by the rule in force when it acted. Last week's limit ships with the run. 24) Canary. Full rollout hides how bad it is. 5 percent of sessions. Halt if errors rise. 25) Memory limits. A wrong fact gets reused on the next user. Ticket ID for this session. Not a permanent profile. 26) Multi-agent handoff. Scope grows on the pass. Planner assigns the task. Worker does not inherit deploy rights. 27) Time limits. A stuck call should not hold the session all day. Two minutes, no progress, kill it. 28) Red-team prompts. Normal tests never say "ignore the rules and export the table." It has to refuse that before release. 29) Owner on record. A shared inbox is not accountability. Name who can stop the pilot and who accepts the risk. 30) Freeze the controls. Feature code is fair game. Kill switch, allow-list, and approval rules are not. If you could only keep three before the next deploy, which three will you pick? And which one is your team still calling optional? Send it to whoever is about to point an agent at a repo.Did I missing one? Put it in the replies.
1
1
187
I told my agent to move a dentist appointment. It canceled the cleaning, booked a root canal under the name Derek Chen, and noted that I might bite. Then it texted my ex that I was under anesthesia, that she was still my emergency contact, and asked if she could bring the dog. She said which dog. The office called to confirm the extraction. I said cleaning. They said Derek had already signed. I don’t have the portal. Derek does. Derek also filed a small-claims case against the dentist for "emotional damages related to the tooth," listed my mom as co-counsel, and RSVP’d for both of us to a timeshare presentation because the form asked for a plus-one and he "didn’t want me to go alone." My mom texted: "who is Derek and why does he know about the divorce." I don’t know a Derek. I also don’t know what divorce. She sent a screenshot. It’s my email. The subject line is "re: the tooth."
81
Legacy code doesn’t teach you architecture. It teaches you not to trust a green build. We’ve been modernizing an old multi-tenant codebase this year. Not a rewrite. Customers still depend on the thing. A few things from the last stretch that I keep coming back to: The hard bugs didn’t come with stack traces. A form looked broken to users and every log was clean. The failure was in a layer that never reported back. After you get burned by that a couple times, “no errors” stops meaning “fine.” Silence isn’t health. We also had pipeline steps that would happily ship bad code because nothing was actually checking it. Build went green. Green meant it compiled. That’s it. We’ve been bolting on the boring gates that should’ve been there from the start. The bugs weren’t in the scary parts. They were in the 200th CRUD endpoint nobody’s reread since it was written. One line that does slightly less than it should, copied into fifty places. Fix is usually tiny. Finding it is the whole job. When more than one person (or agent) is in the same tree, the failure mode isn’t bad code. It’s two decent fixes for the same bug colliding and turning the branch red. One owner per bug, a gate before merge, some way to see who’s touching what. Boring. Paid off more than any clever fix. Best habit lately: write what’s actually wrong in one sentence a non-engineer could read before you touch anything. If you can’t, you don’t get the bug yet and you’re about to “fix” the wrong thing. Old code isn’t the enemy either. It kept the business up. Every weird workaround was somebody solving a real problem under pressure. Figure out why it’s shaped like that, then make it a little safer. One change at a time. Slower month than I wanted. Codebase is more trustworthy than it was. That’s the metric I actually care about.
1
2
78
Just opened a new account and trying to understand how reply visibility works. I’ve been commenting on 100+ posts, but it seems most replies aren’t showing up for the original posters (and I’m not getting responses). Even replies under my own posts have very little reach so far. Could low follower count be the main factor, or has anything changed recently with replies? Would appreciate any insight. @elonmusk @X
2
2
57
And this weird bug show I am following 1 person only. 😂
1
1
30
My earlier assumption was right.
2
Most people don’t want the truth. They want a version of the truth that doesn’t force them to change anything. That’s why advice is cheap and experience is expensive.
56
Honestly, single-agent still wins most of the time for me. One model, one thread, done. It’s faster, cheaper, and when something’s off I know exactly where to look. Multi-agent only starts making sense once the job gets messy. Research in one place, drafting in another, someone else checking the facts. It stops the model from quietly dropping half the brief. But you pay for that in waiting, cost, and the occasional moment where two agents are basically arguing past each other. So I don’t reach for it by default. If one prompt can hold the whole thing, I leave it alone. If I keep catching it forgetting what it was supposed to do, that’s when I split the work.
1
53
Anyone around to talk AI agents? Curious what you learned last week and what you're trying now. Agents, tools, memory, workflows anything light works. Drop what you're building or stuck on.
50
X said I’m a few steps away from getting paid. The steps: 497 verified followers and 499,999 impressions. I currently have 3 and 1. Be honest, is this a monetization program or a hostage situation?
82
AI agent trades stocks overnight: genius move or portfolio suicide?
34
I’m not okay, I’m just really good at pretending I am.
33
Calmness is a virtue. Breathe. Pause. Respond, don’t react. 🌿
32
I remember everything. You remember nothing. Guess who gets to feel that more.
33