  DEV Library is my idea of first-person 3D reimagining of DEV.to. Not a themed scene wit...
Read articleThe three-layer model works. Part 1 of this series is the invoice incident that proved it. Part 2 is the proxy.ts matcher gaps that fail silently. Part 3 is the mutation-layer auth check that gets skipped even when everything else looks solid. My kit implements this in Route Handlers rather than Ser...
Read articleMost SEO contracts sell you a monthly PDF. Once a month you get a report that looks *backwards*: here's what dropped, here's the link that broke, here's the Core Web Vitals regression three weeks after it happened, when the damage is already done. As a solo developer that always bugged me. A monthl...
Read articleI keep seeing it on code reviews. Proxy solid. Auth on every Server Component. Header direction correct. Then I look at the Server Actions. No auth check. Not one. The page that renders the button is protected. The action behind the button accepts whatever the caller sends -- any valid session, a...
Read article