Email Verification Logs Need a Privacy Contract
Email verification is usually discussed as a delivery problem: did the message arrive, did the link work, and did the user finish signup? In product…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Pin baseUrl in the Gateway, Not in the Agent's Prompt
The other day an agent I was testing kept hitting production. Not on purpose, not because it was being clever. It was reading the OpenAPI spec we ha…
Building a Rust CLI With clap: Arguments, Errors, and Help That Works
A command-line tool lives or dies on its arguments. A flag that silently ignores bad input, a help screen that does not match the code, or an error…
The Portability Audit Take-Home: Grade Environment Assumptions, Not Features
A take-home that runs on the reviewer's laptop grades features; a take-home that runs anywhere grades engineering discipline. The task below asks a…
Properties Without Witnesses Are Decorations: A Falsifiability Gate for Agent Patches
A property that passes on the patched tree and on the pre-patch tree carries no information. That is the first thing to measure, before you trust an…
Every regex is written once and read a hundred times. Optimize for the readers.
Somewhere in a codebase you own there's a regex that three people can write and nobody can read. Mine was a date-validation pattern — forty-some cha…
DevOps Email Tests Need a Handoff Contract
DevOps Email Tests Need a Handoff Contract Email tests in CI often fail at the boundary between two jobs: one job creates a disposable inbox, anothe…
Harvard's field data on coding agents: +30% code, +49% review time, flat output
A 78-page job market paper landed last week that puts field numbers on the argument everyone has been having from vibes. Fiona Chen and James Stratt…
Claude Code /compact vs /clear: what actually happens to your context
/compact replaces your conversation with a summary Claude writes and keeps the same session going. /clear starts a new conversation with an empty co…
The Bug Is in the Files: Characterize Filesystem Side Effects Before a Messy Refactor
Conclusion first: in a messy repo, the refactor usually breaks files, not stdout. Teams write golden tests for console output. Almost nobody asserts…
Fetch для QA: как тестировать API прямо в DevTools, не открывая Postman
Недавно у меня была итерация тестирования. Задача — проверить функционал, для которого нужно было создать 50+ сущностей. Однотипных,…
Decide Where the Agent Runs With a Four-Axis Fit Ledger
Every week brings another round of confident model announcements, and every week my review queue looks roughly the same as it did a month earlier. T…
11 MCP Servers That Prove MCP Isn't Dead
Disclosure: I'm the founder of PDFHaul, which is #5 on this list. Originally published on the PDFHaul blog , where the full source list with links l…
48-Hour Field Notes: My Sandbox Said PASS, and Zero Tests Had Run
I spent 48 hours letting a free model generate fixes I never applied, and the most useful thing I learned was that my harness was the bug. The sandb…
Measure the Executable Share of a Docs Page Before Letting a Model Draft It
Liquid syntax error: Unknown tag 'endraw'
Why Google Put a Runtime Monitor on Gemini 4 Argon
Google DeepMind launched Gemini 4 Argon this week. The headline numbers look like typical frontier model marketing: top rank on the Vals Index, a 1M…
Six dev.to Articles Walked In, Four Roadmap Phases Walked Out: Why the Community Is the Best Design Review Your Project Will Ever Get
One evening of reading other people's posts about agentic coding turned into three new global rules on my machine, four new phases on cairn's roadma…
The artifact worth reviewing when agents write the code
GitHub's Security Lab reported 24 Android vulnerabilities found by an AI security agent, and the part worth copying is what ended up version-control…
An input changes mid-run: what four task tools do
A cache key describes a task's inputs at one moment. If an input changes while the command runs, the output may have been built from bytes the key d…
Stop Claude Code from saying "done" while the build is still red, with a Stop hook
The most annoying agent failure is not a bad edit. It is the agent announcing "all done" while the type checker is still failing. Claude Code has a…
Six hosted sandboxes say "isolated." None tells you which wall your agent ran behind
A Show HN went up yesterday for plimsoll , a Go daemon you run yourself that executes code an agent wrote. The sandbox part is ordinary. The interes…
CI Email Tests Need a Run Manifest
Email assertions are often the least explainable part of an otherwise tidy CI pipeline. A browser test can tell you that a verification link was not…
I built an agentic workforce where done means a command exited 0
Every failure I have had with coding agents looks the same at the end. The agent writes a summary that reads like success: the feature is implemente…
Config in TypeScript, and why there are no named inputs
Turborepo and Nx both grew the same features for the same reason. globalDependencies , globalEnv , namedInputs , targetDefaults , extends : every on…
Haiku 5.5 Slashes Costs; New Agents Reshape Docs
This week's tooling news splits neatly into two themes: pricing traps disguised as savings, and a quiet consolidation of agentic infrastructure unde…
Mailbox Leases for Reliable AI Email Tests
AI agents are getting better at driving browsers and APIs, but email verification is still a surprisingly messy boundary. An agent can create an acc…
Three Dead Ends in an AI Pairing Session, and the Replayable Claim Ledger That Ended It
Three Dead Ends in an AI Pairing Session, and the Replayable Claim Ledger That Ended It The bug was small: a webhook handler that double-charged on…
Convert CONTRIBUTING.md Into an Executable Preflight Gate Before an OSS Patch Leaves Your Fork
A contributor spends a weekend on a null-dereference fix, opens the pull request on Monday morning, and watches CI fail on a rule that CONTRIBUTING.…
AI Test Agents Need a Mailbox Lease
AI agents are getting good at running developer workflows. They can create a test user, trigger a signup, inspect a verification message, and report…
Email Test Data Needs a Privacy Budget
Email fixtures are easy to treat as disposable. Create a temporary email address, trigger a signup or password reset, inspect the message, and move…