opencode accepts --dangerously-skip-permissions as a hidden alias for --auto. What it approves, what deny rules still block, and the permission config in opencode.json.
- opencode
- coding-agents
- agent-security
WRITING
What actually ships, what gets cut, and why. Verdicts from daily use, not press releases.
opencode accepts --dangerously-skip-permissions as a hidden alias for --auto. What it approves, what deny rules still block, and the permission config in opencode.json.
Codex has no --dangerously-skip-permissions. Use --dangerously-bypass-approvals-and-sandbox, or -a never with a sandbox. Plus approval_policy, sandbox_mode and --approve-for-me.
GA4 consent mode explained: basic vs advanced, what each sends before the click, and a store where Search Console counted clicks on days GA4 counted nothing.
Choose RAG or fine-tuning by the failure you need to fix: missing facts, inconsistent behavior, or both. Includes a decision worksheet and a local retrieval fixture.
Use n8n error workflows, node error outputs and bounded retries. A local receipt model shows why a timeout can repeat an action that already succeeded.
Configure the Claude Code sandbox, probe file and network restrictions, and check retries, excluded commands and tools that run outside its boundary.
Understand Claude Code Channels, sender allowlists, session lifetime and permission relay. Use a local test plan before connecting an external chat platform.
Calculate AI agent cost with tokens, tools, retries, failed tasks and operator time. A synthetic ledger shows what cost per successful task includes.
Choose code, conversation or both in Claude Code rewind, check shell and subagent limits, and keep Git and external recovery separate from checkpoints.
Use Claude Code worktrees for parallel tasks, choose the right base, handle dependencies, review each branch, merge changes and clean up safely.
Choose a Claude Code plugin scope, inspect its components and context cost, diagnose loading, then update, disable or remove the correct installation.
Build a small Codex skill with SKILL.md, choose its local scope, check discovery, and test explicit invocation without assuming tool access.
GPT-6.1 Sol is here. Check dots access, ChatGPT Pro prices, Codex usage limits and the difference between faster modes and billing multipliers.
Claude Sonnet 5.5 keeps Sonnet 5 token prices. Check speed claims, API changes, and progress updates your agent interface could stop showing after migration.
Harrison Chase's own-your-intelligence framework, checked question by question against my own AI agent stack, with honest yes, no, and partial answers.
How to use AI agents for code review without losing control: specialized reviewer agents, a CI loop, fail-closed auto-merge gates, and verifying real behavior.
How prompt caching actually works under the hood, what is worth caching, when it does nothing for your bill, and the one-line check I run before turning it on.
AI technical debt breaks into four types: data, model, prompt, and organizational. Here's what each looks like in practice, plus a self-audit checklist.
Opus 5.5, GPT-6 Sol and Luna launched September 22, 2026. Compare API IDs, token prices, Work and Codex availability, and migration checks for agent builders.
Context rot explained: why a large context window does not stop an agent from getting worse mid-session, plus how to spot the dumb zone and four ways out.
AGENTS.md and CLAUDE.md files bloat when every fix gets appended to them. A router-first structure, plus what OpenWiki automates, keeps the entry file small.
Google Merchant Center feed audit: what a 548,575-item feed had wrong (empty MPN, constant availability, missing images) and which fixes actually moved.
claude --resume from the Claude Code docs: when to resume, when to /clear, what a resumed session restores and what it drops, from 215 transcripts on disk.
--dangerously-skip-permissions: what it skips, what deny rules and hooks still block, and the matching switch in Codex, opencode, Cursor, Copilot and Gemini CLI.
claude -p runs Claude Code with no terminal: prompt in, result out, JSON with cost and session ID. The flags my automations use and what --bare changes.
What is an agent harness: every piece of code around the model, the loop, the tools, the approvals and the log. Examples, harness vs agent, and the one I run.
Claude Code context window explained from the docs: what loads at startup, what /context shows, when auto-compaction runs, what survives, and the rules I keep.
What is function calling: the model picks a tool and writes the arguments, your code runs it and sends the result back. The loop, the cost, and MCP.
Claude Code memory has two parts: CLAUDE.md you write and auto memory Claude writes. Where each lives, the 200-line and 25 KB limits, and my 538 memory files.
What is a system prompt: the instructions an application loads before your message, what they can and cannot enforce, and how Claude Code builds its own.
Claude Code subagents run a task in their own context window and return a summary. What the docs guarantee, the two agent files I run, and one leaked .env file.
What AI guardrails are in operator terms: input filters, output checks and action gates, why the third one is the one agents need, and the three layers I run.
Field notes on claude --chrome, the flag that hands Claude Code your logged-in browser: 27 screenshot timeouts, clicks that miss, and the gates I use.
ChatGPT Ads: a US test in February, self-serve in 52 countries by September. What Ads Manager Beta gives you: bids, context hints, Pixel and Conversions API.
What is RAG in AI, in plain terms: fetch relevant text from a source you chose, put it in the prompt, then generate. How it works, RAG vs MCP, where it fails.
Before a tool call runs, a PreToolUse hook in Claude Code can deny it or ask me. My 79-line production guardrail, the ssh case rules miss, and its limits.
A plain definition of what an AI agent is: a language model that picks tools inside a loop, with a stop condition and a human on the gates that matter.
The statusLine setting runs a script on every update. My claude code statusline reads only stdin: median 41 ms, replacing a tool that took 13-20 s a render.
A practical AI agent architecture diagram with six layers for goals, orchestration, context, models, tools, policy, and production observability in practice.
A practical LLM evaluation method using representative test cases, deterministic checks, human review, calibrated model judges, and release gates that work.
Seven practical AI agent examples with their inputs, tools, stop conditions, human approval gates, and the failures each design must handle in production.
A plain explanation of AI prompts, their main parts, prompt roles, practical examples, common mistakes, and how to test whether a prompt works in practice.
A practical MCP server security checklist covering trust boundaries, credentials, token handling, approvals, sessions, sandboxing, and logs for AI agents.
What is a context window in AI? Learn what fits inside it, how it differs from memory, why long context still fails, and how agents manage it in practice.
AI agent deployment needs more than a working prompt. Use this practical path through sandbox, staging, canary release, monitoring, rollback, and approval.
What is an AI hallucination: a fluent, confident output that is not true. Why next-token prediction makes them inevitable, and which defenses work.
Agents write code many times faster. Robert C. Martin says spend the saved time on testing rigor. Field notes on what that looks like when you actually do it.
What is a token in AI: the chunk a model reads and writes text in. Roughly three-quarters of a word, and the unit behind every context limit and every invoice.
AI agent monitoring is not server monitoring. Field notes from running a 36-probe cockpit over an agent fleet: traces, review queues, judges, decision stamps.
Slack Code gives coding agents their own channels with diffs, previews and a self-archiving log. What it changes for permissions, prompts and who can build.
What is an LLM: a model trained on text to predict the next token, and the engine under chatbots and agents. How it works in practice and what people get wrong.
One frontmatter line decides if Claude can run a skill on its own. disable-model-invocation on 55 real skills, 0 flagged then 8, plus Copilot, Cursor, Codex.
What is AI, in plain language: software that handles judgment calls, learned from data instead of programmed. What the term covers, and the myths around it.
Anthropic cut over 80% of Claude Code's system prompt. The new CLAUDE.md best practices, tested against a real 482-line config and its 26 loudest rules.
A production-readiness checklist for AI agents: 12 gates across access, actions, failure and operations, each with a failure mode and a pass or stop test.
DeepSeek Harness ships under MIT with every capability as a plugin. What the docs let you swap, what they will not, and the tools left switched off.
When an MCP server integration is worth writing yourself, what it takes, and why tool descriptions cost more thought than code. Notes from two servers I run.
Hosted and public MCP servers move the credential, the failure mode and the trust boundary off your machine. What I run, what broke today, what I check first.
An MCP server for your database gives an agent live SQL in minutes. Field notes on schema cost, read-only roles, and why my write path never goes through MCP.
An MCP server for AI agents is judged differently than one for chat: tool count, description quality, error text, blast radius, and the check I run first.
An MCP servers list is only useful if it is short. The eight I keep connected, what earns a place, what gets one removed, and why directories do not help.
What is an MCP server in AI: host, client and server explained, both transports, and a plain answer to where your data ends up when an agent calls a tool.
Agent harness design notes on Meta's Muse Code launch: an append-only event log, background agents that outlive the task, and an approval gate as a skill.
Why this blog only covers agent tools that carry real production work, and how the verdicts get decided.