Goatfied blog
Developer-to-developer writing. No fluff. Just what worked, what failed, and what shipped.
security
Prompt injection in code repositories allows malicious instructions in README or config files to manipulate LLM agents that read, commit, or execute code autonomously.
security
Sandboxing untrusted tool calls isolates AI agent actions from production systems, preventing destructive commands through containerization and permission boundaries.
security
AI agents generate and commit code faster than post-commit scanning can catch secrets, requiring detection before file creation rather than after.
refactoring
This post explains how to automatically detect circular import cycles in Python codebases and apply safe refactoring strategies to resolve them without breaking existing functionality.
refactoring
Spawning scoped language server instances per project in a monorepo keeps IDE features fast by avoiding whole-repository indexing overhead.
refactoring
Learn techniques for safely refactoring legacy code without tests using observability, characterization tests, and incremental changes.
refactoring
Dependency-aware sequencing applies code changes in topological order so each intermediate state compiles, avoiding the broken states that parallel edits create.
refactoring
Learn how to modernize legacy TypeScript codebases through small, bounded changes that avoid stalled rewrites and half-finished migration sprints.
refactoring
Teaching AI coding agents to enforce layered architecture and dependency rules during code generation, not after, to prevent violations of established module boundaries.
refactoring
Renaming types or functions across package boundaries without breaking downstream code using type aliases, re-exports, and gradual deprecation strategies.
open-source
Governance models for company-backed open source projects affect contributor trust, decision speed, and community durability through structural choices.
open-source
Open-source developer tools can collect telemetry ethically through explicit opt-in, readable payloads, and architectures that prevent invasive tracking.
