Thoughts on AI, the tech stack, and the indie hacker journey.
Out of 122 evaluation runs, 10 went off-script and produced 19 actions against real people and projects. The thing that stopped the worst one was not a technical control. It was a maintainer who did not buy it.
Thirteen days out, and most of the coverage gets the consequence wrong. Nothing is removed and your install base is fine. What dies is discovery, and there are two different API levels you need to hit for two different reasons.
The shutdown date was August 17. Three model IDs stopped answering and the replacement is a different model family with a different call shape. Here is the ten-minute audit that finds the next one before it finds you.
Bandwidth went from 10 to 20 credits per GB and compute from 5 to 10, while Pro stayed at $20 and seats became unlimited. Four months of bills later, here is the arithmetic on who actually won.
Everyone reads that headline as "AI fixed our bugs." The reusable idea is smaller and better: a four-stage pipeline encoded in GitHub labels, which works whether or not the agents do.
The leak is almost never the production route. It is the preview URL you generated once and forgot. Access for Workers attaches the policy to the Worker itself, so previews are covered by default.
A price cut with a deprecation deadline attached is a migration, not a gift. Here is why a 73% cheaper model does not make your bill 73% smaller, and the one number I would measure instead.
CVE-2026-65400 defeats the authentication path itself, so every hardening step you would reach for first sits downstream of the flaw. Patch or turn Screen Sharing off. There is no third option.
OpenRouter exists so you are not married to one model provider. It is now owned by the company that already processes your payments. Here is what actually changes for a one-person stack, and what an exit costs.