How to review a pull request an agent wrote
Reading an agent-authored pull request when you did not write the prompt: reconstructing intent, sizing the diff, and spotting scope creep and diluted tests.
SiteCMD Blog
Product updates and practical guidance for building faster, safer, more reliable websites.
A Senior Software Engineers perspective on building with AI
There is no magical tool that gives you perfect results every time, it's about finding the right collection of tools and processes to keep things in check.
All articles
17 articles, page 1 of 2
How API keys end up in your client bundle
Why secrets reach public JavaScript bundles, how to grep a built bundle for them, and what to do in the right order after one has already shipped.
Security headers that are not your CSP
What HSTS, Referrer-Policy, Permissions-Policy, and the cross-origin isolation headers actually prevent, how to verify each one, and which are noise.
Why Google isn't indexing your page
A developer's checklist for tracing an indexing problem through HTTP status, robots rules, canonicals, rendering, internal links, sitemaps, and Search Console.
How to verify AI-generated code before you merge
A review loop for checking an AI-generated patch against the original failure, hostile inputs, trust boundaries, regression tests, and deployed behavior.
8 manual accessibility tests for every website
Test keyboard use, focus, zoom, forms, dialogs, motion, content, and screen readers with eight browser checks automated audits cannot finish.
Lighthouse vs. Core Web Vitals: why they disagree
Lighthouse is controlled lab data. CrUX reports field data from real visits. Learn why the numbers diverge and how to use both without chasing the wrong score.
Debug a Core Web Vitals regression in 30 minutes
A 30-minute workflow for separating field and lab data, finding the affected metric, tracing recent changes, and choosing a measurable fix.
Set up pre-commit hooks that actually catch bugs
A fast Lefthook setup for staged-file linting, project type checks, related tests, formatting, lockfile drift, and an intentional escape hatch.
Get new articles by email
Occasional product updates and practical advice. No content calendar filler.
Email updates
Occasional updates. Unsubscribe any time.
✓
Check your email
We sent a confirmation link to that address. You are on the list once you press the button in that email.