Development
Three doors that were never locked
A null CSP, a config value joined onto a filesystem path unchecked, and a vault picker that would accept your home directory - none broken yet, all unlocked.
Dev log
Greenhouse
Development
Dark mode, and the browser test that fought back
light-dark() made the CSS easy. Three test-tooling failures made the contrast gate hard. Then real screenshots proved the green gate wasn't the whole story.
Development
Removing a cooldown lock that was never true to the source
The 7-day lock on active projects was idea-incubation logic pasted onto the wrong pipeline stage. Rotation already did the useful part of the job.
Development
Rescue-or-Keep: building the vault zone for Greenhouse
Vaulting now really moves your files, and a "Keep Vaulted" no-op that wasn't - re-vaulting would have reset the exact timestamp the daily review sorts on.
Development
Building the project detail view for Greenhouse
Does advancing a stage count as a touch, what happens at the last stage, and a cooldown-vs-rotation tangent that turned out to be one question, not two.
Development
A two-second accessibility gate that runs on every push
axe-core over the existing component-test harness, scoped to actual WCAG rules - and an honest accounting of what a jsdom gate structurally cannot catch.
Development
Teaching an agent to click-test my Tauri app
macOS has no official Tauri WebDriver. A community plugin fills the gap, but Cargo's feature unification nearly shipped its test server into release builds.
Development
A test that proved nothing, and the bug it was supposed to catch
A five-finding cleanup batch where the smallest item mattered most: a regression test that failed because the bug it targeted is structurally unreachable.
Development
Reading changelogs before bumping three stale dependencies
An archived YAML crate, nine minor versions of rusqlite drift, and a duplicate thiserror major. The work was the reading, not the writing.
Development
Adding Dependabot to Greenhouse (and the Rust workspace gotcha it surfaced)
Dependency scanning without a new CI job, grouped update PRs, and the virtual-workspace detail that makes the cargo entry point at the wrong directory.
Page 3 of 4