Field notes

Lessons from building AI agents that act on live accounts, written up so other people don't learn them the painful way. All posts live on dev.to.

Auth · Security · 2026

Access vs Refresh Tokens: I Was Missing Two Ideas

↗ Agents · Security · 2026

My agent kept reading data it wasn't allowed to. The prompt was never going to stop it.

↗ Agents · Architecture · 2026

The hard part of my AI agent wasn't doing the work, it was planning it.

↗ Agents · LLM · 2026

I built an abstraction so my agent could write documents. Then I deleted it.

↗ Agents · Security · 2026

Why my AI agent kept writing to the wrong client's Salesforce.

↗ Craft · Career · 2026

I'm shipping the best work of my career. None of it feels like mine.