AFTER_COMMIT Is Not Durable Delivery: A Spring Outbox Checklist
Separate transaction timing from notification durability. Design an outbox with retries, idempotency, crash recovery, and failure-path verification.
Read moreAI on Real Code
Pointing AI at an actual codebase: code review, legacy refactoring, LangChain agents, and the MCP filesystem server.
7 articles
Spring Boot IDOR: Enforce Ownership on Every Order Query
Fix object-level authorization on order lookup, listing, and search. Parameterized SQL is not an ownership check; verify rejected access too.
Read moreAI for Java Developers: A Guide to Setup and Verification
Choose a starting point for AI-assisted Java work: agent setup, repository context, meaningful tests, security checks, and Spring Boot 4 migration.
Read moreAI Code Review for Java: Check Behavior Beyond the Diff
Review transactions, ownership, bean wiring, query behavior, and Java version assumptions using concrete failure paths and executable acceptance checks.
Read moreLangChain Tool Calling: A Bounded Agent with a Local Fixture
Build a small LangChain agent using a deterministic tool, configure a compatible provider explicitly, and inspect tool results without inventing live data.
Read moreUsing AI in a Legacy Java Codebase: Preserve Behavior First
Map callers, capture current contracts, and make small reviewed Java changes with AI when tests and business documentation are incomplete.
Read moreMCP Tutorial: Connect One Tool and Verify Its Boundaries
Understand MCP hosts, clients, servers, and tools. Start with one scoped integration and verify discovery, access, and failure behavior.
Read more