Blog
All articles. All pillars. All authors.
34 Rules to Catch Deployment Mistakes Before They Happen
We built a pure-Rust static analysis engine with 34 rules across 8 categories to catch security issues, misconfigurations, and deployment mistakes before they reach production.
#018 -- 10 Sessions: From Zero to a Working Compiler
Building a programming language compiler in 10 sessions: lexer, parser, type checker, codegen, and VM in two days.
#113 -- Request Body Validators
How FLIN's validate blocks enforce type safety, constraints, and business rules on incoming request data -- declarative validation that runs before your handler code and returns structured error responses.
Observability: Tracking Every LLM Call in Production
AILog tracks every LLM call. SystemSetting enables config without redeploy. ExerciseResult measures learning. The admin dashboard behind the obscured route.
#111 -- OAuth2 and Social Authentication
How FLIN provides built-in OAuth2 functions for Google, GitHub, Discord, Apple, LinkedIn, and Telegram -- PKCE flows, state validation, and user creation in a standardized pattern.
#110 -- Two-Factor Authentication (TOTP)
How FLIN implements TOTP two-factor authentication as a built-in feature -- secret generation, QR codes, verification, and backup codes in four function calls.
Tasks, Goals, and Recurring Reminders
The AI creates tasks from conversation context. Recurrence engine, due-date notifications, org-scoped visibility, and threaded comments on homework assignments.
#109 -- Rate Limiting and Security Headers
How FLIN provides built-in rate limiting with sliding windows and automatic security headers on every response -- protecting applications against abuse, XSS, clickjacking, and MIME sniffing by default.
#069 -- FlinDB vs SQLite: Why We Built Our Own
A detailed comparison of FlinDB and SQLite -- where they overlap, where they diverge, and why we built a custom database engine for the FLIN programming language instead of embedding SQLite.
Interactive Quizzes With LaTeX: Testing Students Inside a Chat
Two-phase anti-cheat quizzes: the AI sends questions without answers, Redis stores the correct option, and the server validates. With full LaTeX math rendering.
Detecting AI Agents in Your Codebase
A 3-tier detection hierarchy: Co-Authored-By commit trailers, environment variables (CLAUDE_CODE, CURSOR_SESSION), and TTY heuristics for identifying AI-generated code changes.
#053 -- Time Arithmetic: Adding Days, Comparing Dates
How we implemented duration literals and time arithmetic in FLIN -- from the elegant N.days syntax to constant folding at compile time, delivering zero-cost abstractions for date operations.