// the blog

Notes from building in public

Two posts a week on product craft, building with AI, and the stack that runs this site. Honest about what worked and what didn't.

allpm-craftai-developmenttech-tools
Why I SHA-Pin Every GitHub Action (and Automate Updates)
tech-toolsfeatured

Why I SHA-Pin Every GitHub Action (and Automate Updates)

I lock every GitHub Action to its commit SHA instead of a mutable tag, then let Dependabot keep the pins current. Here's why a tag alone isn't enough.

Jul 15, 2026 · 9 min read
How Context Limits Changed the Way I Build with AI
ai-development

How Context Limits Changed the Way I Build with AI

I was getting inconsistent answers and the AI kept forgetting what we'd built. Here's how I stopped fighting context limits and started designing around them.

Jun 26, 2026 · 7 min