Apps

MD+HTML Reader

macOS app

A Markdown HTML reader for Mac and AI-generated docs

AI coding tools produce useful docs, but reviewing them can get messy. MD+HTML Reader gives you a focused Markdown HTML reader for Mac, so you can review generated Markdown and preview HTML in read-only mode.

MD+HTML Reader showing a focused document review workspace

Paste Switch

macOS app

Clipboard switching for Mac

Paste Switch flips the flow: paste the latest clip, press the same shortcut again if it is not right, and keep switching recent text or image clips where you are working.

Stay in flow while others break focus.

Paste faster.
Keep typing.

Save recent clips. ⌘⇧V pastes or switches in place.

SuperNotch

Native macOS toolkit

Make your Mac notch useful.

SuperNotch keeps more than 20 native tools for music, clipboard, focus, screenshots, system controls, and more at the top of your Mac.

SuperNotch tools arranged around the MacBook notch
AI web search routing Cloudflare Web Search API: choose a provider by privacy, cost, and result quality Route Ceramic, Exa, or Linkup with query classification, accepted-answer cost, citation checks, and tested fallback. By Ahab Copilot desktop automation GitHub Copilot computer use: roll out desktop automation without losing permission control Separate OS access, app approval, live interruption, future revocation, and verified completion before automating desktop workflows. By Ahab Cloudflare Clef migration Cloudflare Clef vs Clef-flash: migrate a Jev decision path on Workers AI safely Shadow both decision models, route by risk, measure accepted-decision cost, and keep a proven rollback. By Ahab Claude Code session recovery Claude Code 2.1.286 resume recovery: verify parallel-tool transcripts before continuing Validate transcript continuity, reconcile interrupted side effects, restore launch flags, and fork evidence before continuing. By Ahab Agents API computer use OpenAI Agents API computer use: gate origins, sign-in, retries, and consequential actions Separate origin access, browser authentication, retry recovery, high-impact authority, and verified completion. By Ahab GPT-6.1 Sol rollout GPT-6.1 Sol rollout: separate API, Codex, and Copilot before changing defaults Validate surface availability, model policy, tool endpoints, long-context pricing, canaries, and rollback evidence. By Ahab AI Gateway model savings Cloudflare AI Gateway Potential Savings: validate model downgrades before changing routes Turn model-fit suggestions into privacy-reviewed replays, accepted-result cost checks, canaries, and rollback evidence. By Ahab DeepSeek Harness timed questions DeepSeek Harness 0.2.0 RC2 timed questions: continue safely without treating silence as consent Choose safe wait modes, test late replies, and keep permissions blocked when an unanswered question becomes pending. By Ahab Claude Sonnet 5.5 migration Claude Sonnet 5.5 rollout: migrate thinking-off requests and route everyday work by accepted-result cost Separate API, Claude Code, and Copilot boundaries, then migrate thinking-off requests and route by accepted-result cost. By Ahab Copilot policy validation GitHub Copilot managed settings validator: prove policy files parse, map, and reach clients Triage JSON and team-mapping errors, then separate a clean validator from client delivery and effective-policy proof. By Ahab Claude Code model policy Claude Code 2.1.283 model allowlists: block surprise upgrades with exact matching Pin approved model versions, test every selection surface, and keep resolved-model receipts for rollout and rollback. By Ahab Qwen Code MCP media safety Qwen Code 0.24.5 bounds MCP screenshots: verify media budgets before trusting tool output Replay seven synthetic media cases, inspect delivered bytes and patches, and keep explicit rollout and rollback evidence. By Ahab Jev evaluation gate Jev benchmark: reproduce latency, cost, calibration, and decision quality before rollout Reproduce Jev claims with a frozen corpus, request receipts, calibration metrics, accepted-decision cost, and explicit rollout gates. By Ahab Jev typed workflow Jev Choice, Score, and Noul: build a confidence-aware fallback workflow Combine Choice, Score, and Noul with versioned thresholds, fail-closed fallbacks, decision receipts, and an eight-case test matrix. By Ahab Jev workload selection Jev vs LLM structured outputs: choose by workload shape, not benchmark headlines Choose Jev, an LLM, or a hybrid with a five-axis workload card, three correctness layers, and a reversible shadow rollout. By Ahab Gemini Connected Apps Gemini Connected Apps: verify permissions, data flow, and deletion before rollout Separate authorization, data flow, external actions, and deletion, then pass six harmless canaries before connecting production accounts. By Ahab GPT-Live-1 voice agent GPT-Live-1 API: separate voice, reasoning, and action costs before rollout Separate the live voice layer, backend reasoning, and tool authority, then pass six canaries and budget each accepted session. By Ahab Copilot local sandbox GitHub Copilot app local sandboxing: a least-privilege rollout checklist Test filesystem denials, split network access, withhold credentials, and restart sessions before trusting the public-preview boundary. By Ahab Claude API migration Claude Opus 5.5 API migration: handle four breaking changes before switching model IDs Replay thinking, tool, computer-use, provider, fallback, and progress-stream boundaries before moving production traffic. By Ahab GPT-6 model routing GPT-6 Sol vs Luna: route coding tasks by accepted-result cost, not token price Compare identical canaries, apply the 272K context-price gate, and route work by accepted results including retries and review. By Ahab Qwen Code Browser Use Qwen Code 0.24.1 Browser Use: control signed-in Chrome tabs without leaving access behind Isolate the Chrome profile, claim the exact discovered tab, finalize every run, and remove the persistent host plus extension when access must end. By Ahab Grok API migration Grok 4.7 Responses API: preserve encrypted reasoning and cache affinity in long agent loops Preserve opaque reasoning items, cache affinity, tool pairing, and actual cost receipts before switching long-running agents. By Ahab Browser agent observability Cloudflare Browser Run recording Inspect: debug AI agents without leaking secrets Map failing tabs to target evidence, export only the needed HAR, redact sensitive fields, and control recording retention. By Ahab Qwen Code Goal streams Qwen Code 0.24.1 stops emitting active_goal: migrate headless Goal streams safely Move CI and SDK parsers to goal_state, distinguish ACP notifications, and replay five acceptance cases without losing Goal status. By Ahab Claude Code auto mode Claude Code 2.1.278 auto mode: diagnose classifier billing fallback through a gateway Check the server classifier, preserve gateway fields, and distinguish billed fallback from permission changes with five safe canaries. By Ahab AI agent migration Antigravity Agent 09-2026: migrate local tool schemas before October 5 Classify remote and local integrations, map the changed tools, and run five file-operation canaries before the old preview shuts down. By Ahab Copilot model migration GitHub Copilot deprecates six models October 19: a migration checklist for teams Map six replacements, inspect enterprise and organization model policies, and replay real chat, edit, agent, and completion tasks before cutover. By Ahab Copilot Sentry incident workflow GitHub Copilot adds a Sentry canvas: validate the crash-to-PR workflow before trusting it Preserve sanitized evidence, reproduce the failure, bound the patch, and verify deployment before calling a Copilot-generated fix resolved. By Ahab Claude Code gateway recovery Claude Code 2.1.276 fixes proxy 400 errors: recover custom gateways without hiding protocol drift Pin the corrected version, replay four canaries, and prove the original gateway route still enforces policy before restoring traffic. By Ahab Qwen Code Linux sandbox rollout Qwen Code 0.24.0 adds a bwrap sandbox: verify Linux isolation before rollout Verify the resolved backend, writable roots, linked-worktree Git data, EROFS denial, network mode, and residual host access before promotion. By Ahab Cloudflare AI Gateway cost control Cloudflare AI Gateway BYOK-only: stop silent Unified Billing fallback Require provider credentials, replay six canaries, and prove which account paid before promoting an AI Gateway route. By Ahab ChatGPT reasoning workflow ChatGPT stops auto-switching from Instant to Thinking: rebuild your workflow with explicit reasoning Route routine and complex prompts explicitly, test saved workflows, and keep safety-triggered switching separate from normal reasoning choices. By Ahab DeepSeek Harness headless automation DeepSeek Harness 0.1.6 alpha headless automation: stdin, JSON events, and safe session resume Run Headless jobs through stdin, reconcile NDJSON events, resume the exact session, and accept only terminally verified results. By Ahab Claude Code plugin command approval Claude Code 2.1.271 plugin command hashes: approve the command you actually reviewed Bind non-interactive plugin execution to a reviewed command digest, then verify marketplace, scope, installed state, and runtime behavior separately. By Ahab Qwen Code Goal runtime limits Qwen Code 0.23.4 Goal limits: stop autonomous runs by turns or active time Configure Goal turn and active-time ceilings, verify wind-down and resume behavior, and keep cadence, spend, and completion gates separate. By Ahab Copilot re-review verification GitHub Copilot code review auto-resolution: verify fixes without mistaking closed threads for merge proof Separate resolved conversations from current-SHA tests, approvals, and merge rules with a two-ledger model and six-case rollout canary. By Ahab Qwen CUA app-bound actions Qwen CUA Driver 0.20.6 app-bound actions: prevent duplicate macOS input with one-dispatch canaries Canary app-bound macOS automation with exact identity, one-dispatch retries, compact observations, UTF-16 selection, and clipboard ownership. By Ahab Qwen Code Responses API migration Qwen Code 0.23.3 adds an OpenAI Responses provider: migrate with replay and SSE canaries Canary one Responses route with pinned configuration, fresh and resumed sessions, streamed-error checks, bounded recovery, and a proven rollback. By Ahab Claude Code Git permission recovery Claude Code 2.1.270 fixes read-only Git permission prompts: verify long-session recovery Pin 2.1.270, replay the long-session boundary, verify read-only Git canaries, and prove mutating commands still require approval. By Ahab Cursor Projects beta rollout Cursor Projects beta: control shared context, subscriptions, and delegated agents before rollout Start with one repository and subscription, bound coordinator and worker authority, audit shared context, and require terminal PR evidence. By Ahab Claude Code plugin evaluation Claude Code 2.1.269 plugin eval: build a cost-bounded, reproducible acceptance suite Pin the CLI, scaffold one representative case, keep MCP mocked, cap spend, compare the baseline, and archive JSON plus HTML release evidence. By Ahab Qwen Code external-agent delegation Qwen Code 0.23.3 can delegate to Claude Code over ACP: verify which agent actually ran Pin the adapter, prove the external process and model label, then test fail-closed definitions, permissions, cancellation, and cost boundaries. By Ahab Claude Code credential safety Claude Code 2.1.268 security checklist: patch credential redaction and trust-boundary regressions Triage retained Git and MCP diagnostics, rotate exposed credentials, then verify agent trust, symlink denies, and sandbox evidence before restoring autonomy. By Ahab Qwen Code Remote Serve security Qwen Code 0.23.2 Remote Serve: use the generated token and QR without exposing your agent Verify generated-token delivery, QR secrecy, TLS, origin handling, workspace authority, and restart revocation before exposing qwen serve beyond loopback. By Ahab Codex managed worktree preview Codex CLI 0.154 managed worktrees: isolate parallel sessions without losing branch or permission evidence Verify the binary, starting state, file boundaries, branch ownership, permissions, and recovery evidence before moving parallel sessions. By Ahab VS Code Agent Merge preview VS Code 1.136 Agent Merge: a safe PR recovery checklist for review, CI, and conflicts Keep auto-merge off, classify blocker ownership, verify every head SHA, and require terminal PR evidence before merge. By Ahab Claude Code gateway recovery Claude Code 2.1.266 gateway recovery: fix “Not signed in” without deleting valid API credentials Preserve valid credentials, upgrade past the 2.1.265 regression, and verify the intended API-key, helper, or proxy route with secret-safe canaries. By Ahab Cursor self-hosted agents Cursor Self-Hosted Machines: map the real data boundary before moving agent tools inside Use a data-egress matrix, dedicated worker identity, credential canaries, local MCP controls, and pool failure tests before rollout. By Ahab Qwen Code IPC reliability Qwen Code 0.23.1 Preview: stop cross-session messages from waiting forever Test refused receipts, held-message expiry, sleep recovery, mixed-version compatibility, and a terminal-state ledger before promotion. By Ahab OpenClaw beta safety OpenClaw 2026.7.2-beta checklist: isolate state recovery and rollback before a production Gateway upgrade Use isolated state, test channels, permission canaries, recovery fixtures, and rollback proof before moving a beta Gateway near production. By Ahab OpenClaw upgrade recovery OpenClaw 2026.7.1 upgrade checklist: recover the Gateway without hiding state or permission failures Upgrade a calendar-version Gateway with state backups, known-route checks, denied-action tests, and evidence-driven rollback. By Ahab GPT-6 Astra API migration GPT-6 Astra API migration checklist: budget accepted runs and keep agent authority fail-closed Migrate one route with explicit reasoning, whole-run cost limits, authority canaries, accepted-result evidence, and a pinned rollback. By Ahab GPT-6 Astra rollout governance GPT-6 Astra rollout checklist: separate ChatGPT access, API access, and enterprise controls Prove the access surface, set reasoning and cost limits, test tool authority, and keep a pinned fallback before changing a GPT-6 Astra default. By Ahab Gemini managed-agent governance Gemini 3.8 Flash is Antigravity's default: audit agent cost and tool loops before rollout Audit Antigravity's new default with explicit model identity, thinking-level budgets, tool-loop canaries, dual-date pricing, and a pinned 3.7 rollback. By Ahab Claude Code managed MCP Claude Code 2.1.259 managed MCP servers: keep unattended headless runs fail-closed Separate managed remote-server delivery, tool permissions, and no-prompt fallback; then verify allowlist migration, startup errors, and eight fail-closed canaries. By Ahab Copilot approval governance GitHub Copilot code review approvals: protect merge requirements before enabling public preview Separate approval assessment, Copilot authority, and merge credit; then canary path scope, stale-review dismissal, CI, Code Owners, and bypass rules. By Ahab Copilot model governance Claude Fable 5.1 in GitHub Copilot: verify retention, policy, and token cost before rollout Separate plan entitlement, gradual rollout, admin policy, default retention, eligible ZDR, and per-token cost before enabling Claude Fable 5.1 in Copilot. By Ahab Codex rate-limit recovery Codex 0.152 rate-limit recovery: verify resets, fallback models, and queued prompts Separate rolling limits, workspace spend controls, earned resets, and provider authentication while holding queued prompts until a fresh recovery snapshot. By Ahab DeepSeek Harness storage migration DeepSeek Harness 0.1.2 alpha.3 removes SQLite session persistence: export before you upgrade Separate authoritative SQLite persistence from searchable indexes, export logical Sessions with alpha.2, migrate to JSONL, and keep a verified rollback before alpha.3. By Ahab Copilot CLI session recovery GitHub Copilot CLI permission defaults: restore crashed sessions without widening authority Configure startup mode and approval behavior, then reconcile permissions, sandbox policy, repository state, and in-flight side effects before resuming interrupted work. By Ahab DeepSeek Harness connection recovery DeepSeek Harness 0.1.2 alpha.2 connection recovery: make reconnects visible before trusting resume Test offline suspension, six capped retries, manual reconnect, readiness timeouts, and replay evidence before rolling the Developer Preview into a long-running agent session. By Ahab Claude Code model governance Claude Code 2.1.251 model-switch hooks: stop cache rebuilds from becoming surprise spend Govern requested model changes, reconcile automatic fallback, expose stale-resume cost, and verify prompt-cache policy with eight canaries. By Ahab Codex goal budget accounting Codex 0.151 subagent token budgets: make nested workers count toward the root goal Roll child and grandchild usage into one root goal, keep account quota separate, and verify idle, lifecycle, checkpoint, and replacement boundaries. By Ahab Gemini Omni video migration Gemini Omni 1.1 Flash GA: migrate preview video workflows without losing edit state Move preview workflows to the stable 1.1 model, preserve edit state, route five task types, and verify extension, delivery, resolution, and regional limits. By Ahab Qwen Code named sessions Qwen Code 0.22.3 named sessions: manage eight persistent Channel tasks without crossing owners Verify the channel, chat, and sender owner key; exact recovery; busy-state guards; the eight-task cap; and the shared-workspace boundary. By Ahab Claude Code restricted mode Claude Code 2.1.248 restricted mode: shrink local authority without calling it a sandbox Remove ambient command, web, and local-settings authority; then verify file roots, permissions, MCP, and rollback with eight canaries. By Ahab Qwen Code MCP rollout Qwen Code 0.22.2 Node REPL: enable the standalone MCP server without mistaking it for a sandbox Map the real Node authority boundary, pin both versions, isolate the workspace, and verify the opt-in MCP server with eight canaries. By Ahab Gemini speech-to-text rollout Gemini 3.5 Transcribe vs Live: preserve diarization, final text, and cost boundaries Route file and live audio by output contract, reconcile interim and final events, protect client credentials, and verify twelve representative clips. By Ahab Claude Code Bash permissions Claude Code 2.1.246: audit Bash wildcard rules before trusting Auto mode Find wildcard rules that reach beyond the intended subcommand, narrow them by task, and verify hooks plus sandboxing with seven canaries. By Ahab ChatGPT event automation ChatGPT event-triggered scheduled tasks: connect Gmail, Slack, and GitHub without duplicate work Scope supported app events, handle coalescing with a dedup key, keep the first rollout draft-only, and verify eight acceptance canaries. By Ahab Claude Code Linux recovery Claude Code 2.1.245: recover from the Linux glibc 2.44 startup crash Identify the affected libc and binary, recover without relying on the broken client, then run six canaries and preserve a proven rollback. By Ahab GitHub Copilot model governance GitHub Copilot default model availability: reconcile inherited access before August 26 Map enterprise and organization states, separate inherited access from Auto selection, and run six canaries before the August 26 policy cutover. By Ahab Anthropic Python SDK migration Anthropic Python SDK 1.0: migrate HTTP, raw responses, and compaction without blind spots Move to httpx2, repair raw responses and compaction, then verify tracing, mocks, Bedrock region, and rollback with seven canaries. By Ahab Qwen Code permission boundaries Qwen Code 0.22: shrink the tool surface before enabling auto approvals Separate tool registration, invocation approval, and runtime containment; then verify list_directory, coreTools, outbound schemas, and seven permission canaries. By Ahab Codex GitLab review rollout Codex GitLab merge-request reviews: verify identity, webhooks, and diff coverage before automation Separate identity, webhook delivery, project environments, policy triggers, and complete diff coverage; then canary manual and automatic reviews before granting write access. By Ahab Cloudflare MCP least privilege Cloudflare API MCP OAuth scopes: grant an agent only the permissions its workflow needs Map one Cloudflare workflow to the smallest OAuth grant, then prove intended access, a neighboring denial, deliberate reauthorization, and revocation. By Ahab Claude Code data-residency cost Claude Code 2.1.239: reconcile the US-only inference premium before trusting the budget cap Verify policy, effective inference geography, local cost estimates, budget-cap behavior, and provider usage with a cache-aware four-surface reconciliation. By Ahab DeepSeek Harness extension contracts DeepSeek Harness extensions: choose Tool, MCP, or LLM Adapter without breaking replay Choose the right extension seam, build a typed Tool, bridge an MCP server, implement an LLM Adapter, and verify schema, streaming, replay, errors, and release compatibility with twelve canaries. By Ahab DeepSeek Harness delegation reliability DeepSeek Harness subagents, jobs, and workflows: delegate without losing ownership Compare six providers, separate Subagents from Jobs and Workflows, and verify authority, concurrency, cancellation, resume, and terminal states with six canaries. By Ahab DeepSeek Harness session reliability DeepSeek Harness sessions: resume, compact, and recover without losing replay evidence Separate raw events, durable storage, model-visible surface, compaction checkpoints, and spill artifacts; then verify crash recovery, fork, replay, and backup with twelve canaries. By Ahab DeepSeek Harness tool security DeepSeek Harness permissions and sandbox: trace every tool call before granting access Trace pre-execute policy, one-shot approval, monotonic guards, sandbox confinement, filesystem freshness, and immutable results with nine cross-platform fail-closed canaries. By Ahab DeepSeek Harness architecture DeepSeek Harness “Everything Is a Plugin”: choose the right Cordis extension seam Map plugins, services, events, effects, profiles, and bundles; choose an extension seam with a decision tree and seven lifecycle/HMR canaries. By Ahab DeepSeek Harness safety DeepSeek Harness Developer Preview: install it with a safe rollback boundary Pin rc.7, isolate DSH_HOME and the workspace, verify permissions and credential boundaries, and keep a reversible exit before trying real code. By Ahab Claude prompt asset migration Claude Workbench is now Playground: export saved prompts before September 1 Export legacy Workbench JSON before September 1, package prompts with parameters and evals, remove three retired API callers, and replay a golden set through the Messages API. By Ahab AI agent trust-boundary upgrade Claude Code 2.1.234 security upgrade: test paths, marketplace hosts, and redaction before rollout Verify NT-path rejection, effective marketplace hosts, MCP and approval redaction, and background-subagent denies with five payload-free canaries before restoring autonomy. By Ahab AI-native Git hosting rollout Cursor Origin vs GitHub: mirror repositories without creating two sources of truth Keep GitHub authoritative, prove code and PR round trips, preserve CI and secrets, test access revocation, and detach only as an explicit migration. By Ahab Gemini image API migration Imagen 4 API shutdown: migrate to Gemini 3.1 Flash Image without a blind model-ID swap Replace three Imagen 4 IDs scheduled for shutdown and the old predict contract, replay a paired image fixture, compare accepted-image cost, canary one lane, and drain queued jobs. By Ahab AI activity memory privacy ChatGPT Computer History: use an allowlist before Codex learns from your activity Map capture, server summarization, local plaintext memories, and later reuse; start with include-only sources, verify pause and deletion, test prompt injection, and keep rollback. By Ahab AI review evidence and growth control Qwen Code 0.21.12: require review evidence and stop autofix loops before they bloat a PR Require an executed witness for Critical findings, split source and test growth budgets, verify Critical-only behavior, and hand non-converging loops to a maintainer. By Ahab Claude Code Linux memory control Claude Code 2.1.233 on Linux: cap Bash tool memory before a build stalls the host Size CLAUDE_CODE_TOOL_MEMORY_LIMIT from a healthy build, verify cgroup membership and memory.max, run positive and disposable OOM canaries, and keep rollback. By Ahab ChatGPT Linux desktop preview ChatGPT for Linux public preview: verify the browser boundary before rollout Use the official Linux download, verify supported distributions, test the built-in browser and Chrome separately, prove native-app control stays unavailable, and keep rollback. By Ahab Grok long-running agent migration Grok 4.6 vs 4.5: migrate long-running agents by accepted-task economics Run six paired long tasks, measure context and cache growth, calculate accepted-task economics, verify partner availability separately, and keep 4.5 rollback. By Ahab Gemini agent model migration Gemini 3.7 Flash vs 3.6: migrate by accepted-task cost, not launch claims Run six paired agent tasks, normalize thinking and service tiers, calculate accepted-task cost, verify Copilot separately, and keep 3.6 rollback ready. By Ahab DeepSeek agent rollout DeepSeek V4 Pro GA: verify Responses API, thinking effort, and peak pricing before rollout Pin the 0813 snapshot, test Codex and tool state, map low/high/max effort, convert UTC price windows, and compare Pro with Flash by accepted-task cost. By Ahab Portable AI agent plugins Qwen Code 0.21.11: install Agent Plugins v1 without assuming every capability works Separate native package loading from runtime compatibility, test Skills and MCP beside ignored components, and gate path, credential, state, and rollback boundaries. By Ahab AI gateway stream reliability Claude Code 2.1.229: keep Vertex and Bedrock gateway streams alive during long thinking Map the gateway path, correlate one session, prove SSE liveness across the old idle boundary, classify failures, and roll out without hiding total-timeout or auth problems. By Ahab AI browser memory debugging Chrome DevTools MCP 1.7: debug memory leaks without reading raw heap snapshots Capture three heap snapshots, isolate retained growth by context and object, follow the retaining path, replay the fix, and close every snapshot. By Ahab Local AI coding privacy GitHub Copilot for JetBrains: use Ollama without confusing local inference with local memory Prove Ollama serves the selected model locally, audit Copilot Memory separately, test fail-closed behavior, and keep both controls reversible. By Ahab AI action sandbox recovery Claude Code 2.1.227: restore Bash in Claude Code Action without dropping the sandbox Verify the fixed CLI actually restores Bash under allowed_non_write_users, keep subprocess isolation on, and gate rollout with six canaries. By Ahab AI agent LAN access security Qwen Code 0.21.9 Local Control: pair a phone without exposing your agent Use a trusted-LAN threat model, verify the QR token and active-session handoff, run six canaries, and prove clean revocation before phone access. By Ahab AI API latency economics GPT-5.6 Fast mode long context: price the 272K threshold before rollout Compare Standard and Fast prices above 272K, verify the returned service tier, ramp traffic safely, and gate adoption on cost per accepted result. By Ahab AI approval automation security Codex CLI 0.147 --approve-for-me: verify Auto-review before unattended runs Keep workspace-write boundaries, test denials and fake-secret handling, verify resume and fork parity, and retain one-command rollback with six canaries. By Ahab Managed agent cost control Claude Managed Agents session budgets: prove the hard stop before unattended runs Size a list-cost cap, measure multiagent overshoot, verify budget_reached events, and gate every resume decision with six canaries. By Ahab AI workspace trust security Qwen Code 0.21.8: verify nested workspace trust before loading project env Test most-specific trust precedence, safe-mode parity, and both parent/child env paths before restoring unattended qwen serve workflows. By Ahab AI agent infrastructure security Claude Code 2.1.224 self-hosted environments: verify the trust boundary before rollout Map what stays local, isolate each runner and credential, deny egress, verify session identity, and test failure recovery before production. By Ahab AI model rollout verification Kimi K3 in GitHub Copilot: verify rollout status before enabling it Reconcile the paused rollout, live docs, plan, policy, picker, pricing, and five bounded canaries before changing a team workflow. By Ahab AI agent permission security Claude Code 2.1.223: verify the permission-bypass fixes before restoring autonomy Upgrade every launcher, keep bypass mode disabled, and run harmless Unicode, command-parser, agent-policy, and workflow-sandbox canaries. By Ahab AI spend observability Cloudflare AI Gateway User Insights: attribute spend before chasing anomalies Establish identity coverage, investigate session-cost anomalies, add per-user budgets, and test every 429 and billing boundary. By Ahab AI platform infrastructure OpenAI Terraform provider: import API resources without destructive drift Inventory ownership, import existing resources, require a no-op plan, separate credentials, and test each removal behavior. By Ahab AI connector security Cursor Google Workspace plugins: connect Gmail, Drive, and Calendar safely Inventory the live MCP tools, isolate untrusted content, stage writes, and keep final sends and edits behind human review. By Ahab MCP replay safety Qwen Code 0.21.5: stop duplicate MCP writes after disconnects Force a post-commit disconnect, verify trust and annotations, and reconcile unknown outcomes before any MCP write is retried. By Ahab AI agent credential security Claude Code 2.1.221: mask credential files before sandboxed commands read them Use structured extraction, narrow injection hosts, disposable sentinels, and eight fail-closed gates before authenticated sandbox rollout. By Ahab Multi-agent prompt isolation Qwen Code 0.21.4: test forked subagent prompt isolation Use three disposable sentinels, bounded history inspection, and eight rollout gates before trusting same-turn parallel forks. By Ahab Codex model migration Codex GPT-5.4 retirement: migrate signed-in workflows to Terra or Luna Inventory workspace defaults, saved settings, managed policy, custom agents, and scheduled tasks without rewriting unaffected API routes. By Ahab AI coding agent security Devin Local 3.6.27: test the symlink write boundary before auto-approving edits Verify the four protected native tools with a disposable sentinel lab, then keep shell writes and undocumented paths behind separate controls. By Ahab AI code review verification Qwen Code 0.21.3: verify PR test plans before trusting /review Validate Test Plan claims, replay failures against the merge base, and prove the test harness before accepting an AI review verdict. By Ahab Embodied AI migration Gemini Robotics ER 2 vs Streaming: migrate before ER 1.6 shuts down Choose the standard or Streaming endpoint, calculate the 2x token-price change, and pass eight physical-action safety tests before August 31. By Ahab AI video API rollout Grok Imagine Video 1.5: verify reference images and 1080p before rollout Resolve the release-to-doc mismatch, calculate per-clip cost, and pass an eight-case API canary before shipping. By Ahab AI coding plan decision Cursor Start vs Pro in India: test the ₹649 plan before treating it as cheap Pro Compare the confirmed plan boundaries, then use a 12-task, seven-day accepted-work test instead of guessing from an undisclosed quota. By Ahab Open-model deployment Kimi K3 local deployment: check hardware before downloading 1.56 TB Use the weight-file total, 64+ accelerator guidance, license, engine, context, and seven deployment gates to decide whether self-hosting is realistic. By Ahab AI review finalization Qwen Code 0.21.1: stop polling CI inside AI review agents Split AI code judgment from CI waiting with a commit-bound handoff, deterministic finalizer, closed-green gate, and eight acceptance tests. By Ahab Mobile AI code review Cursor for iPad: review cloud-agent PRs without merging blind Bind evidence to the current commit, review by risk, keep feedback bounded, and pass eight gates before merging a Cursor agent PR from iPad. By Ahab AI coding plugin rollout Codex CLI 0.146 Agent Plugins: migrate manifests and publish safely Choose the smallest plugin shape, separate portable and Codex-only manifests, test a local marketplace, gate workspace publishing, and pass eight rollout checks. By Ahab AI speech-to-text workflow GPT Transcribe vs GPT Live Transcribe: choose the right speech-to-text workflow Route completed files and live audio correctly, test context hints, reconcile streaming events, and keep specialized fallbacks with eight production gates. By Ahab MCP implementation migration Cloudflare Agents 0.20: migrate to MCP SDK v2 without breaking legacy clients Choose a stateless or temporary legacy lane, pin the exact MCP SDK, verify edge and OAuth boundaries, and drain old sessions with eight canaries. By Ahab AI agent governance GitHub Copilot managed settings: govern the app and cloud agent safely Separate app access from runtime controls, verify key coverage across clients, and roll out plugin and approval guardrails with six canaries. By Ahab AI agent verification Qwen Code 0.21 Goal evidence: verify completion before trusting it Classify evidence provenance, bind it to one Goal revision, cap the packet, verify independently, and keep human authority over terminal decisions. By Ahab AI coding workflow GitHub Copilot for Linear: a safe issue-to-draft-PR checklist Turn one bounded Linear issue into a reviewable draft PR with explicit branch, test, permission, cost, and rollback gates. By Ahab Claude Code security Claude Code 2.1.219: lock sandbox network egress with a strict allowlist Inventory required hosts, prove the deny path, keep MCP separate, and run a reversible canary before trusting a Claude Code sandbox network policy. By Ahab AI agent dependency migration Cloudflare Agents SDK + AI SDK v7: a safe package-pair migration checklist Match peer majors, test one real agent path, run a canary, and keep a lockfile rollback before moving a Cloudflare Agents app to AI SDK v7. By Ahab AI coding model rollout Claude Opus 5 in GitHub Copilot: a safe model rollout checklist Verify access, select bounded repository tasks, compare evidence, cap the trial, and keep a rollback path before making Claude Opus 5 part of a Copilot workflow. By Ahab AI issue automation GitHub Issue Agent Automations: confidence and approval rollout checklist Start GitHub Issue AI triage with suggestions, a narrow action matrix, confidence thresholds, rationale review, and an eight-issue canary. By Ahab MCP protocol migration MCP 2026-07-28: migrate to stateless requests with conformance tests Replace protocol sessions with self-contained requests, preserve explicit application state, run official conformance tests, and stage a seven-case reversible rollout. By Ahab AI agent orchestration Grok Build Workflows: fan out parallel agents with verification Choose the right task shape, design independent verification, cap fan-out, lock permissions, and run a six-case canary before saving a reusable workflow. By Ahab AI cost control OpenAI API hard spend limits: cap cost without a surprise outage Set organization and project caps with early alerts, quota-aware 429 handling, safe fallbacks, and a six-case failure drill. By Ahab AI model routing Cursor Router: choose Cost, Balance, or Intelligence with an eval gate Choose an Auto mode with a 30-task eval, accepted-change economics, visible model attribution, six canary tests, and fixed-model rollback. By Ahab Gemini API migration Gemini 3.6 Flash vs 3.5 Flash-Lite: migrate and route by task Choose each model by workload, remove deprecated API fields, calculate accepted-task cost, and stage a six-case reversible rollout. By Ahab Claude Code operations Claude Code 2.1.217: cap subagent concurrency, depth, and spend Control subagent breadth, nesting, and print-mode budgets with conservative workload profiles, five safe rollout tests, evidence, and rollback gates. By Ahab AI model rollout Kimi K3 API: test context, cost, agent loops, and rollout Adopt Kimi K3 with a model-routing table, cost worksheet, correct history and tool-loop contracts, multimodal limits, and a seven-case rollout gate. By Ahab Computer-use agents Qwen CUA Driver 0.7.3: test coordinates and MCP payload filtering Validate opt-in coordinate mapping and reversible MCP text filtering with a five-case rollout gate covering pixel, zoom, binary, signing, and rollback boundaries. By Ahab Claude Code security Claude Code 2.1.216: test sandbox and worktree boundaries Upgrade safely with a five-case regression matrix for filesystem exceptions, network egress, worktree redirects, symlink writes, and resumed-agent restrictions. By Ahab AI model rollout Grok 4.5 for coding agents: evaluate cost, tools, and rollout Test Grok 4.5 on real repository tasks with explicit reasoning, a seven-case eval, the 200k context price boundary, and staged promotion gates. By Ahab Claude Code workflow Claude Code verification: run /verify and /code-review explicitly Claude Code 2.1.215 stopped invoking two review skills automatically. Rebuild a reliable finish gate with explicit commands, deterministic CI, and recorded evidence. By Ahab Agent memory migration Claude agent memory: migrate before July 22 Update memory-store headers, path prefixes, depth, ordering, and saved cursors before the list API behavior changes. By Ahab AI code review GitHub Copilot code review: custom instructions, firewall, and runners Configure head-branch instructions, a dedicated review environment, firewall allowlists, and runner boundaries without treating AI comments as merge approval. By Ahab Supply chain security Dependabot cooldown: configure the new 3-day default Choose a Dependabot cooldown policy, configure narrow exceptions, avoid invalid zero-day settings, and keep a dependency PR merge gate. By Ahab AI security workflow GitHub Copilot security review vs code scanning autofix Choose when to run Copilot /security-review, PR code review, AI security detections, CodeQL, and agentic autofix without losing human merge evidence. By Ahab AI crawler policy Cloudflare AI bot policies for indie sites Separate Search, Agent, and Training crawlers before changing Cloudflare AI bot settings, with a path-by-path policy matrix for indie sites. By Ahab Agent-ready web WebMCP agent-ready website security checklist Choose a safe first WebMCP tool, keep website actions bounded, and test the browser-agent contract with DevTools and Lighthouse. By Ahab AI application security CodeQL system prompt injection fix checklist Find untrusted data in system prompts and tool descriptions, choose the right fix, and close the alert with evidence. By Ahab AI coding workflow GitHub Copilot VS Code control checklist Use repository overviews, browser tools, parallel sessions, model choices, and cost visibility without losing review evidence. By Ahab AI model migration GitHub Models retirement migration checklist Find every dependency, choose a replacement provider, test brownouts, and cut over before GitHub Models shuts down on July 30. By Ahab AI model workflow GPT-5.6 Sol vs Terra vs Luna A practical model-choice guide for routing hard reasoning to Sol, everyday AI work to Terra, and high-volume tasks to Luna. By Ahab AI search SEO llms.txt vs robots.txt for AI search A practical decision guide for using llms.txt as an agent-readiness map while keeping robots.txt as the policy layer for AI search, training crawlers, and user-triggered fetches. By Ahab AI model workflow GPT-5.6 model preview migration checklist Official GPT-5.6 Sol, Terra, and Luna facts plus a practical indie developer checklist for model routing, fallbacks, evals, prompt caching, and agent permissions. By Ahab Developer tools security Sandbox an AI coding agent before opening an untrusted repo A practical zero-trust checklist for scanning untrusted repos, isolating secrets, limiting network access, reviewing scripts and MCP config, and verifying agent changes before setup. By Ahab AI coding workflow Chrome DevTools MCP for AI coding agents A practical debugging workflow for using Chrome DevTools MCP with AI coding agents: browser evidence first, bounded sessions, Playwright handoff, and merge-ready verification. By Ahab Developer tools security Vet npm packages before installing them in AI-built apps A practical npm dependency intake workflow for checking AI-suggested packages, install scripts, provenance, OSV data, and lockfile risk before running npm install. By Ahab AI coding workflow AGENTS.md vs CLAUDE.md vs Copilot instructions A practical setup guide for deciding where AI coding-agent rules belong across Codex, Claude Code, Cursor, GitHub Copilot, scripts, hooks, and checks. By Ahab Build in public Why my Product Hunt launch failed: 10 votes, 1 download A candid indie-developer launch recap on low Product Hunt votes, weak conversion, no vote-buying, and what to fix after a failed launch. By Ahab Social preview SEO Slack OG image not showing: debugging checklist A practical workflow for fixing missing Slack preview images by checking raw HTML, image delivery, redirects, headers, and cache behavior. By Ahab AI search SEO AI search SEO checklist for indie sites A practical checklist for adapting indie product pages to Google AI Overviews and AI Mode without chasing GEO hacks. By Ahab macOS utility Locating the input position on macOS A real debugging note on Accessibility caret bounds, Electron edge cases, coordinate systems, and working with an AI agent without letting it guess. By Ahab macOS utility Building Paste Switch from idea to macOS app A build-in-public story about product scope, clipboard watching, shortcuts, replacement logic, and macOS permissions. By Ahab AI workflow Build a Record & Replay Mac app A technical product plan for browser + desktop recording, semantic replay, BYOK models, privacy, and distribution. By Ahab AI workflow Codex Record & Replay principles Understand how a demonstrated workflow becomes a reusable skill and how to build a browser + computer-use MVP. By Ahab Build in public Building MD+HTML Reader in public A first indie product launch, from local reader to payment, analytics, updates, and promotion. By Ahab AI docs Read AI-generated Markdown and HTML on Mac A practical workflow for reviewing plans, reports, Mermaid diagrams, and HTML artifacts. By Ahab

Free tools

View all