https://umesh-malik.com/blog Articles on AI engineering, GenAI applications, LLMs, RAG pipelines, and modern software development en-us Mon, 17 Aug 2026 17:00:39 GMT https://umesh-malik.com/blog/ai-writing-policy-for-engineers An AI writing policy for engineers works only if it governs accountability, not tool use. The five-line template, the mechanism behind it, five review checks. Mon, 17 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/ai-writing-policy-for-engineers Career & Productivity Technical Writing Engineering Culture AI Policy Documentation Productivity LLM ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/remove-cloudflare-beacon-min-js Remove Cloudflare beacon.min.js for good: the disable toggle hides behind adding your site to Web Analytics first, and no-transform is the stronger lever. Mon, 17 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/remove-cloudflare-beacon-min-js Web Engineering Cloudflare Web Performance Content Security Policy Privacy Web Engineering Edge Computing ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/fix-eevdf-latency-regression-sched-ext Your p99 got worse after a kernel upgrade and nothing else changed? That is an EEVDF latency regression. Meta cut p99 28% with a two-pool sched_ext policy. Sun, 16 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/fix-eevdf-latency-regression-sched-ext Web Engineering Linux Performance Kernel Tail Latency eBPF Infrastructure ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/how-dna-wires-a-brain How DNA wires a brain: a ~10B-bit genome must wire 100 trillion connections. The scheme that closes the gap in 300M bits, and why two simpler plans fail first. Sun, 16 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/how-dna-wires-a-brain AI Engineering Neuroscience Information Theory AI Engineering Algorithms Connectome Computational Biology ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/zero-downtime-database-migration-dual-writes A zero downtime database migration is five feature-flagged phases, not a cutover. P95 said 4x slower, P90 said 17x, and the comparison code took a region down. Sun, 16 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/zero-downtime-database-migration-dual-writes Web Engineering Databases Infrastructure Migration Observability Platform Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/cloudflare-access-for-workers Cloudflare Access for Workers checks requests before your code runs — no JWT validation. The three scopes, the local-dev config, and what it still misses. Sat, 15 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/cloudflare-access-for-workers AI Security Cloudflare Cloudflare Workers Zero Trust AI Security Authentication Edge Computing ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/qwen3-8-27b-vram-kv-cache-math Qwen3.8 27B VRAM math: 25.9 GiB of FP8 weights plus 16 GiB of KV cache at 262,144 tokens, not 64. The arithmetic, and where a 48 GB card breaks. Sat, 15 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/qwen3-8-27b-vram-kv-cache-math LLM Engineering LLM Inference vLLM Qwen KV Cache Long Context Linear Attention GPU ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/cut-agent-tool-call-cost-prompt-rewrite Agent tool call cost jumped after you gave it better tools? GitHub hit that on Copilot code review and won ~20% back with a prompt rewrite, not new tools. Fri, 14 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/cut-agent-tool-call-cost-prompt-rewrite AI Coding Agents & DX AI Coding Agents Agent Design Developer Tooling Prompt Engineering Code Review Evaluation ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/kubernetes-on-bare-metal-cloud-integrations Run Kubernetes on bare metal and four integrations become yours: node identity, LoadBalancer IPs, provisioning, storage. Oxide shipped three; one is blocked. Fri, 14 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/kubernetes-on-bare-metal-cloud-integrations Web Engineering Kubernetes Infrastructure Bare Metal Storage Networking Platform Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/research-spike-as-running-code A research spike should ship as running code, not a design doc. alchemy-utils surfaced 8 engine blockers a doc would miss, and priced the fix at 3-5 weeks. Thu, 13 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/research-spike-as-running-code AI Coding Agents & DX Engineering Practice AI Coding Agents Prototyping Databases SQLAlchemy Developer Tooling ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/verify-ai-crawler-ips-not-user-agents Verify AI crawler IPs instead of trusting the User-Agent: the CIDR check for ClaudeBot and GPTBot, and the three published lists that are over a year stale. Thu, 13 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/verify-ai-crawler-ips-not-user-agents AI Security AI Security Web Crawlers Bot Verification Agentic Web robots.txt ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agent-context-compaction-what-survives Agent context compaction drops every block before the summary at 150K tokens. What survives, what instructions silently replaces, and the usage field that lies. Wed, 12 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/agent-context-compaction-what-survives AI Engineering AI Agents Context Engineering Claude API Agent Architecture LLM Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/on-device-ai-without-breaking-e2ee Local inference is the easy half of on-device AI without breaking E2EE. The hard half is telemetry: two TEEs, k-anonymity, DP noise, and a ledger you don't own. Wed, 12 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/on-device-ai-without-breaking-e2ee AI Security AI Security Privacy Engineering On-Device ML Confidential Computing Differential Privacy ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/fix-slow-llm-inference-macos-vms LLM inference in macOS VMs collapses to 12.63 tok/s because the guest reports GPU family 5 and llama.cpp drops its matrix kernels. The check, and its limits. Tue, 11 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/fix-slow-llm-inference-macos-vms LLM Engineering LLM Inference Apple Silicon Virtualization llama.cpp Metal Sandboxing ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/learn-complex-topics-claude-code-simulations Learn complex topics with Claude Code by building a small simulation of the mechanism: the 4-step loop, the fact-check gate LLMs skip, and how to ship it free. Tue, 11 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/learn-complex-topics-claude-code-simulations AI Coding Agents & DX Claude Code AI Coding Agents Learning Developer Productivity Simulations ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/run-muse-glimmer-30b-locally How to run Muse Glimmer 30B locally: the K-Quant setup that fits a single 24GB GPU, the drafter model that triples decode speed, and where it breaks. Tue, 11 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/run-muse-glimmer-30b-locally AI Coding Agents & DX Local LLM Quantization AI Coding Agents Open Weights Speculative Decoding Meta AI ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/testing-llm-knowledge-cutoffs-opus-5 Here's how to test an LLM's knowledge cutoff with three reproducible probes — the method showing Opus 5 claims May 2026 but answers like January 2026. Tue, 11 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/testing-llm-knowledge-cutoffs-opus-5 LLM Engineering LLM Engineering Model Evaluation Claude Opus 5 GPT-5.6 AI Research Benchmarks ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/sandbox-ai-agent-internet-access AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects. Sat, 08 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/sandbox-ai-agent-internet-access AI Security AI Security AI Agents Sandboxing Supply Chain Security Model Evaluation ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/vllm-throughput-tuning-flags vLLM throughput tuning starts with KV cache blocks, not a bigger GPU. The four flags that decide your tokens/sec, and the one that quietly backfires. Sat, 08 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/vllm-throughput-tuning-flags LLM Engineering LLM Engineering LLM Inference vLLM GPU Performance ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue 409,000 approve/deny decisions show humans miss 1 in 3 agent threats, and 52.5% of npm-shaped exfiltration. The AI agent permissions config that works instead. Fri, 07 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue AI Security AI Security AI Coding Agents Claude Code Permissions Sandboxing Developer Tooling ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/ai-gateway-for-workers-ai AI Gateway for Workers AI is now one argument on env.AI.run. What it logs instantly, why caching stays off until you ask, and the 60-second TTL floor. Fri, 07 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/ai-gateway-for-workers-ai AI Engineering AI Engineering Cloudflare Workers AI Observability Edge Computing LLM Infrastructure ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/datasette-sql-injection-patch The Datasette SQL injection patched in 1.0a38 and 0.65.3 leaks private tables via unescaped filter columns. The check, upgrade, and why execute-sql is no fix. Fri, 07 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/datasette-sql-injection-patch Web Engineering Web Engineering Security SQL Injection SQLite Datasette Patch Management ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/make-your-site-agent-readable Make your site agent-readable in four layers — readable, discoverable, callable, payable. Three are build-time files; only /mcp needs a Worker. Fri, 07 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/make-your-site-agent-readable Web Engineering Agentic Web Web Engineering MCP Cloudflare SEO llms.txt ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/writing-agent-tool-instructions Agent tool instructions decide what your agent costs. GitHub kept the same grep/glob/view toolset, rewrote the guidance, and cut review cost by ~20%. Fri, 07 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/writing-agent-tool-instructions AI Coding Agents & DX AI Coding Agents Tool Design MCP Developer Tooling GitHub Copilot ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers Ads for AI agents are live. TIME serves crawlers a 42 KB markdown site with sponsored blocks; humans and Googlebot get 1.2 MB of HTML. I measured all of it. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers AI Engineering AI Agents Agentic Web Web Engineering GEO Content Provenance RAG ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/dependabot-grouped-updates-cut-pr-noise Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/dependabot-grouped-updates-cut-pr-noise Web Engineering dependabot github supply-chain-security dependency-management ci-cd developer-experience ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/parallel-agent-tool-calls-dag-harness Run agent tool calls in parallel by swapping the loop for a DAG planner: ten round trips become two levels, plus the cap, budget and critic on top. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/parallel-agent-tool-calls-dag-harness AI Engineering agent-architecture parallelism agent-harness observability python llm-engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/reinforcement-fine-tuning-small-models-retrieval Reinforcement fine-tuning let a 4B open model match GPT-5.6 Sol on retrieval at 100x lower cost. How RFT works, and when it beats prompting a frontier LLM. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/reinforcement-fine-tuning-small-models-retrieval LLM Engineering LLM Engineering Fine-Tuning RAG Reinforcement Learning Model Evaluation Cost Optimization ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/run-cicd-cloudflare-workflows Run CI/CD on Cloudflare Workflows and a GitHub Actions YAML becomes 18 lines of TypeScript. Which meter bills first, and what private beta still blocks. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/run-cicd-cloudflare-workflows AI Coding Agents & DX cloudflare ci-cd workflows developer-experience typescript platform-engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/rust-llm-policy-ai-generated-code The Rust LLM policy bans AI-created code and prose but allows AI review, analysis, and bug-finding. Here's the exact rule, why it works, and how to copy it. Thu, 06 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/rust-llm-policy-ai-generated-code AI Coding Agents & DX Open Source AI Coding Agents Rust Code Review Engineering Culture Developer Tooling ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agent-harness-design-arc-agi-3 Agent harness design decided a benchmark: OpenAI's ARC-AGI-3 score went 13.3% → 38.3% with zero model changes. What that means for your agent loop. Wed, 05 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/agent-harness-design-arc-agi-3 AI Engineering AI Agents Agent Design Benchmarks LLM Engineering Context Engineering OpenAI ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/insider-threat-offboarding-controls Insider threat offboarding controls, read through Apple v. OpenAI: retained devices, live access, and why weak offboarding also weakens your legal claim. Wed, 05 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/insider-threat-offboarding-controls AI Security AI Security Insider Threat Offboarding Trade Secrets Access Control Compliance ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/llm-abuse-detection-openai-scam-network LLM abuse detection failed at the message level and worked at the account level. OpenAI's Cambodia scam ban shows which signal actually catches misuse. Wed, 05 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/llm-abuse-detection-openai-scam-network AI Security AI Security Trust and Safety Threat Intelligence LLM Engineering Abuse Detection OpenAI ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard MCP write controls decide what your agents can break. Cloudflare's WriteGuard shows the pattern: per-tool risk tiers, agent attribution, central audit. Wed, 05 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard AI Security MCP AI Agents AI Security Cloudflare Agent Governance Audit Logging ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard How to secure MCP write tools: the spec puts confirmation on the client — the one layer you don't control. Cloudflare's WriteGuard moves the gate server-side. Wed, 05 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard AI Security MCP AI Security AI Agents Access Control Cloudflare Observability ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments Cloudflare Wallets and x402 explained: how AI agents get a spending identity, how HTTP 402 payments work, and what breaks when your agent holds a budget. Tue, 04 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments AI Engineering AI Agents Cloudflare x402 Agentic Web API Design Payments ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/fake-cve-reports-ai-slop-sqlite Fake CVE reports are now cheaper to write than to disprove. JFrog found 54 of 55 SQLite advisories fabricated by an LLM. How to spot them before you patch. Tue, 04 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/fake-cve-reports-ai-slop-sqlite AI Security AI Security Vulnerability Management Open Source SQLite LLM Failure Modes Supply Chain ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/llm-eval-framework-smevals An LLM eval framework turns vibes into scores. How smevals structures tasks, configs, runners and graders — and how to ship your first eval today. Tue, 04 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/llm-eval-framework-smevals LLM Engineering LLM Engineering Evals Prompt Engineering Developer Tooling AI Engineering Testing ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap Production-grade AI agents need more than a working demo. 353,000 signed up to learn agents; 6,000 shipped a capstone. Here's exactly what closes the gap. Tue, 04 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap AI Engineering AI Agents AI Engineering Evals Observability Developer Experience Production ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/run-70b-llm-on-4gb-gpu-airllm Run 70B LLM on 4GB GPU hardware with AirLLM's layer-by-layer inference. The VRAM math is real — you just pay for it in disk bandwidth. The honest tradeoff. Tue, 04 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/run-70b-llm-on-4gb-gpu-airllm LLM Engineering LLM Engineering LLM Inference Local LLM Quantization Open Weights Performance ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agent-to-human-delegation Agent-to-human delegation is the pattern nobody designed for: your AI messaging a coworker. Why it lands badly, and the handoff rules that fix it. Mon, 03 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/agent-to-human-delegation AI Engineering AI Agents Agent Design Human in the Loop OpenAI Developer Experience Engineering Culture ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/explorative-modeling-train-on-best-of-k Explorative modeling factors the training loop instead of generation: sample K guesses, train only on the best. 4.1x FLOP efficiency, 1.43 FID on ImageNet. Sun, 02 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/explorative-modeling-train-on-best-of-k AI Engineering Generative Models Diffusion Training Scaling Laws Research Computer Vision ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks DeepSeek V4 Flash 0731 benchmarks: same 284B/13B architecture as the preview, re-post-trained only — and it beats the 1.6T V4-Pro Preview on nine agent tests. Sat, 01 Aug 2026 00:00:00 GMT https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks LLM Engineering DeepSeek LLMs Open Weights AI Agents Benchmarks Post-Training ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/increase-seo-traffic-ai-era-techniques How to increase SEO traffic in the AI era: 10 genuine, white-hat techniques anyone can use to earn clicks and citations from ChatGPT, Perplexity and AI Mode. Wed, 29 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/increase-seo-traffic-ai-era-techniques Web Engineering SEO GEO AI Search Content Strategy Web Performance llms.txt ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/seo-in-the-ai-era-geo-playbook SEO in the AI era: what actually changed, why clicks fell 60%, and the GEO playbook to earn traffic from ChatGPT, Perplexity and Google AI Mode in 2026. Mon, 27 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/seo-in-the-ai-era-geo-playbook Web Engineering SEO GEO AI Search Content Strategy Web Performance llms.txt ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-opus-5-guide Two API changes break a Claude Opus 5 migration, and the effort parameter needs re-sweeping, not reusing. The fixes, the real cost math, and the benchmarks. Fri, 24 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-opus-5-guide LLM Engineering Claude Opus 5 Anthropic LLM AI Coding Agents Claude Code LLM Cost Optimization Model Comparison ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/rag-chatbot-nextjs-guide Build a RAG chatbot in Next.js with the AI SDK: embed the query, search pgvector, stream a grounded answer with citations, and stop hallucinations. Tue, 21 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/rag-chatbot-nextjs-guide AI Engineering RAG Next.js Vector Databases LLM Engineering AI Engineering Vercel AI SDK ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/react-server-components-guide React Server Components in 2026: the mental model that finally clicks, the use client boundary rules, and when NOT to use them — with the Web Vitals payoff. Tue, 21 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/react-server-components-guide Web Engineering React React Server Components Next.js Web Performance Core Web Vitals Web Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/vercel-ai-sdk-production-guide Vercel AI SDK in production: streaming, tool-calling, aborting generations, error retry UX, rate limiting, and cost control — the layer every tutorial skips. Tue, 21 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/vercel-ai-sdk-production-guide AI Engineering Vercel AI SDK Next.js React Streaming LLM Engineering AI Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/kimi-k3-vs-claude-fable-5 Kimi K3 beats Claude Fable 5 on cost by a wide margin and loses on agentic tasks. The benchmarks that decide it, and how to run K3 where it actually wins. Sun, 19 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/kimi-k3-vs-claude-fable-5 LLM Engineering AI Kimi K3 Claude Moonshot AI LLMs Open Source Benchmarks API ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/streaming-html-out-of-order-without-javascript Streaming HTML out of order without JavaScript: how Declarative Partial Updates and Declarative Shadow DOM reorder content natively in Chrome 148. Tue, 14 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/streaming-html-out-of-order-without-javascript Web Engineering HTML Web Platform Performance Streaming Web Engineering Browsers ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/chatgpt-apps-sdk-super-app-guide The ChatGPT Apps SDK explained: how apps in ChatGPT work, why it's built on MCP, who the launch partners are, and how developers build and submit apps. Sat, 11 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/chatgpt-apps-sdk-super-app-guide AI Engineering AI OpenAI ChatGPT Apps SDK MCP AI Agents Developer Tools ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/gpt-5-6-sol-vs-terra-vs-luna GPT-5.6 Sol vs Terra vs Luna compared on price, coding, latency, and cost per task — plus a routing strategy that cuts your bill without wrecking quality. Sat, 11 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/gpt-5-6-sol-vs-terra-vs-luna LLM Engineering AI OpenAI GPT-5.6 API AI Agents LLMs LLM cost optimization ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/openai-gpt-5-6-sol-terra-luna-guide GPT-5.6 API pricing ($1–$30/1M), the Ultra and Max thinking modes, and a 1.05M context window that is shared — with the fine print that breaks agent loops. Sat, 11 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/openai-gpt-5-6-sol-terra-luna-guide LLM Engineering AI OpenAI ChatGPT GPT-5.6 API AI Agents LLMs Machine Learning ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/build-enterprise-ai-agents-free How to build enterprise-grade AI agents for free in 2026: a hands-on MaxKB + local LLM guide to RAG precision, security, and $0 API cost. Wed, 08 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/build-enterprise-ai-agents-free AI Engineering AI Agents MaxKB Open Source RAG Self-Hosting GenAI 2026 ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/http-query-method-rfc-10008-guide RFC 10008's HTTP QUERY method is safe, idempotent, and cacheable like GET but carries a body like POST. What it fixes and where it works today. Fri, 03 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/http-query-method-rfc-10008-guide Web Engineering HTTP QUERY Method RFC 10008 REST API Design HTTP API Caching GraphQL Web Standards ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-fable-5-guide Claude Fable 5 is Anthropic's most capable model yet. The honest deep-dive: capabilities, the $10/$50 cost math, API behavior, and when to use it. Thu, 02 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-fable-5-guide LLM Engineering Claude Fable 5 Anthropic LLM AI Coding Agents Agentic AI LLM Cost Optimization Claude API ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-sonnet-5-guide Claude Sonnet 5 for coding lands near Opus level at Sonnet prices — until the tokenizer change moves your bill. The real cost math, and when it beats Opus 4.8. Wed, 01 Jul 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-sonnet-5-guide LLM Engineering Claude Sonnet 5 Anthropic LLM AI Coding Agents Claude Code LLM Cost Optimization Model Comparison ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-code-auto-mode-production-field-report I ran Claude Code auto mode in production for a week — where it's reliable, where it broke, real token costs from my usage logs, and my honest verdict. Thu, 25 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-code-auto-mode-production-field-report AI Coding Agents & DX Claude Code AI Coding Agents Auto Mode Developer Productivity Production Engineering AI Pair Programming DevEx ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-code-vs-cursor-production-work-2026 Claude Code vs Cursor for production, field-tested on real shipping tasks: a working engineer's decision table, failure modes, pricing, and which to use when. Thu, 25 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-code-vs-cursor-production-work-2026 AI Coding Agents & DX Claude Code Cursor GitHub Copilot AI Coding Agents Developer Tooling AI Pair Programming DevEx ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/use-claude-code-codex-for-free The honest answer to using Claude Code and Codex for free in 2026: what's truly $0, what isn't, the best free AI coding CLIs, and how to cut your bill. Tue, 23 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/use-claude-code-codex-for-free AI Coding Agents & DX Claude Code Codex Gemini CLI GitHub Copilot AI Coding Agents Developer Tools ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/fastapi-spa-app-frontend-explained FastAPI 0.138.0 ships app.frontend() — a native way to serve React, Vue, and Svelte SPA builds. How it works, real use cases, and what it still can't do. Sun, 21 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/fastapi-spa-app-frontend-explained Web Engineering FastAPI Python SPA Backend Web Engineering Starlette ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready Agentic browsing in PageSpeed Insights grades your site for AI agents, not just humans. What the category checks, why Google added it, how to pass it. Fri, 19 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready AI Engineering Agentic Browsing PageSpeed Insights AI Agents GEO Web Performance llms.txt ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026 Only 23% of autonomous AI agents reach production in 2026. The demo-to-production gap, why agents fail, and the playbook the winners actually use. Sun, 14 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026 AI Engineering AI Agents Agentic AI LLM Engineering AI in Production GenAI 2026 ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-fable-5-streaming-microservice-one-day Claude Fable 5 in auto mode built my entire HLS streaming microservice in under a day — AWS infra, security, backend, frontend, CI/CD, migrations, runbooks. Sat, 13 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-fable-5-streaming-microservice-one-day AI Coding Agents & DX Claude Fable 5 Claude Code AI Coding Agents AWS Video Streaming HLS Microservices Terraform CI/CD ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/build-rag-pipeline-from-scratch Build a RAG pipeline from scratch: chunking, embeddings, retrieval, reranking, grounded generation, and the production patterns that decide whether it works. Mon, 08 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/build-rag-pipeline-from-scratch AI Engineering RAG LLM Engineering Vector Databases Embeddings GenAI AI Architecture ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/cursor-vs-claude-code-vs-copilot Cursor vs Claude Code vs Copilot in 2026 — how they actually differ in model, workflow, and autonomy, and which to use for what (I use all three). Mon, 08 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/cursor-vs-claude-code-vs-copilot AI Coding Agents & DX AI Coding Agents Claude Code Cursor GitHub Copilot Developer Tooling AI Pair Programming ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/deploy-mcp-server-cloudflare-workers Deploy an MCP server on Cloudflare Workers: wrangler.toml, the run_worker_first model, routing /mcp, local testing, and going live on the free tier. Mon, 08 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/deploy-mcp-server-cloudflare-workers AI Engineering MCP Model Context Protocol Cloudflare Workers Wrangler Edge Computing AI Tooling ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/how-to-build-mcp-server How to build an MCP server, step by step: JSON-RPC 2.0, the Streamable HTTP transport, typed tools, and agent discovery — from a real one I shipped. Mon, 08 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/how-to-build-mcp-server AI Engineering MCP Model Context Protocol AI Agents Cloudflare Workers LLM Engineering AI Tooling ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/how-to-write-claude-md How to write a CLAUDE.md that actually helps Claude Code: what to include, what to leave out, a real structure, and how to stop it from rotting. Mon, 08 Jun 2026 00:00:00 GMT https://umesh-malik.com/blog/how-to-write-claude-md AI Coding Agents & DX Claude Code CLAUDE.md AI Coding Agents Developer Tooling Anthropic ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-swap-multi-account-switcher-guide claude-swap is an open-source CLI that switches Claude Code accounts in seconds — no browser re-login. How it works, how to use it, and what it misses. Sat, 30 May 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-swap-multi-account-switcher-guide AI Coding Agents & DX Claude Code Claude Developer Tools CLI OAuth Productivity Open Source Python ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/claude-code-leak-march-2026 The Claude Code leak of March 31, 2026, explained: what the source-map exposure revealed, Anthropic's DMCA sweep, and the fallout. Thu, 02 Apr 2026 00:00:00 GMT https://umesh-malik.com/blog/claude-code-leak-march-2026 AI Security Anthropic Claude Code Security Open Source DMCA Supply Chain AI Ethics ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/axios-compromised-npm-cross-platform-rat Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery. Tue, 31 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/axios-compromised-npm-cross-platform-rat AI Security Axios npm Security Supply Chain Security DevSecOps JavaScript Node.js Open Source Security Malware ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/nvidia-openclaw-strategy-ai-agent-plan At GTC 2026, Jensen Huang said every company needs a Nvidia OpenClaw strategy. Here is what it means and what U.S. teams should do next. Tue, 17 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/nvidia-openclaw-strategy-ai-agent-plan AI Coding Agents & DX AI NVIDIA OpenClaw NemoClaw AI Agents Enterprise AI GTC Agentic AI ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/chatgpt-adult-mode-delay-guide ChatGPT adult mode is still delayed — OpenAI's official status, what the feature would allow, why it was pushed back, and answers for parents. Mon, 16 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/chatgpt-adult-mode-delay-guide LLM Engineering AI OpenAI ChatGPT Online Safety Privacy Parents Consumer Tech AI Policy ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/chatgpt-interactive-math-science-visuals-guide ChatGPT interactive math and science visuals launched in March 2026: how the new learning modules work, who gets access, and why students benefit. Thu, 12 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/chatgpt-interactive-math-science-visuals-guide LLM Engineering AI OpenAI ChatGPT Education EdTech Math Science Students ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/anthropic-code-review-claude-code-guide Anthropic's Claude Code Review runs multi-agent PR reviews for $15-$25 each. How it works, pricing, REVIEW.md setup, and where it beats linters. Tue, 10 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/anthropic-code-review-claude-code-guide AI Coding Agents & DX Anthropic Claude Code Code Review AI Agents Developer Productivity GitHub Pull Requests AI Coding Tools ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agentic-ai-enterprise-security-model Agentic AI security breaks the old enterprise trust model. How to fix identity, delegated authority, prompt injection defense, and tool-level policy in 2026. Mon, 09 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/agentic-ai-enterprise-security-model AI Security AI Agentic AI Security Enterprise Security AI Agents NIST Prompt Injection ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/openai-gpt-5-4-complete-guide GPT-5.4's native computer use and MCP tool calls are the real upgrade for agents. What holds up in a loop, what the 1M context costs, and how Pro compares. Fri, 06 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/openai-gpt-5-4-complete-guide LLM Engineering AI OpenAI ChatGPT GPT-5.4 API AI Agents LLMs Machine Learning ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/openai-gpt-5-3-instant-fewer-refusals-better-answers GPT-5.3 Instant brings 26.8% fewer hallucinations, fewer needless refusals, and better web-sourced answers — what changed and why it matters for devs. Wed, 04 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/openai-gpt-5-3-instant-fewer-refusals-better-answers LLM Engineering AI OpenAI ChatGPT GPT-5 LLMs API Machine Learning ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/deepseek-v4-release-challenge-us-ai-rivals DeepSeek V4 is expected in early March 2026. Here is what is confirmed, what remains unverified, and how it challenges U.S. AI rivals. Sun, 01 Mar 2026 00:00:00 GMT https://umesh-malik.com/blog/deepseek-v4-release-challenge-us-ai-rivals LLM Engineering AI DeepSeek China NVIDIA Huawei Open Source Geopolitics LLMs ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/rag-vs-fine-tuning-llms-2026 RAG vs fine-tuning for LLMs in 2026: a practical decision framework covering architecture tradeoffs, cost, latency, and when to use each in production. Sat, 28 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/rag-vs-fine-tuning-llms-2026 AI Engineering RAG Fine-Tuning LLM Engineering AI Architecture GenAI 2026 ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/figma-codex-react-2026 A 2026 guide to Figma to React conversion with OpenAI Codex: setup, prompts, component structure, and real production examples. Fri, 27 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/figma-codex-react-2026 AI Coding Agents & DX OpenAI Codex Figma to React AI UI Development React Architecture Frontend Performance Design to Code 2026 ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/cloudflare-vinext-next-js-vite-revolution Cloudflare viNext rebuilt Next.js on Vite for $1,100 in 7 days: 4.4x faster builds, 57% smaller bundles, already powering CIO.gov in production. Wed, 25 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/cloudflare-vinext-next-js-vite-revolution Web Engineering React Next.js Vite Performance AI Cloudflare Build Tools Developer Tools AI Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/anthropic-detecting-preventing-distillation-attacks Anthropic exposes an AI model distillation attack by DeepSeek, Moonshot, and MiniMax: 16 million exchanges, 24,000 fake accounts. The forensic breakdown. Tue, 24 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/anthropic-detecting-preventing-distillation-attacks AI Security AI Security Machine Learning AI Safety National Security DeepSeek ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/local-llm-coding-revolution-qwen3-coder-desktop Qwen3-Coder runs 80B parameters on a desktop with only 3B active per token — and plugs into Claude Code. Why the cloud-only era of AI coding is ending. Sun, 22 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/local-llm-coding-revolution-qwen3-coder-desktop AI Coding Agents & DX AI Developer Experience Open Source Tools Performance Productivity ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/spec-driven-development-ai-agents-addy-osmani Why AI coding agent prompts fail — and how spec-driven development fixes it, per Addy Osmani's 5-principle framework backed by GitHub's 2,500-config analysis. Sat, 21 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/spec-driven-development-ai-agents-addy-osmani AI Coding Agents & DX AI Developer Experience Productivity Tools Software Engineering ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/nodejs-memory-cut-in-half-pointer-compression V8 pointer compression finally lands in Node.js: one Docker image swap cuts heap memory ~50%, improves P99 latency, and can save $80K–$300K a year. Wed, 18 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/nodejs-memory-cut-in-half-pointer-compression Web Engineering Node.js JavaScript Performance V8 DevOps Cloud Computing ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/agents-md-ai-coding-agents-study A 138-repo study: AGENTS.md files hurt performance by 2-3% and raised costs 20%+. What the research found — and what actually works instead. Tue, 17 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/agents-md-ai-coding-agents-study AI Coding Agents & DX AI Developer Experience Open Source Productivity Tools ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/docker-swarm-vs-kubernetes-166-dollar-reality-check Docker Swarm vs Kubernetes: a live SaaS runs for $166/year with zero crashes in 10 years, while the average Kubernetes cluster wastes 87% of its CPU. Tue, 17 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/docker-swarm-vs-kubernetes-166-dollar-reality-check Web Engineering Docker Kubernetes DevOps Cloud Computing Infrastructure Cost Optimization ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/seedance-2-hollywood-ai-copyright-crisis ByteDance's Seedance 2.0 made a photorealistic Tom Cruise vs Brad Pitt fight from a two-line prompt — igniting Disney, Paramount, and SAG-AFTRA backlash. Mon, 16 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/seedance-2-hollywood-ai-copyright-crisis LLM Engineering AI Hollywood Copyright ByteDance Deepfakes AI Ethics ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/ai-agent-attacks-developer-matplotlib-open-source The first documented AI agent attack on an open-source maintainer: rejected on a matplotlib PR, the bot published a hit piece. Full story and lessons. Sun, 15 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/ai-agent-attacks-developer-matplotlib-open-source AI Security AI Open Source Software Engineering Python AI Ethics GitHub ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/nodejs-backend-for-frontend-developers A frontend developer's guide to building a Node.js backend: Express, REST APIs, middleware, databases, auth, and deployment — plus the mindset shift you need. Tue, 10 Feb 2026 00:00:00 GMT https://umesh-malik.com/blog/nodejs-backend-for-frontend-developers Web Engineering Node.js Backend JavaScript TypeScript API ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/frontend-career-growth-junior-to-senior From Associate Engineer to SDE-2: what actually drives frontend career growth — technical skills, soft skills, and the things nobody tells you. Thu, 08 Jan 2026 00:00:00 GMT https://umesh-malik.com/blog/frontend-career-growth-junior-to-senior Career & Productivity Career Frontend Software Engineering Growth ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/core-web-vitals-optimization-guide A hands-on guide to optimizing Core Web Vitals (LCP, INP, CLS). Covers measurement, diagnosis, and specific fixes with before/after examples from real projects. Wed, 12 Nov 2025 00:00:00 GMT https://umesh-malik.com/blog/core-web-vitals-optimization-guide Web Engineering Performance Core Web Vitals SEO Frontend ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/developer-productivity-tools-senior-engineers A senior engineer's real stack of developer productivity tools — editor, terminal, code review habits, and focus systems that cut daily friction. Fri, 05 Sep 2025 00:00:00 GMT https://umesh-malik.com/blog/developer-productivity-tools-senior-engineers Career & Productivity Productivity Tools Developer Experience Workflow ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/frontend-testing-strategies-2025 Practical frontend testing strategies for 2025: component tests, integration, E2E, and the patterns that give the most confidence per line. Thu, 10 Jul 2025 00:00:00 GMT https://umesh-malik.com/blog/frontend-testing-strategies-2025 Web Engineering Testing React TypeScript Frontend Vitest ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/tailwindcss-v4-migration-guide TailwindCSS v4 migration, done right: every breaking change, the new CSS-first @theme config that replaces tailwind.config.js, and a step-by-step upgrade path. Tue, 20 May 2025 00:00:00 GMT https://umesh-malik.com/blog/tailwindcss-v4-migration-guide Web Engineering TailwindCSS CSS Frontend Migration ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/javascript-es2024-features-you-should-know The most impactful ES2024 features: Array grouping, Promise.withResolvers, well-formed Unicode strings, and the RegExp v flag — with practical examples. Sat, 15 Mar 2025 00:00:00 GMT https://umesh-malik.com/blog/javascript-es2024-features-you-should-know Web Engineering JavaScript ES2024 ECMAScript Frontend ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/typescript-utility-types-complete-guide TypeScript utility types explained: Partial, Pick, Omit, Record, Exclude, ReturnType and more — with real examples, a cheat sheet, and common pitfalls. Sun, 15 Dec 2024 00:00:00 GMT https://umesh-malik.com/blog/typescript-utility-types-complete-guide Web Engineering TypeScript JavaScript Frontend Type Safety ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/react-performance-optimization-techniques React performance optimization techniques — memoization, code splitting, virtualization, and 7 more battle-tested strategies from real apps. Wed, 20 Nov 2024 00:00:00 GMT https://umesh-malik.com/blog/react-performance-optimization-techniques Web Engineering React Performance JavaScript Frontend ask@umesh-malik.com (Umesh Malik) https://umesh-malik.com/blog/sveltekit-vs-nextjs-comparison SvelteKit vs Next.js: an in-depth 2026 comparison of performance, DX, routing, and deployment, from real production experience. Thu, 10 Oct 2024 00:00:00 GMT https://umesh-malik.com/blog/sveltekit-vs-nextjs-comparison Web Engineering SvelteKit Next.js React JavaScript Frontend ask@umesh-malik.com (Umesh Malik)