Skip to content

Search

ESC

bokvi blog — AI-assisted software development

// About

Building Software with AI

Practical guides, deep dives, and honest takes on AI-assisted development. Written by a developer, for developers.

ai-coding-tools ai-agents security machine-learning ai-fundamentals productivity All posts

// Recent

Latest Posts

Stylized lightning bolt over a dark dotted grid, representing the Zig programming language
6 min

Zig in 2026: Colorless Async I/O and the Road to 1.0

Zig 0.16 lands colorless async I/O, 30ms incremental rebuilds, and a maturing toolchain. What changed, what broke, and how close 1.0 really is.

Read
zig systems-programming programming-languages
Dynamic workflows diagram: a prompt fans out to parallel agent() calls, passes an adversarial verify gate, then converges to a single synthesized result
23 min

Inside Claude Code's Dynamic Workflows

Claude Code can now write its own multi-agent harness — fanning out subagents, verifying their work, and returning one answer. A sourced deep dive.

Read
ai-coding-tools claude-code ai-agents multi-agent developer-tools
HTTP/2 Bomb banner: one connection firing thousands of tiny frames into a server whose memory overflows
22 min

HTTP/2 Bomb: Remote Memory-Exhaustion DoS (CVE-2026-49975)

A single HTTP/2 connection from a home laptop can pin tens of gigabytes of server RAM in seconds. How the AI-discovered HTTP/2 Bomb works and how to defend.

Read
security http2 cve dos web-servers ai
CVE-2026-44578 banner: Next.js WebSocket SSRF security advisory
26 min

CVE-2026-44578: Next.js WebSocket SSRF

High-severity (CVSS 8.6) SSRF in the Next.js WebSocket upgrade handler lets unauthenticated attackers proxy GETs to internal services on port 80.

Read
security nextjs cve ssrf websocket
Stack of npm packages with a compromised, cracked package leaking corruption in the middle
10 min

TanStack npm Supply Chain Attack: Detect, Fix, and Recover

On May 11, 2026, attackers published 84 malicious versions across 42 @tanstack/* npm packages. Here is how to detect compromise and recover safely.

Read
security javascript supply-chain tanstack npm ci-cd incident-response
Supply chain attack warning with broken chain links
5 min

LiteLLM Supply Chain Attack: How to Check If You're Affected

Malicious LiteLLM versions were published to PyPI on March 24, 2026. Here's what happened, how to check if you're affected, and what to do.

Read
security python supply-chain litellm pypi
A developer workspace with AI coding tools
2 min

Getting Started with AI-Assisted Development

A practical guide to using AI coding tools effectively in your development workflow.

Read
ai-coding-tools productivity
Futuristic developer workspace with AI assistants
5 min

The Next Generation of Developer Tools

How AI-native IDEs, agentic workflows, and autonomous coding are reshaping software development.

Read
ai-coding-tools productivity ai-agents
Safety system architecture with monitoring dashboard
4 min

Engineering Responsible AI Systems

Practical techniques for building AI systems with bias detection, safety guardrails, and monitoring.

Read
ai-ethics architecture code-quality
Training loss curve visualization
4 min

Fine-Tuning Models for Your Domain

When and how to fine-tune language models using LoRA, including dataset preparation and evaluation.

Read
machine-learning tutorials ai-fundamentals
Agent architecture flowchart diagram
4 min

Designing AI Agent Architectures

Patterns for building reliable AI agents with tool use, memory, and multi-step reasoning capabilities.

Read
ai-agents architecture machine-learning
Server hardware with GPU computing setup
4 min

Running AI Models Locally: A Complete Guide

How to run open-source LLMs on your own hardware using Ollama, llama.cpp, and quantized models.

Read
ai-fundamentals tutorials self-hosting
Test suite dashboard with AI insights
3 min

AI-Powered Testing: Beyond Unit Tests

How AI transforms software testing with automated test generation, property testing, and intelligent fuzzing.

Read
testing ai-coding-tools code-quality
Data pipeline architecture diagram
3 min

Building RAG Systems from Scratch

A step-by-step guide to building retrieval-augmented generation systems with vector databases.

Read
ai-fundamentals machine-learning tutorials
CI/CD pipeline visualization with AI integration
3 min

Automated Code Review with AI

How to integrate AI-powered code review into your CI/CD pipeline for consistent quality checks.

Read
ai-coding-tools code-quality devops
Code editor with AI prompt patterns
3 min

The Developer's Guide to Prompt Engineering

Practical prompt patterns and techniques for building reliable AI-powered features in production.

Read
prompt-engineering ai-coding-tools productivity
Abstract neural network visualization
4 min

How Large Language Models Actually Work

A clear explanation of transformer architecture, attention mechanisms, and tokenization for developers.

Read
ai-fundamentals machine-learning