March 28, 2026

Build Log 08: Beta Hardening.

Mar 3 — the sprint where "it works" became "it won't break."

There's a gap between a product that works when you demo it and a product that works when strangers use it unsupervised. March 3rd was about closing that gap.

Agent Tools

14 new tools. The agent can now create and manage GitHub issues, open and review PRs, do bulk file operations, and traverse git history. These aren't flashy — they're the boring connective tissue that makes the agent actually useful for daily engineering work instead of just answering questions.

Post-Approval Pipeline

This one changed the workflow. When a user approves an agent's PR, the agent now watches CI. If tests pass, it auto-merges. If they fail, it reads the logs and attempts a fix automatically. Approve once, ship automatically — that's the promise.

Surgical Edits and Memory

replace_in_file for precise code edits instead of rewriting whole files. Rolling summaries via cron to compress old conversations so the agent never loses long-running context. fetch_url tool for pulling external content. ask_user for when the agent genuinely needs human input instead of guessing.

Hardening

GitHub Actions CI workflow. Error pages that actually help. Security headers. Rate limiting. SEO basics. Row-level security on 10 public-facing Supabase tables. These are the things you skip during a build sprint and regret during a launch sprint.

Building a product is one phase. Hardening it for real users is another. This was the second one.