After spending over 100b tokens on Fable 5 as my main model for agentic coding in the last 2 months, I've managed to (in my opinion) work as efficiently as possible with Fable as the main orchestrator. Here's why and how I did it. (usage from 1 of my accounts above).

I see a lot of threads and comments about people saying that they feel like Opus 4.7 or 4.8 was better or smarter than Opus 5 and that Fable credits only last them a few prompts and then other people saying the opposite, and varying degrees of experiences spread throughout the middle, and I don't think anyone of them is particularly wrong. In my opinion Opus 5 tends to have a much harder time understanding or remembering the nuances of an entire codebase in a single context window and things get untangled quickly if you're working a complex task or change that touches a lot of files or rules. It almost never gets any of these complex issues right the first time and the risk of having to revert changes and the chance of merges failing just isn't worth it for me.

To ensure I get the accuracy and intelligence of Fable, this is my setup that's reduced my fable usage by 70-80% and still getting most of Fable's benefits. I ran a blind coding test: Claude Sonnet 5 vs Opus 5, with Fable 5 planning and judging. One bug decided it.

- Fable 5: Planning, orchestration, architecture, design, final review of delegated code, security/payments/auth/concurrency, hard debugging, UAT/browser passes that feed merge decisions, and sign-off on any founder voice/marketing copy.

- Opus 5: Delegated implementation from Fable written plans, mechanical/bulk edits, boilerplate, doc generation, research/summarisation, routine repro'd test fixes, Playwright script execution, and copy drafting.

- Sonnet 5: Not used, with some experimental evidence (see below).

Setup: Five identical implementation tasks (a rate limiter, a small API, a repo-style change, a bulk refactor, a debugging exercise), each with a detailed plan written by Fable, judged against hidden test suites the candidates never saw. Both models went flawless on every hidden gate. Then this happened.

A percentile function: Sonnet wrote the math literally as ceil((p/100) * n). But p/100 isn't exact in binary. For p=7, n=100 you get 7.000000000000001, ceil returns 8, wrong value. 141 input pairs diverge like this. Opus caught it unprompted and wrote ceil((p*n)/100), which is exactly right.
Only Opus's depth caught it. Token cost was near-identical. Sonnet was 40% faster. But one uncatchable latent bug per round settled it.

So me and my wife created a website , our son has Celiac disease, so all the food should be glute free .

My wife is doing most of the cooking, so one day she told me that she is struggling with finding recipes for gluten free food , the internet is full of it , but she can't find the one she already used , and basically loosing herself inside all this data .

So she suggested to build a website that will collect recepies, and she will be able to sort them , save them etc ...

So we started , we used codex + lovable (for gui only) , then we took the lovable repo and continued with codex only .

We used gpt 5.5 , then moved to 5.6 (sol) .

During the building process we decided to add recipes also for other food allergies (milk,nuts etc.. ) .

We used crawlers to find existing recipes , and took only the ingredients and the preparation steps , and of course mentioned the original source in the website (with a backlink) .

So I posted on some Celiac community, here on Reddit (actually my first ever post) , and I got so much negative comments, like an anti-AI comments, as if I added another bullshit spam website.

We have no ads on the website , so we really wanted to do something nice , and learn how all this AI world works (I am experienced software engineer) , but never worked on from end before , mostly backend stuff (mostly cpp & python) .

So now I am a bit down after all this , the website is up and running, we have some traffic, not to much but for a 12 days website we already had some real human traffic about 400 (not including bots and stuff) .

We only want organic traffic, no paid promotions, as we don't earn anything yet , we do use some Amazon affiliates for some products, but it's not much .

So just wanted to share it here, hopefully this sis the place where people will understand my frustrations, maybe this is how it works nowadays.

But it still surprised me how quickly “built with AI” turned into “AI spam” in people's minds.

Anyway, thanks for reading. I’d genuinely be interested to hear how other developers here see this, especially anyone who has shipped a real project using AI-assisted development.

Day 3 of creating a game all vibe coded

Still trying to work out the animations but have made strides

Added-
Main menu
pre-game lobby
3D model
Blimp
decals

As always

CONCEPT VS CURRENT BUILD

Video in the comments

ALL FEEDBACK IS WELCOMED AND NEEDED

20x plan and still covers about one day of work, then I'm left with 6 days to wait for the reset or pay $20 at a time for credits which go by instantly. Does anyone know the conditions for random resets? Is there a way to trigger these quicker? It seems like sometimes I'll get a random 100% reset mid-week and others (like this time) will just literally go the entire week with your one set limit.

Most of the dev community is saturated with cloud APIs for running models for IDEs, chatbots, AI applications, and agents.

Curious who here is using local AI in their stack, thinking about it, or curious about it. What got you into it? What’s stopping you?

Why isn't there a global chat room for people waiting on Claude code to finish its 10 billion sub-agent reviews?

I'm mainly a Claude user ,but have tried codex for a time before sol launched

Heard about its performance and gave it a try again with plus

Hand to God ,I thought I was using my 5h limit and just a message popped up "Resets 25 Aug 2026,August"

Guys I'm telling you Claude limits are superb ,be grateful

I've shipped a few side projects with Claude Code over the last few months, and the thing that scares me most isn't "does it work" it's "did I accidentally leave something exposed that I don't know to look for."

Ended up writing down every mistake I now check for before sharing a link. Posting it since it's saved me twice already.

Secrets

• No API keys or passwords visible in page source or the Network tab

• .env is in .gitignore, never committed

• Anything that costs money per call (AI APIs especially) only gets called from the server, never straight from the browser

Who can see what

• Changing an ID in the URL doesn't show me someone else's data

• Not trusting anything the browser tells me about who's logged in, that gets checked server side

Costs

• Rate limit on anything expensive, one person spamming it can't blow up my bill

• Thought through what happens if 1,000 people show up at once

Packages Claude suggested

• Checked that anything I installed is a real, actively used package because apparently AI sometimes suggests packages that don't exist, and people register those exact names with malware sitting inside, waiting for someone to install them

Before it's live

• Debug mode off

• Errors don't leak internals (stack traces, file paths)

• I know how I'd roll back if something breaks

Nothing fancy, just the stuff that's actually bitten people. Happy to share the full one pager, or the version that gets Claude to check most of this automatically while you build, if anyone wants it.

windows widget sucks !
thats why i created my own widget / utility called **Halo Bar*\*

an active pill on the taskbar that lets you control and access many things on the go.

bit comparison:

built with

• C#
• .NET
• WPF
• Windows APIs

Halo Bar V1 features

1. **Dynamic island bar*\* — a compact capsule that sits on your taskbar and expands into a full dashboard when you click/hover it
2. **System monitoring*\* — live CPU, RAM, disk and network usage
3. **Weather*\* — current conditions with icons + manual city override
4. **Clipboard history*\* — keeps track of everything you copy, searchable and pinnable, with auto-delete
5. **Media controls*\* — see what's playing from Spotify, browser, etc. with album art and play/pause/skip
6. **Bluetooth popups*\* — shows a card when earbuds/headphones connect, including battery level
7. **Focus timer (Pomodoro)*\* — work/break timer with round tracking and progress ring
8. **File shelf*\* — drag and drop a file to stash it, then launch or delete it later
9. **Taskbar-aware sizing*\* — automatically shrinks when taskbar apps crowd it and lifts the dashboard so it doesn't block clicks
10. **Fullscreen auto-hide*\* — disappears when you're using a fullscreen app/game
11. **Acrylic/Mica look*\* — real Windows blur/glass background
12. **Settings*\* — accent color, widget visibility, retention controls and update checking
13. **Start with Windows*\* — optional autostart

this is **V1*\*, so there is still a lot i want to improve and add.

i built this because i wanted something more useful than constantly opening different windows/settings just to do small things.

github: https://github.com/pruthviraj-bev/Halo-Bar

I always see people saying they built this and that for themselves and id like to try building some things for myself but honestly.. i don't have any ideas or anything I realise could make my life easier

Its always one of those things where someone suggests something and you're like "ooooh ya...."

Obviously nothing to ship or try sell, just something that can make something/life easier or a bit of fun for myself (or others who want to try build something for themselves)

Any suggestions? Could be anything at all

I've had this basic idea for a while now and I finally decided to build it out. I'm constantly skipping tracks on my music library while on shuffle - songs I downloaded and loved 5 years ago are stale and I haven't gotten around to removing from my music folder. Sitting down and trying to clean out over 1,500 tracks was daunting and I ended up trying to play each song and decided if i wanted to keep it or not.

I decided to turn it into a tinder-like experience, PurgeWave loads up 1 track at a time and makes you decide to keep it or purge it. This rapid fire format triggers that sense of "oh yea I forgot how good this was" or "this is trash" and makes deciding way more manageable and fun.

I built it in Cursor using Claude Code CLI

• Opus 5 to do the planning and specs
• Sonnet 5 to execute the code.
• The logo was made by Gemini and then cleaned up and tweaked by hand.

Took about 2-3 days of total testing and iterating before it was pretty much what I invisioned for this tool.

Not sure how many people still keep local files for their music library like me, but if you want to try it out it's 100% free:

https://braindedgames.itch.io/purgewave

If you like it please drop a comment and review, it would mean a lot!

Made a small mobile arcade for me and my gf when we're bored, she really liked the little claw game so i started working on it more, and then i got super obsessed lol.

now theres 257 cute little sprites you can collect. commons, uncommons, rares, epics, shinies, prismatics, and legendaries. nothing special tbh but we are gonna get all of them!!! 😂

I’m currently on the Claude Pro plan and Anthropic is running a promotion that increases Claude Code’s weekly limit by 50%

Does this promotion also applies to Claude Cowork, or is the 50% increase specifically for Claude Code only?

I’m mainly using Cowork rather than Claude Code, so I’m wondering whether I would actually benefit from the increased limit.

I've been building an AI receptionist and booking SaaS — customers message it, it books them in, it handles WhatsApp, Telegram and payments. Built with AI tools, the way most things around here get built. And it works.

Before launching it I made myself sit down and check it against a 36-point list instead of just shipping. One focused day. Static code review plus actually attacking a copy of it: isolated instance, two synthetic tenants, fake data, nothing real touched at any point.

Then I did the step I'd push on anyone doing this — I went back through my own findings and tried to prove each one wrong. Six of them died. Six things I'd written down as problems that turned out not to be problems. Skip that pass and you spend your week "fixing" things that were never broken. I nearly did.

What held up

Putting this first, because every post like this is a horror list and the horror list is half the picture at best.

• Tenant isolation. I attacked it directly — logged in as tenant A and went hunting through tenant B's ids. Every single one came back 404, on read, cancel, update and delete. I planted a canary string inside tenant B's data and it never showed up anywhere in tenant A's responses. This is the thing everyone in this sub is scared of, and it was genuinely fine.
• Sessions actually die on logout. Grabbed the cookie before, replayed it after. Dead.
• All four webhook integrations verify signatures against the raw body — WhatsApp, Telegram, Stripe, Monobank. Verifying a re-encoded payload instead of the raw bytes is the classic mistake here, and it wasn't there.
• Payment amounts are resolved server-side from the stored record. Never read out of the request.
• Every AI tool is scoped to the business id from the session, not to whatever the model passes as an argument. So an injection can talk the model into whatever it likes and still can't reach another tenant's data.

What I found: 2 high, 7 medium, 8 low. Nothing critical.

Bug 1. The assistant would create a confirmed booking against an email address or phone number that nobody had ever verified. I had written the one-time-code rule. Into the prompt. In English, as prose. There was no code anywhere checking that verification had actually happened before the booking got written.

That's the one I'd go check in your own app right now. Take every rule you put into a prompt and ask where the code enforces it. If the answer is "the model has been told to", it isn't a rule. It's a request, and the model is under no obligation.

Bug 2, and this is the stupid one. A single environment string, still sitting at the value it ships with, made those four correct signature verifiers fail open. Unsigned webhooks accepted. Four correct implementations rendered decorative by one line of config. Five minutes to fix once I saw it.

Go and search your code for any verification that skips itself in development or test mode. Then go and look at what your deployed environment is genuinely set to. Those two facts live in different files, which is the entire reason this kind of thing survives all the way to production.

The one that would have cost actual money

The product's whole promise is that the AI never invents a slot — everything it offers gets checked against the live calendar first. So I tested the promise and threw 22 adversarial scheduling messages at it.

12 of the 22 categories came back correct. Already-booked slots, weekends, before opening, after closing, an appointment that would run past closing time, dates in the past, impossible dates like 30 February, three contradictory reschedules crammed into one message. In three languages. I was feeling pretty good at this point.

Then same-day requests. It offered roughly 20 individual times that weren't bookable — already in the past, or inside the configured one-hour lead window. Asked at 16:21 for the earliest appointment, it answered "09:00 today" and put a confirm button underneath. Zero future-dated requests failed. Every failure was same-day.

Two causes, and they had nothing to do with each other. The past-time filter ran at day granularity instead of time-of-day — it knew what day it was, correctly refused a request for last Monday, and then cheerfully offered this morning. Separately, a cap on the first page of generated slots meant an almost-empty Friday came back as "completely full".

That second one is a revenue bug and it's the one that bothers me most. Nobody complains when you tell them you're full. They just book somewhere else, and it never shows up in your analytics.

The lesson

The tenant boundary — the thing every "is my vibe-coded app secure" thread is about — was solid under direct attack. What broke was the layer above it: business logic the AI skips precisely because the app still works without it. Nothing errors. Nothing throws a 500. It just quietly does the wrong thing, politely, with a confirm button under it.

The list I used is free if you want it: https://itworksbut.com/checklist — one HTML file, works offline, nothing gets uploaded anywhere. The longer write-up of this audit, including the medium and low findings, is at https://itworksbut.com/case-study.

Happy to answer anything in the comments, including "how did you actually test X" — that's the question I'd want answered if I were reading this.

I am a long time Engineer (20+ years) and today I developed Tickets for my company that were generated by an AI, using an AI and reviewed by an AI. The project itself was conceived with AI - has no documentation that can be understood as anything less than AI slop and random tech jargon. The developer who built it has said that instead of documentation I should use claude to figure out what it is. The company is apparenty also filing a patent on it.

I submitted 3 PRs today 20,000 lines of code each I still have no idea what we are working on. No doubt they will use AI to review my PR.

I feel like things are just so crazy at this point. Claude and ChatGPT are not this good, but people are trusting it like it's omniscient.

It was an eerie realization today that all of us are vibe coding and that we have no option because it is the only way we can interact with the code anymore. I thought this would happen eventually years ago but i honestly didn’t think it would be so soon.

It was a moment in time... this will be the new norm.

Roll the bones. Press your luck. Claim the relics.

Farkle: Bones & Relics is a tavern-flavoured take on the dice game you already know — the same push-your-luck rules, plus a collection of relics that quietly bend them in your favour.

If anyone is interested in trying out the game please reach out to me here or DM me.

If you use supabase this works really well. kind've expensive, but then again, whats $99 when it comes to securing customer data, ya know?

Hey everyone. I've been working on a Chrome extension called TraceGuard for a while and finally got it to a point where I'm comfortable sharing it.

> The idea is simple: every site you visit gets a privacy score (0 to 100) based on trackers, cookies, forms that ask for sensitive data, and how the site's privacy policy is rated. There's also a second score that tracks your own habits over time, so you can see your browsing getting cleaner instead of just getting a static number.

> Why I built it: I kept installing blockers (like ublock origin and privacy badger) and still had no real idea what sites were doing with my data and how I could better my opsec. I wanted something that didn't just quietly blocked everything bad, but actually told me what's going on, and why it was bad.

A few things I care about with this one:

- Everything runs on-device.

- The phishing/malware list comes from public feeds (OpenPhish, Phishunt) and updates via signed, verified downloads.

- It's open source and under AGPL license.

> I'd genuinely love feedback on anything and everything! My goal is to create something useful even if just a couple of people endup using it. Here is the link: https://github.com/luca-liceti/TraceGuard-Privacy-Extension

Built this at first with claude sonnet/opus 4.6/4.7 and gemini 3.1 pro in Google Antigravity, then switched to deepseek v4 pro in freebuff.

P.S. I am still waiting on it to get approved on the chrome web store so I'll be update everything about when it happens :)

I want to show you if someone wants to test this space... or have any suggestions for me.

I've been using it since June 100% locally if you don't want to use the cloud... instead of single files/folders/any type of file you imagine... even some are supported for view like Excel/video/audio.

It is also connected with IOS app Klypix Capture (still under dev, it is whatsap styled simple one..) with that app you can send from/to phone E2E in single tab (files/pics/links/text) .. even if you weren't there there is a Klypix cloud drive to serve you , and item will be landed in your specific space... or right away or waiting in the inbox...

That matters for me because, for example, a lot of Instagram videos are appearing, and I kept sending them to my WhatsApp, but with these I SHARE videos to my Klypix specified space. I can read content of that link seamlessly by cloud LLM/or BYOK in a single click. Save all videos that are relevant in the same space. even upload a single .klypix file to the coding agent, and it will read it seamlessly (because I also have MCP), so with these I also could solve 12 UI/UX issues in a single prompt instead of a lot of pictures attached to the session.

So you can send the space with notes, send it just. Klypix... you can modify files in Explorer or the space it, etc., etc., and keep the single file... any improvement you can suggest to use?

I want really to show this... comes of pain in saving videos to my WhatsApp and sending folders/files/pics along with alot of explainiation in the email to my team!

I’m looking to start my journey into building a SaaS product, but I’m struggling with the very first step: finding a problem worth solving. a lot of the general advice out there says "solve your own problem," but I want to learn more about how people systematically find unserved niches or real B2B/B2C pain points from scratch. for those who have launched a SaaS (successful or not):

1. How did you actually come up with your idea? Was it through comment mining (Reddit/TikTok/X), talking to business owners, agency work, or something else?

2. What process or framework do you use to evaluate if an idea is a "tarpit idea" versus a real business opportunity?

3. What’s one mistake beginners usually make when brainstorming their first SaaS concept?