Field notes from building SaaS products with AI coding agents.https://doogit.com/https://doogit.com/posts/1-of-16-hooks/https://doogit.com/posts/1-of-16-hooks/I built sixteen guardrails to stop my AI coding agents from destroying work. Then I audited them like a consultant would. One actually worked.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/compile-green-deploy-broken/https://doogit.com/posts/compile-green-deploy-broken/Every test passed and it worked on my laptop. In production, placing PDF signature fields failed four different ways — pdf.js in a serverless runtime — each one invisible until the previous fix.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/compliance-as-ci/https://doogit.com/posts/compliance-as-ci/A federal statute constrains what my product is allowed to say. An audit found 18 violations in my own copy — so I wired the forbidden phrasings into the build and made shipping one impossible.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/email-shipped-three-times/https://doogit.com/posts/email-shipped-three-times/I let AI agents build my own email plumbing on top of Resend. The same bug — marking undelivered mail as “sent” — shipped three times before a build gate finally stopped it.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/five-days-140-commits/https://doogit.com/posts/five-days-140-commits/A friend was being stalked. I built an investigation tool to evidence standards in five days — and chose never to publish it.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/knowledge-compounds/https://doogit.com/posts/knowledge-compounds/I analyzed 52 of my own AI coding sessions. The same six problems had been “solved” more than twenty times — and every solution evaporated when the session ended.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/market-with-expiration-date/https://doogit.com/posts/market-with-expiration-date/A Supreme Court ruling created a multi-billion-dollar refund pool — one that shrinks every month on a fixed legal schedule. A decaying market changes every product decision.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/never-await-an-llm/https://doogit.com/posts/never-await-an-llm/My first product's worst bug wasn't the AI being wrong. It was awaiting the model inside a web request that dies at 26 seconds.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/stackbadger-extraction/https://doogit.com/posts/stackbadger-extraction/I built a black-box security harness to attack my own product. The product sprint ended. The tool kept earning commits — so I generalized it and published it.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/the-register-itself/https://doogit.com/posts/the-register-itself/What shipped, what got shelved, what got killed — and why the kills are documented as carefully as the launches.Thu, 11 Jun 2026 00:00:00 GMThttps://doogit.com/posts/the-revoke-that-didnt/https://doogit.com/posts/the-revoke-that-didnt/I locked a sensitive database function, verified the lock, and a Supabase default grant to the anonymous role left it open to the internet for three days.Thu, 11 Jun 2026 00:00:00 GMT