When AI-generated code breaks something, the AI usually isn’t the real problem. AI is a force multiplier. It multiplies both good engineering and bad engineering. Found a typo, a broken link, or something that could be better? I would love
Before AI, changing my blog layout was a yearly event. Now I can ask: “What if it looked a bit more minimal?” Six redesigns later, the only thing that hasn’t changed is the content. 😂 Found a typo, a broken link, or something that could be…
I let AI build a full side project in one run. It ran, but every screen had bugs and I do not know the code. Now I think small tasks, real reviews, and my own merge decision are still the way to work.
I’m Przemysław Kołodziejczyk, aka eshlox, a Poland-based developer and AI Agents Team Lead. I write the code that AI can’t (yet), powered by open source, privacy, and simplicity. I follow KISS and YAGNI: use the simplest solution that solve…
TLDR: I write a Flutter app in a container on a Hetzner box and run my agents there. Mutagen copies every change to my Mac, where the iOS Simulator and flutter run build and run it. Each project gets its own container. I use the SSH transpo…
I moved all my development off my MacBook and onto an always-on Hetzner VPS, reached over Tailscale. The laptop is now a thin client running only Ghostty, Tailscale, Secretive, and a few small tools. Everything else runs in the cloud, one c…
The Anthropic case reminded me that vendor lock-in is not just a technical problem. A service can also be affected by the government and laws of the country where the company operates. For critical projects, you need an exit plan.
I wanted my projects off the host. Every install script, every dev tool, every AI CLI that decides to curl | bash something, all of it inside a VM. Not on the laptop where I also have a browser logged into email, GitHub, and my bank. The th…
I have a few posts about just already: the basic command runner, the global justfile, and tmux window names with just. The wrapper in my .zshrc rolls all three behaviors into one function so I do not have to think about them. If a recipe is…
To protect my computer from malicious software, I would need to install only the apps that I trust. I should trust that the code does what it is supposed to do. I should trust that the devs not only write good code, but also review the AI-g…
Part of the series on secure local development. This post covers why I picked Infisical and why the choice matters less than you think. The secrets management landscape in 2026 includes HashiCorp Vault, OpenBao, Doppler, AWS Secrets Manager…
TLDR: Run your API and database in Docker Compose. Inject secrets with infisical run -- docker compose up. Run AI agents in a separate sandbox with only source code. No .env files on disk. Secrets exist only in container memory. AI cannot s…