The latest articles on DEV Community by Alexandr G (@alegrib). https://dev.to/alegrib https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4214568%2F1690d246-d276-4948-8603-9a1346be39eb.jpg https://dev.to/alegrib en Alexandr G Thu, 29 Oct 2026 07:08:12 +0000 https://dev.to/alegrib/porting-a-pii-tracer-byte-exact-from-python-to-typescript-so-a-coding-agent-cannot-leak-your-3mj1 https://dev.to/alegrib/porting-a-pii-tracer-byte-exact-from-python-to-typescript-so-a-coding-agent-cannot-leak-your-3mj1 <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F8yie55wy8yhk0638tuao.gif" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F8yie55wy8yhk0638tuao.gif" alt=" " width="720" height="405"></a></p> <p>My coding agent is good at its job. It is also one <code>cat .env</code> away from sending my keys to a vendor. I did not want to trust a prompt for that. I wanted the request itself to be clean, provably, before it leaves.</p> <p>This is the story of porting a PII tracer from Python to TypeScript - byte-exact - so it could run inside the agent's pipeline instead of next to it.</p> typescript python security agents