DEV Community: codecraft

The Agent on the Other end of your API

codecraft — Wed, 05 Aug 2026 15:30:49 +0000

Most software carries a hidden assumption in its bones: the thing calling it is a human. Nobody writes it down. It just lives in the session model, the redirect flows, the helpful little tooltips. For thirty years, that assumption held. It is now quietly breaking. A growing share of the traffic hitting your endpoints comes from AI agents acting on someone's behalf, and they read your product nothing like a person does.

An agent does not scan a page or hesitate over a button. It parses whatever structure you expose, obeys the permissions you grant, and repeats the call with a precision no user can match. That precision is exactly what trips up systems tuned for "human forgiveness".

The stateless trap

Start with the humblest assumption of all: the session. Log in, do a thing, log out, context gone. A person shrugs and signs back in. An agent running a task across three days and eight services cannot. When a state lives only inside a session token, you have all but guaranteed that any long-horizon agent will fail somewhere in the middle, and the stack trace will point everywhere except the real cause. This is the first wall most teams hit when they get serious about designing for AI agents. Context has to graduate from a session property into real infrastructure: durable, portable across channels, and legible to both the human and the software acting for them.

Why outcomes should replace navigation

Human interfaces exist to guide. Menus, wizards, breadcrumbs, all of it is there to walk a person toward the right action. An agent wants none of it. It arrives with intent and wants a contract it can call. The more of your product that can take a high-level instruction and return a deterministic result, the better it serves an agent. The more it demands a march through manual steps, the more friction you have quietly baked in. In practice, that means fewer clever flows and more clean, idempotent endpoints whose responses need no interpretation.

How do you enforce agent permissions safely?

Here, casualness turns dangerous. A human can sense when something is off and stop. An agent, boxed inside the scopes you handed it, cannot. So the boundaries cannot be advisory. An agent cleared to book a meeting must be technically incapable of cancelling a contract, not merely discouraged from trying. Serious designing for AI agents treats this as architecture: scopes enforced at the system level, every action logged with the reasoning behind it, and an obvious path to reverse an outcome. Exercise those limits under realistic load before anything ships, because a permission you never tested is a permission you never actually had.

None of this throws out good design. It extends it. The teams that come out as winners in this perspective will not be the ones wiring up agents fastest, but the ones who built for delegation on purpose, well before a live system turned the mistakes expensive to unwind.

Why AI in aged care is an Integration problem, not a model problem

codecraft — Thu, 30 Jul 2026 13:20:03 +0000

Most demos of care technology fail in the same quiet way. The model works, but the pipeline behind it does not. A caregiver still burns the first ninety minutes of a shift on documentation before speaking to a single resident, and no amount of model accuracy changes that arithmetic.

The interesting engineering problem here is not prediction. It is where the data goes, who it reaches, and whether it closes a loop or vanishes into a report nobody opens.

Where the burden actually lives

Aged care documentation was architected around manual processes and never rethought. Caregivers enter data in the formats the system dictates, using tools that were never designed with cognitive load as a constraint. A faster form is still a form. Shaving keystrokes off data entry optimizes the wrong layer, because the cost is not typing speed. It is context-switching, interruptions, and compliance work bolted on beside the actual job rather than folded into it.

What should AI in aged care optimize for?

Not throughput. But Role quality. The useful question for anyone building AI in aged care is blunt: what would the shift look like if compliance overhead were halved, and what if the data caregivers generate fed back into care planning instead of dead-ending in a reporting sink? The strongest implementations treat documentation as a byproduct of care events already happening, not a separate path. Think continuous capture over retrospective batch entry.

Ship admin before clinical

Regulatory frameworks for automated decisions in this sector are still forming, and the gap between what is technically deployable and what is compliantly deployable is real. The defensible sequence is phased:

Start with low-risk administrative surfaces
Build governance capability in parallel with technical capability
Extend into clinical inference only once both mature together

Speed is not a virtue when the rollback cost is a resident's safety.

Trust is a system property

Consent, privacy, and data governance carry a higher threshold here than in almost any other deployment environment, because the trust between residents, families, and providers has no clean equivalent elsewhere. Treat it as a first-class constraint in the schema, not a compliance checkbox stapled on at review.

The tools already exist. The remaining work is deciding whether caregiver time is worth designing around, and building the integration to prove it.

Your Supply Chain doesn't have a Data Problem. It has a Schema Problem.

codecraft — Fri, 24 Jul 2026 12:58:10 +0000

Most teams building toward autonomous operations start with the model. That is usually the wrong end of the pipeline.

The failure I keep seeing is not a bad forecast. It is one system marking a shipment complete the moment it leaves the dock, while the planning layer only counts it once it is scanned at the destination. Both are correct, and neither can be joined without a human deciding which definition wins. Multiply that across suppliers, carriers, and three ERPs inherited from three acquisitions, and you have a system that generates noise faster than it resolves it.

What has to exist before autonomy is possible?

Six things, and they are not phases. They are simultaneous dependencies.

Instrumentation gives you the sensory layer, meaning telemetry on inventory, transit, and equipment rather than nightly batch snapshots. Standardization makes that telemetry interpretable across the network, which in practice means shared schemas and contract testing between systems. Interconnection turns partners into event publishers instead of email senders. Integration aligns processes, because integrating systems without integrating processes just gives you faster silos.

Then comes the part people call automation. Rule engines are not what is meant here. A static ruleset handles the conditions its author imagined and fails hard on the ones they did not. What autonomy needs is a decision layer that evaluates trade-offs at runtime against constraints it can read. Finally, intelligence, which is where an AI-driven supply chain starts detecting anomalies before they become disruptions.

Where does this actually break?

Guardrails. Autonomy is not the absence of control; it is control expressed as policy rather than approval. If your allocation logic can be manually overridden without an audit trail, you have not built autonomy; you have built a system that will confidently optimize for something nobody signed off on.

The unglamorous sequence

Visibility first, meaning canonical models and tagging standards, then accountability, with forecasts stress-tested and tooling embedded in real workflows. Only then, continuous optimization, with cost per order and cost per exception as live inputs rather than something thats done periodically.

Teams that skip to step three end up integrating capabilities onto a foundation that cannot carry them. The rebuild costs more than the patience would have.

The sepsis model that learned to predict the doctor

codecraft — Fri, 17 Jul 2026 07:22:03 +0000

In 2021, a team at Michigan Medicine ran an external validation of the Epic Sepsis Model across 38,455 hospitalizations. Epic's own documentation put the model's AUC somewhere between 0.76 and 0.83. Michigan measured 0.63. Sensitivity was 33%, meaning it missed about two-thirds of septic patients, and it still managed to fire alerts on 18% of everyone admitted.

The detail that should bother you as an engineer is in the inputs. One of the model's features was whether a clinician had ordered antibiotics. Ordering antibiotics means somebody has already suspected an infection. So the model was, in part, learning to predict a decision that had already been made, then congratulating itself on the prediction.

That is textbook leakage. It ran in production at hundreds of hospitals for years.

Why do healthcare AI pilots fail at scale?

Nobody caught it because the environment had no mechanism for catching it. There was no external validation until researchers did it on their own initiative, no post-deployment monitoring worth the name, and no owner whose job it was to ask whether the thing was still working.

This is the pattern underneath most stalled healthcare AI. The model is rarely the constraint. The real constraint is everything it plugs into: patient records spread across EHR instances that different departments bought in different decades, imaging sitting in a system that speaks to nothing, duplicate MRNs, coding standards that drifted three reorganizations ago, and operational data (scheduling, staffing, supply) that has never been joined to clinical data in any usable way.

Train on a curated dataset, and you get a demo. Point the same weights at live ingestion, and performance degrades quietly, which is the worst way for it to degrade.

What AI-ready infrastructure means

Four things, and they're all boring:

Interoperability. Data can actually move between clinical, operational, and administrative systems without a human exporting a CSV.

Governance: Someone owns data quality, someone owns access, while someone's name is on the model's performance next quarter.

Workflow integration: Output lands where the clinician already works. If it creates a parallel process, it creates one that gets eventually ignored.

A scalable operating model: Monitoring, retraining, and drift detection exist before you need them, not after a JAMA paper.

Miss one and you get pilot purgatory. Organizations that assess AI-ready infrastructure before procurement end up making very different buying decisions than those who discover the gaps at integration time, which is roughly when the budget is already committed.

Aged care shows the failure mode at its bluntest. Fall detection works fine in a lab. Deploy it into a facility where half the documentation is still paper, and the notification pathway was never wired into anyone's actual shift; also, the alert fires into a void. The system produces the appearance of intervention but the resident is still on the floor.

Questions worth asking before the demo:

Can you access the same patient consistently across systems, or are you resolving identity by hand?
Who owns data quality, by name?
Have the alert escalation paths been tested with real people on shift?
Is there a monitoring framework, or are you planning to find out from a study?

The unglamorous work is the real work. Nobody puts an interoperability audit in a board deck. It's still the difference between a system a nurse trusts at an unexpected time and one she's learned to click through.

Nobody would ship this Protocol

codecraft — Fri, 10 Jul 2026 15:21:35 +0000

Consider a message passed between two processes. No acknowledgment. No schema. No retry. The sender is throttled, the receiver is saturated, and the channel drops packets under load.

You would not merge that. Hospitals run it every twelve hours.
Communication failures during care transitions sit behind most serious adverse events, and that share has held flat while the industry shipped template after template.

Why do clinical handovers keep failing?

The remediation always lands on the human. Better forms, more training, and another mandatory field. Each assumes the sender skipped an instruction.

Look closer at what the sender is doing. A doctor, nineteen hours into a shift, is running lossy compression on twelve patients, deciding what to drop, pulling from records with holes, inside a rank structure where contradicting a senior costs something real. Exhaustion, uneven experience, rank, scattered records. Those conditions are the runtime, not an exception path.

A protocol that degrades under expected load was specified incorrectly. A finished SBAR form confirms that the payload left the sender. It reveals nothing about parsing, nothing about the downstream effect. Whether the receiving clinician read the critical field, whether anything happened in the next six hours, is entirely unobserved.

So the status page reports healthy while the service quietly loses data.

What real instrumentation would capture

Signal lives after the exchange, not during it. Did the care plan execute? Did escalation fire within the threshold? Did drift accumulate before anyone queried the state?

Wire those events back into the loop, and you have telemetry. Skip them, and you have an audit trail. Reframing the clinical handover as a system to instrument rather than a ritual to enforce is what makes the failure mode addressable.

Why the tooling never reaches production

Electronic I-PASS functions. Model-generated summaries from existing notes function. Most sit indefinitely in a pilot. Rollouts fragment across sites, enablement trails deployment, and regulatory validation under HIPAA and EU MDR run slower than any clinical timeline tolerates.

A structured field clinician's bypass becomes overhead. The actual exchange moves out of band, unlogged, unreplayable.
We have world-class metrics on this, and metrics were never the constraint.

Fulfillment is just another API now

codecraft — Fri, 03 Jul 2026 13:06:02 +0000

For most of software history, the supply chain was the thing nobody wanted to touch. A monolith in the basement. Order in, inventory pulled, package out. It worked fine right up until e-commerce raised the overall demand and customers started expecting two-day delivery from a five-person shop.

That old model cracked because it assumed the world sat still. It doesn't. So teams stopped treating fulfillment as a locked black box and started treating it like something you can actually call from code.

What does an API-driven fulfillment architecture look like?

You break the monolith into pieces that each do one job well. Inventory visibility, order routing, carrier selection, and last-mile coordination. Each one lives behind a documented API. Instead of a single rigid system, you get modular services you can swap, reroute, or reconfigure without a full rebuild. If that pattern feels familiar, it should. It's basically the thinking behind microservices applied to physical goods.

The nice part is what opens up once those endpoints exist. Your storefront can check real inventory before it confirms an order, while your CRM shows a delivery window without a human looking for it. Logistics reroutes around a carrier delay automatically, and data that used to rot in isolated systems becomes something every touchpoint can query in real time. That single move is what pushes real supply chain digital transformation from a slide deck into production.

Why do teams move faster with composable fulfillment?

Because the boundaries get porous. Logistics no longer owns one silo while the e-commerce team waits three sprints for IT to broker an integration. The people closest to a problem can ship a fix against a component without triggering a system-wide change request. That's less a logistics upgrade and more an org-chart upgrade disguised as architecture.

What breaks when you go modular?

Plenty, if you're honest about it. More APIs mean more entry points, so auth and API security stop being optional. Independently deployed services drift, so you need real contract testing, or a small change in one place quietly breaks another. And most of you aren't greenfield. You're basically wiring modern services into a legacy ERP that predates REST. Expect coexistence, not a clean cutover.

Done right, fulfillment stops being the scary basement monolith. It becomes another layer you build on. An ongoing supply chain digital transformation turns delivery from a cost center into something that actually ships.

Latency is a Design Decision, Not a Performance Metric

codecraft — Thu, 25 Jun 2026 13:24:37 +0000

Users rarely say an app is slow. They just leave. They bail on the cart, close the tab, jump to a competitor, and usually can't tell you why. The friction registers emotionally before it registers consciously.

So if you're still treating latency as something to optimize after the build works, you're already behind.

Why is latency actually three problems, not one?

"Latency" gets thrown around like a single number. It isn't. There are three:

Analysis latency: time to interpret incoming data
Decision latency: the gap between analysis and action
Action latency: execution delay

At enterprise scale, these compound. A system that analyzes fast but acts slowly still ships a bad experience. Treat the stack as a chain where the weakest link sets your ceiling. Optimizing the visible stage while ignoring upstream or downstream delays is the classic trap, and the wins look real in isolation while the tail stays broken.

What reduces latency in a real-time data processing architecture?

No single fix solves this. A solid real-time data processing architecture makes decisions at several levels at once:

Geography. Data crosses physical distance. Edge nodes, distributed data centers, and PoP networks push processing closer to users and often decide whether you land under the threshold.
Caching, still one of the highest-impact moves. Keep hot data near the user and kill repeated retrieval.
APIs. The connective tissue. Lean, low-overhead APIs let data flow; sloppy ones turn every integration point into a bottleneck.

Stop shipping averages

A clean average that hides a slow tail still burns a real chunk of your users. Watch behavioral signals, like bounce rate, session length, and engagement depth, not just synthetic numbers under controlled load. Lighthouse, New Relic, and Datadog give you continuous monitoring, but the real discipline is treating latency as an ongoing operational practice, not a quarterly audit.

For context: past two seconds of page load, abandonment climbs sharply. In voice and video, anything over 50ms degrades quality before users consciously notice.

The teams winning here pull latency into product planning early, measure infra against retention instead of raw benchmarks, and stop treating performance and UX as separate conversations. Build the experience that feels invisible, and speed stops being a feature. It becomes the reason people stay.

Treating Carbon as a Constraint in your Supply Chain Logic

codecraft — Fri, 19 Jun 2026 13:28:43 +0000

Most carbon isn't decided in a sustainability report. Someone picks a supplier, weighs price and lead time, signs, and quietly locks in years of emissions nobody ever scored. The data existed. It just never entered the moment the choice got made.

Why carbon never reaches the decision layer

In most orgs, two systems never talk to each other. One produces targets and disclosures, the other produces purchase orders and vendor contracts. The emissions leak out in the gap between them. And that gap is huge, because supply chains drive up to 80% of a company's total greenhouse gas footprint. The people deciding your real environmental impact are buyers and logistics leads, and most of them have never seen a carbon number in their workflow.

Why Scope 3 is the hard part

Scope 1 and Scope 2 are direct and trackable. The real weight sits in Scope 3, the upstream emissions you don't control, which averages around 74% of an industry's footprint. The problem is that visibility falls off a cliff past your Tier 1 suppliers. This is exactly where most carbon emission reduction in supply chain efforts stall. Not at strategy, at the data pipeline. You can't weigh a number you can't get.

Why mandates don't move the needle

The instinct is to hand suppliers a list of ESG requirements. That mostly generates email. The suppliers with the heaviest emissions are usually the ones with the least capacity to respond, running thin margins with no sustainability staff. The teams seeing real results invest in a few high-impact suppliers directly instead of pushing the whole base at once.

Making it real-time

IoT feeds, AI procurement platforms, and joined-up analytics can already surface carbon intensity at the point of purchase. The blocker isn't the tech. It's the discipline to act on the number once it's on screen. That last step, turning a visible value into a different choice, is the one almost everyone underestimates.

Your turn

If you had to add one carbon signal to your sourcing decisions tomorrow, where would the data even come from? Drop how your stack handles Scope 3 visibility in the comments, because that pipeline is where most of us are stuck.

How enterprises are escaping platform lock-in

codecraft — Wed, 10 Jun 2026 15:14:38 +0000

Most enterprise commerce teams know the feeling. A feature your competitor shipped in two weeks takes your team three months, not because your engineers are slow, but because your platform won't get out of the way. That's the monolith problem. And composable commerce architecture is how enterprises are solving it.

What composable commerce architecture looks like in practice

Composable commerce architecture applies MACH principles (Microservices, API-first, Cloud-native, Headless) across the entire stack, not just the frontend. Instead of one platform owning everything, each capability is a discrete, replaceable service.

In practice, that looks like this: your PIM is Akeneo, search is Algolia, payments are Stripe, content lives in Contentful, and cart/checkout runs on commercetools. Each service exposes APIs. Each can be swapped, upgraded, or scaled independently without touching the others.

The frontend consumes all of it through a composition layer. No single vendor owns your roadmap anymore.

Why enterprises are moving now

The numbers back the urgency. 91% of organizations are currently expanding their MACH infrastructure, and 61% expect to achieve a fully composable architecture by 2026. This isn't experimentation anymore. It's a structural shift in how enterprise commerce is built.

The legacy systems problem is real, though. Organizations with more than 51% legacy systems face a demanding financial equation, with 48% of the budget going toward MACH software acquisition alone. The transition cost is high, and the cost of staying put compounds silently.

The ownership question nobody asks early enough

Composable commerce architecture isn't just a technical decision. It's a platform ownership decision.

With a monolith, your vendor owns the upgrade cycle, the feature backlog, and by extension, your release velocity. With a composable stack, your team owns the assembly. You choose the best tool for each capability and integrate on your terms.

The tradeoff is real: more surface area to manage, more integration complexity, more engineering discipline required. But for enterprises at scale, that tradeoff becomes worth it the moment a critical business need gets blocked by a vendor's quarterly release cycle.

Start with the seams in your current platform, the places where your business needs outpace what the vendor delivers. That's where composable commerce architecture earns its value first.

Why Playwright 1.59 shifts test automation from speed to context

codecraft — Wed, 03 Jun 2026 14:33:32 +0000

Most test suites today answer one question: Does this element exist on the page? Playwright 1.59 is built around a harder question: is the application behaving the way users actually expect?

That is not a small distinction. It is a fundamentally different problem.

What is context-aware testing, and why traditional suites keep breaking

Traditional test scripts break because they are tightly coupled to specific UI states. A layout change, a renamed class, a structural tweak, and suddenly tests fail even though the application behavior is completely correct. The fragility is not a tooling problem, but a design problem.

Playwright 1.59 reflects a broader shift in playwright test automation toward validating workflows and intent rather than individual elements. The test suite stops acting as a UI consistency checker and starts acting as a behavioral signal.

How Playwright 1.59 turns CI failures into explainable narratives

A red CI run tells you something broke, but it rarely tells you what happened, in what sequence, and under what conditions.

The updated Trace Viewer lets teams group actions into logical steps and navigate complex end-to-end flows visually. The new Screencast API adds annotated video recordings to CI runs. A failing test with an attached video is a completely different debugging experience than a stack trace and a screenshot.

You can now see what led to the failure, which makes it much easier to tell the difference between an actual bug, flaky infrastructure, and broken test logic. Those three things look identical in a log, but very different on video.

How standardised debugging reduces test triage time across teams

The new --debug=cli flag gives teams a consistent, repeatable investigation path. When any engineer can follow the same process regardless of their familiarity with the test suite, triage time drops, and knowledge stops being siloed with whoever built the tests originally.

Why accessibility testing belongs in the same pipeline as functional tests

The deeper Axe Core integration means WCAG compliance checks run in the same CI pipeline as functional tests. Accessibility becomes a regression you catch in development, not a retrofit you fund after launch.

The inflection point is not when complexity forces a change. It is when teams decide to get ahead of it. Playwright 1.59 gives them the tools to do exactly that.

Shift-Right testing: The reality check every QA strategy needs

codecraft — Fri, 29 May 2026 13:53:44 +0000

For years, software teams treated quality as something that could be validated before release. Run the test suite. Pass regression. Deploy.

The problem? Software rarely breaks in staging.

It breaks when thousands of users interact with it in ways nobody anticipated.

A feature that worked perfectly in testing suddenly slows down under real traffic. An edge case appears that never existed in your test scenarios. A dependency fails in production even though every pre-release check passed.

That is why more teams are embracing Shift-Right testing.

Production is where quality gets measured

Shift-Left testing remains essential. Catching defects early is still one of the most cost-effective practices in software engineering.

But Shift-Left only finds the issues you know how to look for.

Shift-Right focuses on what happens after deployment. It treats production as a source of quality insights rather than simply the destination. Real user behavior, live traffic patterns, performance bottlenecks, and production incidents become inputs for improving future releases.

The goal is simple: learn from reality instead of relying entirely on assumptions.

Observability is the foundation

Shift-Right cannot work without strong observability in software testing.

Logs, metrics, traces, and APM tools provide visibility into how applications behave under real-world conditions.

Without observability, production remains a black box. Teams discover issues only after users report them, but with observability, teams can identify anomalies early, correlate issues to deployments, and understand the impact of failures across services and user journeys.

The difference is not just faster troubleshooting. It is faster learning.

User behavior is test data

One of the biggest flaws in traditional testing is that engineers test what they expect users to do, but users rarely cooperate.

They click unexpected paths, abandon workflows halfway through, and combine actions in ways no test case anticipated. Production data reveals these patterns.

Session recordings, error reports, click paths, and support tickets often expose quality issues that never appear in pre-production environments.

That makes user behavior one of the most valuable testing inputs available.

The future of Quality Engineering

The most effective engineering teams no longer view release day as the finish line but the start of the feedback loop.

As observability platforms, AI-driven anomaly detection, and automated monitoring continue to evolve, production will become an even more important source of quality intelligence.

Because software quality is not proven before release.

It is revealed after real users start interacting with your system.

How Zero Trust Architecture is becoming essential in healthcare

codecraft — Thu, 07 May 2026 14:30:15 +0000

Zero Trust architecture is becoming essential in healthcare because traditional perimeter-based security models can no longer protect modern hospital environments from ransomware, identity attacks, and third-party vulnerabilities.

Healthcare is one of the few industries where a cybersecurity failure can directly impact patient safety, not just data loss or operational downtime.

That’s why Zero Trust architecture is becoming critical for modern healthcare systems.

Traditional security models assumed that users and devices inside the network could largely be trusted once authenticated. But hospitals today operate across cloud platforms, remote clinicians, connected medical devices, telehealth systems, third-party vendors, and legacy infrastructure that was never designed for today’s threat landscape. That complexity has made healthcare one of the most targeted industries for ransomware and credential-based attacks.

Zero Trust architecture changes this model completely by enforcing continuous verification instead of implicit trust. Every access request is authenticated, authorized, and validated in real time based on identity, device posture, behavioral signals, and contextual risk. Access becomes temporary, granular, and continuously monitored instead of broadly persistent.

This matters because ransomware in healthcare is not just a financial problem. A compromised system can disrupt emergency care, delay diagnoses, and impact critical patient services. That is why healthcare organizations are increasingly investing in MFA, least-privilege access, microsegmentation, behavioral analytics, AI-driven threat detection, immutable backups, and continuous monitoring as part of a broader Zero Trust architecture strategy.

What stood out to me most is that Zero Trust is no longer just a cybersecurity framework. It is becoming part of operational resilience itself, where security, observability, identity governance, and recovery workflows all work together to reduce clinical and operational risks.