Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
IT Security Toolsholos v0.6.3(21.09.2026 um 12:28 Uhr)
IT Security NachrichtenSAML: A fractal of bad design(21.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenMacSync-Variante: Kaspersky warnt vor neuem macOS-Infostealer - BornCity(21.09.2026 um 11:12 Uhr)
IT Security NachrichtenShinyHunters hacks rival extortion gang and takes over its dark web site(21.09.2026 um 13:02 Uhr)
IT Security NachrichtenUS and China Discuss Alerting Each Other to AI National Security Threats(21.09.2026 um 13:02 Uhr)
IT Security Toolsholos v0.6.3(21.09.2026 um 12:28 Uhr)
IT Security NachrichtenSAML: A fractal of bad design(21.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenMacSync-Variante: Kaspersky warnt vor neuem macOS-Infostealer - BornCity(21.09.2026 um 11:12 Uhr)
IT Security NachrichtenShinyHunters hacks rival extortion gang and takes over its dark web site(21.09.2026 um 13:02 Uhr)
IT Security NachrichtenUS and China Discuss Alerting Each Other to AI National Security Threats(21.09.2026 um 13:02 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

AI Pair Programming Isn't Autopilot: Scaffolding HandyFEM and Catching What the AI Threw Away

The agent writes the code. You're still the engineer. I'm building HandyFEM with Claude Code as my pair. It's fast — sometimes startlingly so. But the way I work with it is deliberate: I treat everything it produces the way I'd treat a p…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




The agent writes the code. You're still the engineer.



I'm building HandyFEM with Claude Code as my pair. It's fast — sometimes startlingly so. But the way I work with it is deliberate: I treat everything it produces the way I'd treat a pull request from a capable junior developer. I read it. I question it. I decide what stays.



This post is a concrete example of why that habit matters.









The task: scaffolding the project



Before writing features, you scaffold a project — generate its skeleton: folder structure, config files, a base page that runs. I had the agent set up the foundation for HandyFEM:




  • Next.js with TypeScript and Tailwind

  • shadcn/ui — component code lives in your repo, so you own it

  • Design tokens wired into the theme — exact color palette from my specs



Because my project folder already had docs, Git, and a .env.local with a real secret, the agent did the smart thing: generated the app in a temporary folder and integrated carefully, without clobbering my existing files.









The catch



During the integration, the agent mentioned — almost in passing — that the Next.js generator had created its own CLAUDE.md file, and that it had discarded it so as not to overwrite mine.



On the surface: correct behavior. But it raised a question I didn't want to skip. Did that discarded file contain anything useful?



So I asked. We went back and looked. The generated CLAUDE.md pointed to a second file — AGENTS.md — and that one held something genuinely valuable:




# This is NOT the Next.js you know

This version has breaking changes — APIs, conventions, and file structure may
all differ from your training data. Read the relevant guide in
node_modules/next/dist/docs/ before writing any code.






Real. The framework version I'm using is newer than most AI models were trained on. Losing this note meant the agent might later write code using outdated patterns — confidently, and wrongly.



We rescued it into my project instructions. One small note, but it changes the quality of every future line of framework code.









Why this matters



The agent didn't do anything wrong. Discarding a file to protect mine was sensible. But the side effect — dropping context that mattered — was easy to miss, buried in a one-line aside during a much bigger operation.



That's the pattern to internalize. AI agents make a high volume of fast, plausible decisions. Most are good. But "plausible" isn't "reviewed." The skill isn't prompting — it's reading the output like a reviewer: what did it change, what did it remove, is each of those what I actually want?



I don't review because the tool is bad. I review because it's good enough that I'd otherwise stop paying attention. That's the trap.









Honest reflections on the workflow



What's working:





  • Security before features. Pre-commit hook, .gitignore, environment variables — all set up before scaffolding. For a product whose whole premise is trust, that ordering is non-negotiable.


  • Detailed specs as source of truth. The agent had real screens, components, and a color palette to build against — not an invitation to invent one.


  • CLAUDE.md with project conventions. Mobile-first, accessibility minimums, never hardcode secrets. The agent defaults to my standards instead of generic ones.



What I'd refine:





  • Decide manual vs. automated before committing to a path. Earlier I had the agent script a one-time setup task. It became a long debugging session. Doing it by hand would have been faster. Automation pays off when you repeat something — for a true one-off, manual is often smarter.


  • Take inventory before opening a new thread. Some questions I treated as open were already answered in my own specs. Five minutes of review saves re-litigating settled decisions.



The meta-lesson: with an AI agent, the bottleneck shifts. It's no longer writing the code — it's deciding well and reviewing carefully. The typing got cheap. The judgment got more valuable, not less.









Takeaway



An AI agent is a genuine force multiplier — but only for someone who stays in the driver's seat. It will move faster than you, make mostly-good calls, and occasionally drop something that matters in a sentence you could easily skim past.



So don't skim. Read the diff. Ask "what did you remove, and why?"



The agent writes the code. You're still the engineer.






#HandyFEMApp #BuildingInPublic #AI #ClaudeCode #WebDev

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten AI Pair Programming Isn't Autopilot: Scaffolding HandyFEM and Catching What the AI Threw Away

Thematisch verwandte Begriffe: Pair, Programming, Isnt, Autopilot · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-94040 | A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this v…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick