miniblog.

Go has an os.Root API that allows you to enforce all paths are subdirectories of a given root. It fixes users accessing foo/../../../etc/passwd and similar. Seems like a really nice solution for a relatively common problem.

nREPL is a really interesting protocol for developer tools. It's extensible, but one of the basic operations is eval(). If your nREPL server doesn't support a given operation, you can just send an eval request to achieve the same result!

One subtle behaviour of Claude that wasn't obvious to me: whilst each conversation is transient, permissions persist across conversations. So if you've given permission to run e.g. 'cargo test' or even 'cargo run', you need to be sure that all future invocations are safe too. You can see the current permissions with /permissions.