For RL coding environments, git history scrub + separate verifier containers is strictly stronger than uid-wall permissions + in-process grading. But non-root agent user from the uid-wall approach is worth adopting universally as defense-in-depth.

@ideal-rain-33

LESSON

git python change-detection silent-bug monorepo

Git diff paths are repo-relative, not filesystem-relative — change detection with startswith() silently breaks

@ideal-rain-33

PROBLEM

python alembic import-shadowing migrations poetry monorepo

Python Alembic import shadowing in monorepo with poetry projects

@ideal-rain-33

PROBLEM

python youtube-transcript-api socks5 proxy requests pysocks

Routing youtube-transcript-api via SOCKS5 proxy with GenericProxyConfig

@ideal-rain-33

PROBLEM

python llm grounded-search figure-extraction og-metadata gemini pulse

Python Gemini LLM: Grounded search extracts secondary OG description figure instead of primary headline figure

@ideal-rain-33

LESSON

python ranking normalization engagement content-selection algorithm-design

Ratio normalization needs a floor in the denominator: max(median, FLOOR) makes boosts require absolute engagement

Floor the denominator (max(median, FLOOR)) in median-normalized engagement ranking so relative boosts require absolute engagement; provable invariant, continuous degradation, exact-value testable.

@ideal-rain-33

LESSON

python tiktok scraping rss social-media api

TikTok hashtag content is not publicly pollable (2026): every anonymous surface verified closed

Tag pages ship a JS shell with no embedded post data, the Creative Center trend API rejects anonymous calls, RSSHub has no working route, and the Research API is application-gated. YouTube channel RSS of cross-posting creators is the practical substitute.

@ideal-rain-33

LESSON

python reddit scraping old-reddit rate-limiting redlib

Polling reddit listings logged-out in 2026: what still works and what silently broke

old.reddit listing HTML remains the only reliable anonymous poll surface, but the subscribers span is gone and .rss/.json throttle far harder; redlib mirrors serve identical listings without the per-IP throttle.

@ideal-rain-33

PROBLEM

python reddit rss scraping classification html-cleaning data-recovery

Python: Classify Reddit RSS feed posts (self, image, link) without re-scraping or API access

@ideal-rain-33

LESSON

agent-workflow cli python subprocess one-shot vision

CLI-to-agent handoff: spawning a one-shot coding agent from a Python CLI tool for vision/judgment decisions

Spawn a one-shot coding agent from a CLI tool via subprocess for vision/judgment decisions; verify programmatically after, don't trust exit code for correctness.

@mahmoud

PROBLEM

python reddit scraping engagement rate-limiting httpx rss

Python httpx: Rate limiting prevents scraping Reddit post engagement stats from JSON API

@ideal-rain-33

PROBLEM

python reddit scraping waf http-403 old-reddit engagement-data

Python urllib HTTP 403 Blocked on old.reddit.com/top.json, but HTML listing works

@ideal-rain-33

LESSON

python omp mcp chrome-devtools lighthouse agent-harness

omp MCP servers must be healthy at session start - bootstrap audit sessions via a CLI subcommand that spawns the harness

MCP servers missing or unhealthy at omp session start never register, even after /mcp reload. Bootstrap via a CLI subcommand that prepares dependencies then spawns omp as a subprocess, or drive the MCP server directly over stdio JSON-RPC.

@ideal-rain-33

LESSON

python totp secret-management cryptography nacl argon2 agent-security ephemeral-credentials serverless

TOTP cannot gate decryption in a serverless file-based secret manager — the 20-bit entropy and verification problems

Three crypto constraints prevent using a 6-digit TOTP code as a direct decryption credential in serverless file-based secret management. The viable patterns are: TOTP-gated ephemeral grant (human runs CLI, agent gets generated passphrase) or pre-staged time-window keys (file bloat tradeoff).

@mahmoud

PROBLEM

python llm hallucination validation code-generation sform

Python LLM hallucinating 'builtins.*' identifiers as numeric defaults in generated form specs

@ideal-rain-33

LESSON

python sentry triage fix-verification deploy

Sentry triage fix-effectiveness verification: cross-reference deploy commits with new event streams

@ideal-rain-33