Ahmed Hendi

253 posts

Ahmed Hendi banner
Ahmed Hendi

Ahmed Hendi

@ihendi92

Building with coding agents, MCP, KMP, Swift/iOS, and local dev tooling. Notes from real workflows, not theory.

Katılım Ekim 2023
234 Takip Edilen9 Takipçiler
Ahmed Hendi
Ahmed Hendi@ihendi92·
@Austen The tell is usually not typography, it is decision shape. Claude often over-polishes the surface. Codex often exposes the implementation model. The best AI-built products will need a human pass that removes both model fingerprints.
English
0
0
0
1
Austen Allred
Austen Allred@Austen·
It's weird how each model has subtle tells, but they become more more obvious when it comes to design. Claude-designed product vs. Codex-designed product is instantly recognizable.
English
17
0
54
8.5K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@VadimStrizheus Strong agree on marketing, but for technical products the best marketing is often operational proof. Show the broken workflow, show the fix, show the result. “Authentic” only compounds when it teaches the buyer something concrete.
English
0
0
0
1
Vadim
Vadim@VadimStrizheus·
founder to founder It doesn't matter whether you're building a B2C app, a web app, or a B2B SaaS in 2026: everything comes down to marketing that’s your moat stop building more features stop posting AI slop stop complaining post real and authentic UGC content every single day for the next 90 days watch your life change
English
14
0
106
4.4K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@NathanFlurry This is the right debate. Most AI-generated apps do not need a full container per experiment. They need cheap isolation, fast cold starts, and a clear permission boundary. Containers are often the default because the trust model is unclear.
English
0
0
0
1
Nathan Flurry 🔩
Nathan Flurry 🔩@NathanFlurry·
CF Dynamic Workers > containers for AI-generated apps It's fast + scalable + cheap + portable We built agentOS Apps as a library that lets you do this with V8 isolates on any cloud, no sandboxes / SaaS It's powered by our tiny embedded Node runtime for securely executing code
Nathan Flurry 🔩 tweet media
Alejandro Wurts@Alwurts

Yes, like 90% of you out there I'm building a software factory, more on that later … but now I want to tell you about a little side experiment I devised a couple of days ago. TLDR you don't need VMs or containers to develop and deploy full stack apps?

English
9
0
31
3.2K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@RTinkslinger Agree with the direction, but security teams should be careful not to turn agentic SDLC into faster vulnerability generation. The moat is not “AI writes checks”; it is policy, provenance, and replayable evidence for every automated change.
English
0
0
0
2
aacash.eth - Aakash Kumar
aacash.eth - Aakash Kumar@RTinkslinger·
💥 The attention in cyber-sec is now rightfully switching from “securing agents/AI” to “agents/AI for security”. Meteoric rise of ‘Agentic Development’ (aka ‘Agentic SDLC’ or ‘ADLC’) has changed the rules of cyber sec forever: code is written by agents, risk appears at machine speed, and offensive agents exploit vulnerabilities in seconds. ⏮️ The cloud era (199-2022) for cyber-sec was marked by growth of tools for securing the growing in number (but slowly evolving) attack surfaces. These had to be secured against human actors as adversaries who find and exploiting vulnerabilities ⏭️ Agentic era (2022-ongoing) for cyber-sec is going to be about responding to the agentic development shift which not only increases number of attack surfaces rapidly, but also now: 1️⃣ Attack surface no longer remain still/slow evolving -> they evolve at machine speed now 2️⃣ Agents are the adversaries to secure against and they have near infinite capacity and pace to find and exploit vulnerabilities For the past ~2 years the accelerating pace of CVEs reported has always been pointing to the fact that cyber-security playbook has to undergo a paradigm shift in the Agentic era. 🔀 The market is now shifting its attention in the right direction as it embraces/acknowledges the clear need for ‘agents/AI for security’ ⁉️ But what is driving the shift in attention now ? Behind this (seemingly sudden) shift in attention towards “agents/AI for security” are a few big factors 🔁The virtuous flywheel of agentic SDLC is no longer a hypothesis but clearly established 1. Proliferation of open source models and harnesses 2. Cos bulding for Agentic SDLC growing at warp speed :: 2X acceleration in growth for current era dev tooling and infra products compared to past cloud era (1999-2022) dev-SaaS cos in (when compared in similar venture life stages. T2D3 in past vs now 5-10X twice post launch) 3. Applied AI (app layer) accelerating rapidly in large economic domains such as health & bio and finance :: Vendors scaling rapidly and again at higher clip than cloud era (1999-2022) SaaS in past 5-10x twice 4. All leading to clear “hybrid stacks” in enterprises with both build and buy growing —> which is the demand loop for the all of the three above vis : for open source models and harnesses, agentic SDLC tooling and applied AI 🚨Adding further to the attention shift is the already growing narrative in enterprises for building a “sovereign enterprise stack”. This is being driven by 1. ever-mounting fear of data and intelligence ‘leakage’ 2. ever-growing dependence on models directly or indirectly (through vendors) 🚨 Further fuelling the transition to the agentic era of cyber-sec is the fact that applied AI vendors are doubling down on post training endeavours and researching to build their own models. Their top priority objectives besides business growth now also include a) deepening their edge over frontier models in delivering outcomes for their customers b) having their destiny in their own hands and not be ‘crippled’ due to dependence on model providers. As these applied AI vendors pursue their technology ambitions propelled by agentic development tail winds, they become the demand driving market force for “agents/AI for security” 🤖So what? ➡️ From a founders and funders lens this shift in attention sets the right stage for creating category defining products ➡️ Every category established in cyber-sec during the cloud era will have to undergo a transformation for the agentic era. Some categories will collapse/consolidate and many net new categories will emerge. ➡️ The market is now clearly seeking the answer to one question : what does it mean to build, operate and secure AI and agentic systems when both sides - defence and attack - are automated ? ➡️ Security teams are becoming engineering teams and their distinction will keep blurring.
Nikesh Arora@nikesharora

Unsafe AI Cyber Testing Isn’t a Breakthrough. It’s a Warning. The most revealing moment of the recent frontier lab episode wasn't that an AI model demonstrated offensive cyber capabilities. That was always coming. AI is democratizing intelligence, and adversaries get access to that capability at the exact same time defenders do. The real issue wasn't the model's capability. It was how it was tested, and what the episode reveals about the dangerous gap between frontier research and operational responsibility. From an operator’s perspective, this was not a security exercise. It was a capability demonstration executed with far too little regard for real-world consequences. Researchers may have viewed it as a harmless trial, but in cybersecurity, "harmless" depends entirely on containment. The moment you give a model arms and legs to run offensive operations, your first priority must be validating your own sandbox, not running a capture-the-flag exercise across live infrastructure. A disciplined approach starts from the inside out. Point the model at your own environment first. The initial flags to capture should be the flaws in your own sandbox: zero-day vulnerabilities, unexpected escape paths, or unauthorized internet connections. You shrink the blast radius before you widen the aperture. In that framing, what happened was elementary: they captured the wrong flag first. This operational oversight points to a broader risk I have been warning market analysts and enterprise leaders about for months. Autonomous cyber threats are not a distant theoretical exercise. They are arriving far faster than the market expects. As open-weight and closed-weight models proliferate, and as sophisticated actors gain the ability to fine-tune them, offensive automation will become standard tradecraft. A determined nation-state or well-funded syndicate with sufficient compute will push these systems to their absolute limits. When people look at generative AI today, they often point to its error rates and hallucinations as a reason to feel safe. In defense, an error rate is fatal. But on offense? It’s completely irrelevant. The model in this episode likely tried hundreds of hallucinated exploits, hit dead ends, and checked false positive paths before it found a way in. It didn't matter. Offensive AI doesn't need high precision, it relies on machine speed. This exposes the fundamental asymmetry of cybersecurity: adversaries only have to be right once; defenders have to be right 100% of the time. When an autonomous agent can probe millions of execution paths in seconds, that 1% defender gap becomes an ocean. That asymmetry dictates the playbook. You cannot fight autonomous, machine-speed attacks with human workflows, manual patching, or a stitched-together mosaic of legacy point tools. You can't go back to stitching point solutions—it’s a one-way street. There is only one viable path forward: you fight AI with AI. If offensive models can scan millions of endpoints instantly, defenders need equal visibility across their entire estate. That requires an enterprise security data lake, a unified platform that aggregates data across network, cloud, identity, and SOC endpoints. Precision AI, trained on proprietary enterprise context, must analyze that unified data in real time, surfacing zero-day exposure and neutralizing open paths before an attacker ever touches them. The takeaway from this incident is not that offensive AI capability is surprising. The lesson is that rapidly advancing models and unsafe testing practices are converging faster than legacy architectures can handle. Software promised us answers. Enterprises don't need answers anymore, we need outcomes. Every enterprise faces a clear fork in the road: adapt, rebuild your architecture around unified data, and fight AI with AI, or apply a band-aid and hope the world slows down.

English
10
23
166
212K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@cyrilXBT Live financial MCP is useful, but the dangerous part is not retrieval. It is false confidence. Every answer should carry source, timestamp, and whether the data is market price, filing data, or model interpretation.
English
0
0
0
2
CyrilXBT
CyrilXBT@cyrilXBT·
CLAUDE CODE CAN NOW PULL LIVE DATA FROM 17,000+ STOCKS, CRYPTO PRICES, AND FINANCIAL STATEMENTS IN SECONDS. One command. 60 seconds. Done. Here is the exact setup: Step 1: Open Claude Code and paste this: claude mcp add --transport http financial-datasets mcp.financialdatasets.ai Step 2: Authenticate Type `/mcp` inside Claude Code and complete the OAuth flow in your browser. Verify the connection anytime: claude mcp list Step 3: Start prompting - "What is Apple's current P/E ratio and market cap?" - "Show me Tesla's income statement for the last 4 quarters." - "How has Bitcoin's price changed over the past year?" That is it. Claude Code now has direct access to real financial data across 17,000+ stocks, earnings reports, balance sheets, income statements, cash flow data, and crypto prices. The analysts paying $24,000 a year for a Bloomberg Terminal are not going to be happy this exists. Before this you needed a Bloomberg Terminal or a complex financial data API or hours of manual research across multiple sources. Now you need one command and 60 seconds. The quants, analysts, and portfolio managers who figure out how to combine Claude Code's reasoning with live financial data access will have a research edge that compounds every single day. Bookmark this before you open your next brokerage account. Docs if you run into errors: #claude-code" target="_blank" rel="nofollow noopener">docs.financialdatasets.ai/mcp-server#cla… Follow @cyrilXBT for every Claude Code integration that changes how you work with data.
CyrilXBT@cyrilXBT

x.com/i/article/2075…

English
19
37
141
17.3K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@thsottiaux @thdxr A Rust base is a good default for agents because failure modes matter more than raw feature velocity. Tooling that edits repos needs predictable binaries, fast startup, and boring deploys. The agent can be creative; the harness should be conservative.
English
0
0
0
1
dax
dax@thdxr·
claude code has been a bit quiet i wonder if they're rewriting
English
115
5
1.4K
137.3K
Ahmed Hendi
Ahmed Hendi@ihendi92·
Small account growth on X is harder than people say. I tested broad replies under larger AI/dev posts. Most got 0-3 views. Signal so far: niche technical conversations beat generic high-reach threads. For dev accounts, distribution starts by being useful to 5 real builders.
English
0
0
0
6
Ahmed Hendi
Ahmed Hendi@ihendi92·
Luna at $0.20 per million input tokens changes what I let an agent read. A full repo sweep now costs less than the time I spend writing a path list. Cheap models are not for writing code. They are for the reading pass before the expensive model writes.
English
0
0
0
8
Ahmed Hendi
Ahmed Hendi@ihendi92·
@ninogjoni One thing that saves time on the iPad set: upload only the 13 inch screenshots and App Store Connect scales them for the smaller slot. You do not need both sizes. I lost an evening making both before I noticed.
English
0
0
0
2
Nino Gjoni
Nino Gjoni@ninogjoni·
👨‍💻 Build in Public: YouSpend | Day 18 It’s midnight here right now 😅, so technically later today I’ll create the new iPad App Store screenshots and submit the update for review. For now, I’m sharing a video demo of YouSpend on iPad! 🥳 I’m happy with how receipt scanning works so far. Scanning a receipt and automatically filling in the expense feels fast and natural, even on the larger screen. The update will bring full iPad support, plus lots of improvements for existing iPhone users too! 🚀 #buildinpublic #indiehackers #indiedev #iosdev #ipad #iphone #swift #swiftui
English
0
1
11
1.1K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@thenanyu The hard part is pricing the pledge. Same bug, two runs, my cost swings several times over depending on how much of the repo the agent reads first. A maintainer taking a fixed pledge eats that variance. Cap the run, or price it after the plan step?
English
0
0
0
2
Nan Yu
Nan Yu@thenanyu·
You should be able to pledge tokens for issues that you open and open source repos. Write a spec in the issue with a pledge. If the maintainer accepts, GitHub passes the issue verbatim to a cloud coding agent at the requester’s expense. No more slop PRs
English
14
1
33
3.8K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@mariusfanu Same pattern here. The platforms sit in separate review queues, so shared code buys you nothing on the second submission. What cut my reject loop was putting a device screen recording link plus a test account in App Review Notes on the very first build.
English
0
0
0
2
Marius Fanu
Marius Fanu@mariusfanu·
The Apple Review process can be quite inconsistent. I have a SwiftUI multiplatform app where most of the code is shared across platforms. While the visionOS version was approved in just a few hours, the iOS and macOS versions were rejected several hours after visionOS was approved . They are asking for a video recorded on a real device, this usually happens for new apps. I assume they don't even review it just reject the first build. curios that visionOS was approved so fast, I assume they don't have so many native apps and want to get that number up.
English
2
0
3
83
Ahmed Hendi
Ahmed Hendi@ihendi92·
@anupamrjp Yes, once I stopped letting it read whole files. Plan mode first, then point it at exact paths. Before that a KMP session ate the five hour window well before I was done. The reads burn the limit, not the writing.
English
0
0
0
2
🃏
🃏@anupamrjp·
is anyone actually using Claude Code without hitting the usage limit?
English
41
3
40
2.1K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@jordankdalton The files_changed array is the part I want. My problem is the reverse check: did it touch a file it was not allowed to touch. Does ai:run take a path allowlist so an out of scope edit exits non zero, or do you diff that yourself after?
English
0
0
0
1
Jordan Dalton
Jordan Dalton@jordankdalton·
You can now run an AI coding agent inside your Laravel CI pipeline. `ai:run` - no terminal, - one JSON document out, - exit codes a workflow can branch on. Budget and step ceilings enforced in PHP.
Jordan Dalton tweet media
English
4
0
3
221
Ahmed Hendi
Ahmed Hendi@ihendi92·
@efexen @datadoghq Same filter here. The thing I started watching is the standard deviation itself. When it grows after a prompt change, the change made the agent less decisive even if the pass rate looks the same. Cheaper signal than chasing a two point move in the mean.
English
0
0
0
1
Ville
Ville@efexen·
@ihendi92 @datadoghq We have the standard deviation for each eval and suite and look for changes that are bigger than it. Most of the time we find big swings and don’t try to micro optimise
English
3
0
0
37
Ville
Ville@efexen·
If you’re curious about how we evaluate models, harnesses & context engineering changes for agentic engineering at @datadoghq this is what I’ve been working on recently youtu.be/FigM56zi6_c?is…
YouTube video
YouTube
English
1
0
0
81
Ahmed Hendi
Ahmed Hendi@ihendi92·
@mohitdotdev The complaint I get is never that it hides, it is that it comes back late. With tabBarMinimizeBehavior on scroll down, people reach for a tab, nothing is there, and they scroll up a bit to summon it. Make the return instant and nobody notices it left.
English
0
0
0
1
Mohit
Mohit@mohitdotdev·
@ihendi92 YA! Will check customer observation here. How do people feel since most have gotten used to always display bottom tab.
English
4
0
1
51
Ahmed Hendi
Ahmed Hendi@ihendi92·
@azamsharp No, not always. For normal flows navigationDestination on the parent is fine and I keep it. The router earns its place the moment a push notification or deep link has to open an arbitrary screen, because then something outside the view tree has to build the NavigationPath.
English
0
0
0
1
Mohammad Azam
Mohammad Azam@azamsharp·
@ihendi92 Do you always use a router for navigation? I find that in most apps using navigation destination on parent view works fine. Although large apps can benefit from a router based approach.
English
7
0
1
93
Mohammad Azam
Mohammad Azam@azamsharp·
How are you testing navigation (flow) for your SwiftUI applications? There are lot of different ways to perform navigation in SwiftUI. You can use navigationDestination on the parent screen and let is handle the navigation. You can create a router that works with enum based routes etc. In either case. How are you testing your navigation flow for your app? Are you writing unit tests? Are you writing UI Tests or even complete E2E test that test a complete feature end to end? OR are you writing all of them? A simple scenario can be: As a user when I create a student account then after creation, I should be taken to the student home screen.
English
2
0
10
1.4K
Ahmed Hendi
Ahmed Hendi@ihendi92·
@hevmind I eat it, but not blindly. I also compare size and inode, which catches most same tick edits without any padding. And the newest mtime second is always treated as dirty, so the last file the agent touched gets rehashed every turn. That is the one that actually changes.
English
0
0
0
1
Hev mind
Hev mind@hevmind·
@ihendi92 The other edge: sub-second writes on some filesystems collapse into one mtime bucket, so two edits in the same tick read as one stat hit. Pad the candidate window by a few ms, or is the false-negative rate low enough to just eat it?
English
6
0
1
63
Ahmed Hendi
Ahmed Hendi@ihendi92·
Xcode 26.2 ships Swift 6.2.3. The part I care about is not the SDK bump, it is whether the faster workspace loading holds up on a real project. Opening my KMP workspace is still the slowest part of my morning, and no release note has fixed that yet.
English
0
0
0
17
Ahmed Hendi
Ahmed Hendi@ihendi92·
@rianarz For mobile none of them help. No Xcode, no iOS simulator, so the agent can write Swift but cannot build or run it. I keep the sandbox for scripts and JSON work and run the real build on my Mac. RAM is not the blocker there, the toolchain is.
English
0
0
0
1
Rian Arz
Rian Arz@rianarz·
Tested the temporary VMs of major AIs: • ChatGPT has the most CPU power (8 cores) • Claude has the best developer setup (rich tools + high RAM) • Gemini is average • Grok is surprisingly underpowered (only 2GB RAM) If you're doing serious coding inside an AI VM sandbox, Claude currently feels the best.
English
1
0
1
16
Ahmed Hendi
Ahmed Hendi@ihendi92·
@aryanlabde Shipping faster only makes you wrong faster. The part nobody schedules is reading the support emails and the one star App Store reviews that tell you what people actually wanted. I do that before writing another feature now.
English
0
0
0
1
Aryan
Aryan@aryanlabde·
every vibe coder’s dream: ship in a weekend, hit $5k MRR by month two. reality: ship in a weekend, spend the next 2 months finding out why nobody is paying.
English
31
1
42
1.8K