RSSAmplifier

Blog

Daniel Yang — Writing

Contract developer in Atlanta and Los Angeles. Full-stack web apps, infrastructure, and AI integration.

daniel-yang.comRSS feed ↗3 posts

Latest posts

You can't commit what Git can't see: keeping agent exhaust out of your repo

Agent notes and scratch files want to live next to your repo, but .gitignore is a promise, not a guarantee. Keep them structurally outside the worktree.

Beyond login: encrypting data with passkeys and WebAuthn PRF

The WebAuthn PRF extension turns a passkey into an encryption keystore. How pknotes derives keys from a Face ID tap, and what that can't protect.

My "Deploy to Cloudflare" button disabled auth

A Deploy to Cloudflare button turned my local-dev config into production secrets — and shipped copies of my app with admin auth off. A postmortem.