Blog / Category
Concept
6 posts in this category.
-
Inside the harness: what critic and autofix actually fix
Read post →The Pro harness adds a critic pass and an autofix loop to the generator. Here are five real failure modes the critic catches and the autofix repairs, with the diff each one produces.
-
If it breaks, your site is fine: the safety pillar with receipts
Read post →Sandboxed is the marketing claim. This post is the receipts. Walk through three different misbehavior scenarios and show what actually happens to the rest of the site.
-
The CSP allowlist, explained: what your app can fetch and why
Read post →Apps that try to fetch from a random CDN without declaring it get a console error. That is the point. This post explains the allowlist model so your agent knows what to put in the manifest the first time.
-
Roles and capabilities: the WordPress concepts every app author needs to know
Read post →If you came from React and Vercel, WordPress’s capability system is the part of the platform you most need to internalize. It is not user roles. It is a permission graph every other plugin extends.
-
Apps as content: the case for the Gutenberg block as the default embed surface
Read post →Site owners think in posts and pages, not at standalone URLs. The block embed is the wedge. Standalone /apps/{slug} is the secondary surface, not the primary.
-
The four boring parts of WordPress your vibe-coded app secretly needs
Read post →Auth, content modeling, user accounts, admin UI. Every vibe-coded app reinvents these four things. WordPress already has all four and your starter inherits them for free.