Sign in Subscribe

Codecora Blog

We build open-source dev tools. This blog is what actually happened along the way. Architecture calls, performance numbers, and the bugs that only show up in production.

Dark thumbnail with a red wireframe cube: self-host Rust error tracking in an afternoon, sentry crate compatible, single binary, v0.3.0 Apache-2.0

How to Self-Host Rust Error Tracking with TrapFall

Headline graphic: a reviewer config that could leak an API key in CI, three security PRs merged October 7, and a pull_request_target checklist.

A Review Bot Walked Its Own Config and Found a Key Exfiltration Path

Covecto v0.1.2 release thumbnail: one code path was lying. Purple ribbon artwork with pills for v0.1.2, 58 parity tests, MIT, Rust.

Covecto v0.1.2: The Optimizer That Silently Wasn't Running

codecora.dev thumbnail, black-left memwall: your agent just got a work badge; pills for announced Oct 18 at Money20/20, 4 design partners no bank named, 18M plus humans verified

Your agent just got a work badge: World ID for banking and finance

codecora.dev thumbnail, black-left memwall: 170 silent steps, 284 visible tokens; pills for 10.4 percent over baselines, 54.7 percent fewer tokens, 98 percent of first errors found

Hybrid reasoning agents hide their thoughts. Auditors still caught everything.

Dark thumbnail with a red network burst: headline reading Secrets now get redacted before storage, with pills for redact strict or off, CLI server and MCP, merged on develop Oct 21

Your Agent's Memory Is a Secret Store. Ours Now Redacts Before Persisting