GitHub Spec Kit: give the AI agent a spec, not a vibe

Ask Claude, Codex, or Gemini to “build me an ERP with auth, billing, a dashboard, and a mobile app” and you’ll get something that half works and is architecturally cursed in ways you won’t notice until week three. The model isn’t bad at writing code. It’s bad at simultaneously inventing the product, the architecture, and the implementation order while also writing the code. GitHub’s Spec Kit exists to split those apart....

September 9, 2026 · 3 min · Oleksandr Kulbida

Hardening Claude Code: permissions, hooks, and custom commands

Claude Code is a powerful local agent. By default it can read most files on your machine. Here is how to lock it down and extend it for your workflow. Block access to credential files Put this in your global Claude settings at ~/.claude/settings.json. Claude will refuse to read any of these paths — even if you accidentally ask it to. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 { "permissions": { "deny": [ "Read(~/....

April 10, 2026 · 3 min · Oleksandr Kulbida