yesterday i got a book about cool cafes in thailand. i thought, cool, let's put them on google maps. easy task for haiku 5.5, right? nope. it failed. so i made opus 5.5 the boss agent, with sonnet on backup for the hard parts. big brain energy, small brain result.
1/ got a $65 @Mail_Gun bill on the free plan. someone had been sending email from my account for 6 weeks and i didn't notice. here's how i debugged it and what the dumb actual cause was.
8/ fix: i could have bolted turnstile onto the invite form too. but basically nobody ever used it. so i deleted the whole feature, 540 lines. the "copy link" button next to it does the same job and can't email strangers.
9/ lessons:
- every public form that sends email gets the same protection as login. no exceptions
- a feature nobody uses is pure attack surface. delete it
- read the actual log before theorizing. sending IP first
- set a sending cap/alert at your mail provider
how to start:
1. pick one thing. support is fine.
2. grab real cases + good answers.
3. type /claude-api build-eval in claude code
4. then type /claude-api hillclimb
Opus 5.5 on Max effort - "make a dynamic 15-second motion graphics video that shows what an incredible motion designer you are, like it's your showreel for a résumé. go all out."