AI coding guides & resources
Engineering decisions, tutorials, and video guides from the OTF team.
Expo push notifications in production: the setup checklist that prevents silent failures
Expo push tokens, FCM/APNs credentials, and send logic done right — a production checklist for AI-built React Native apps.
7 min readApp store submission checklist for an AI-built app that is ready to review
A practical app store submission checklist for AI-built apps: privacy, permissions, metadata, test accounts, release builds, and post-launch recovery.
9 min readRow-level security production checklist: test every path before launch
A practical row-level security production checklist for Supabase apps: grants, policies, service roles, views, tests, migrations, and agent review.
9 min readShip an AI MVP to production with a checklist that catches the real gaps
A practical AI MVP production checklist covering auth, data boundaries, spend limits, evaluation, monitoring, retries, and rollback before launch.
9 min readProduction repository conventions for AI coding agents: a working contract
Production repository conventions for AI coding agents: define boundaries, commands, protected paths, tests, and completion evidence for safer changes.
9 min readAI coding agent acceptance checklist: prove the change before merge
An AI coding agent acceptance checklist for production changes: define behavior, test boundaries, inspect diffs, and require evidence before merge.
8 min readAgent-readable repository structure: organize a codebase for safe AI changes
A practical guide to agent-readable repository structure: boundaries, entry points, tests, docs, and conventions that help AI coding agents extend production apps.
9 min readA cross-platform UI contract gives AI coding agents fewer ways to break your app
Define a cross-platform UI contract that helps AI coding agents preserve behavior, accessibility, tokens, and intentional platform differences.
8 min readVS Code 1.136: Agent Merge and multi-root agent sessions
What VS Code 1.136 changes for agent-assisted development: Agent Merge, multi-root sessions, chat hierarchy, and a safer review workflow.
9 min readCursor hooks for production agent workflows: block, audit, and verify actions
How to use Cursor hooks.json to audit edits, block risky commands, control tool calls, and keep agent workflows reviewable in production repositories.
8 min readCursor agent best practices: plan, scope, and verify multi-file changes
A practical Cursor agent workflow for planning multi-file changes, controlling context, writing rules, and verifying the result before merge.
9 min readCursor cloud agent subscriptions turn PRs and Slack threads into active work queues
Cursor cloud agent subscriptions wake agents from PRs, Slack threads, and schedules. Here is how to scope, verify, and govern the workflow.
9 min readCursor cloud agent builds make long-running coding sessions start from known state
Cursor cloud agent builds preinstall dependencies and preserve the last successful environment, giving production teams faster, safer agent sessions.
9 min readAI provider portability: build one model boundary without hiding provider differences
A practical design for AI provider portability: normalize your app boundary, preserve provider-specific features, and make fallback behavior testable.
7 min readHow to design safe tool permissions for AI agents in production apps
A practical guide to safe AI agent tool permissions: narrow capabilities, server-side authorization, confirmation, limits, retries, and audit trails.
8 min readLLM observability for production apps: what to trace, measure, and fix
A practical LLM observability guide for production apps: trace model calls, measure quality and cost, protect sensitive data, and debug failures.
6 min readA practical LLM evaluation loop for AI features that need to ship
A practical LLM evaluation loop for builders: create a small dataset, grade behavior, catch regressions, and connect test results to real user outcomes.
8 min readCursor prompts that keep agent sessions focused from first edit to final check
A practical Cursor prompt structure for bounded work, acceptance checks, stop conditions, and evidence across longer agent sessions.
7 min readAn AI app security checklist for builders moving from demo to production
A practical AI app security checklist covering prompt injection, access control, output validation, secrets, spend limits, and audit trails.
7 min readCursor AIUC-1 certification explained: what it covers and the guardrails you still own
AIUC-1 certifies Cursor's controls, not your repo. What the certification covers, where it stops, and the portable agent guardrails to add yourself.
7 min readOpen Source Cursor Alternatives: Honest Trade-offs for AI-Powered Editing
Compare open source Cursor alternatives by workflow, repository context, approval controls, model choice, and the review work production teams still own.
9 min readThe Real Checklist for Choosing a Web App Template That Ships to Production
Don't ship broken — here's what to look for in a web app template if you want it to work in production, not just look good in a demo.
10 min readMaster Your Next.js Conventions with a Bulletproof .cursorrules File
Build a focused Cursor rules file for a Next.js app with repository layout, server boundaries, imports, examples, and verification checks.
9 min readMaster Prompting for Cursor: Anchor Your App Extensions with Precision
Learn the four anchors for reliable Cursor prompts: conventions, an existing example, a tight scope, and a testable definition of done.
8 min read