Prompt-Injection Guardrails in Laravel: Defend the Tools, Not the Prompt

mujahidabbas.dev - submitted by Muhammad Mujahid Abbas

You can't out-prompt an attacker — to the model, your system instructions and a malicious support ticket are the same text. So stop defending the prompt and lock down the boundaries you actually control: tools scoped to the authenticated user server-side, middleware that screens and logs, output handled as untrusted input, a human in front of anything irreversible, and a fake-free test that fails CI the moment someone drops the auth scope.

Read more [mujahidabbas.dev]

More time to think

ma.ttias.be

Matthias writes that AI has shifted more of software development from typing to thinking, reviewing, and iterating. Nice reflection on how agentic coding, parallel worktrees, and voice dictation can slow individual features down while still increasing overall output.

Read more [ma.ttias.be]

Join 9,500+ smart developers

Get my monthly newsletter with what I learn from running Spatie, building Oh Dear, and maintaining 300+ open source packages. Practical takes on Laravel, PHP, and AI that you can actually use.

No spam. Unsubscribe anytime. You can also follow me on X.

The elephant in the room

www.joshwcomeau.com

Josh Comeau shares a thoughtful take on AI, arguing that deep technical skill becomes more valuable, not less, as these tools improve. His point is that strong developers can use AI to amplify their work, while less experienced builders still struggle without solid architectural judgment.

Read more [www.joshwcomeau.com]

Flood Fill vs the Magic Circle

sebastiandedeyne.com

Sebastian reflects on Robin Sloan's distinction between software's flood fill and the magic circle of the physical world. It's a sharp piece on where AI coding feels limitless, and where paper, printers, post offices, and other real-world constraints still break the illusion of full automation.

Read more [sebastiandedeyne.com]

How I write feature specs

sebastiandedeyne.com

Sebastian shares a practical three-step workflow for writing feature specs, from gathering notes with tools like Granola to using a thinking model to surface contradictions and scope. He then switches back to hands-on editing to shape the final spec and uses Spiral for a final pass without letting AI take over the writing.

Read more [sebastiandedeyne.com]

Spatie Guidelines as AI Skills

spatie.be

We turned our internal coding guidelines into reusable AI skills, so coding assistants can follow the same conventions their team uses. The package works with Laravel Boost and the broader skills.sh ecosystem, and ships with skills for Laravel PHP, JavaScript, version control, and security.

Read more [spatie.be]