James Washington
writing about archive utils free game ideas replays
Technique

Never include delete endpoints when probing an API

When exploring an unknown API, the AI must never try delete or remove calls.

Hard-won lessons

how it works

Learned after an exploratory probe deleted a production playlist; probes are read-only by rule.

Technique: A pattern or hard-won lesson, written down so it isn't learned twice.

The code for this one lives in a private repo. This page explains the idea so you can build your own.

agentsapisafetytechnique

related

  • Dev tools first, browser automation last Technique Talk to a service's real API before making an AI click around a website.
  • Mission doc: 'abolish the session' personal-context thesis Document A one-page mission: everyone should own a private, portable memory assistant that never makes you 'start' something.
  • agent-merge: Jev-gated self-merge for agent branches Automation The one sanctioned way an AI may merge its own work: a script that reviews it first and refuses if it didn't show its work.
  • LinkedIn read-only sweep agent Automation Checks LinkedIn messages and connection requests every 30 minutes so nothing sits unseen.
← everything I've built
© 2026 James Washington
github twitter rss