DevOps · Information Security · Software Engineering
Engineering concepts, explained for people who build with AI.
Prodogon is a reference guide to the concepts underneath the code your AI coding assistant hands you — the definitions, tutorials, and comparisons that are precise, example-driven, and safe to cite.
449 guides · 4 topics · 36 clusters · written answer-first for humans and AI search engines alike
Guided journeys
Project-based paths for people who would rather build than read. Each one ends in something real — a live URL, a working login, a database you can restore — with every step linked to the guide that explains it. All journeys →
Build and Ship Your First Web App With AI
A small web app running at a public URL that a friend can open on their phone, plus the repo it lives in.
16 min read → beginner · 1–2 weekendsAdd Accounts and Login to Your App
Working signup and login, sessions that end when they should, and per-user data that another account cannot reach by changing an ID.
15 min read → beginner · 1 weekendKeep Your App Online
An app that redeploys on every push, tells you when it goes down, shuts down cleanly, and can be rolled back in one command.
14 min read → intermediate · 2–3 weekendsAdd a Database Without Regret
A schema you can change safely, migrations in version control, indexes built from real queries, and a backup you have actually restored.
16 min read → intermediate · 2 weekendsDebug and Refactor the Code You Didn't Write
A reproducible bug fix backed by a regression test, a safer refactor of a tangled module, and a codebase you can navigate without asking the assistant what it does.
15 min read → intermediate · 1–2 weekendsRun a Security Pass Before Real Users
A documented attack-surface inventory, every default AI security failure checked off or fixed, scanning in CI, and rotating credentials issued.
16 min read → intermediate · 2 weekendsMake Slow Work Reliable
Slow work moved off the request path into a job queue with retries, idempotency, a dead letter queue, and monitoring that notices a stuck worker.
15 min read → intermediate · 2 weekendsAdd an AI Feature Without Adding an Attack Surface
An LLM feature in production with validated output, scoped credentials, injection defences, cost limits, and audit logging of every model-driven action.
16 min read → intermediate · 1 weekendServe Users in Asia Without the Round Trip
An app that answers Hong Kong and Singapore users from a nearby edge with a measured p95, not an assumption — and no mainland filing required.
15 min read → intermediate · 1 weekendGive Your Coding Agent Its Own Sandbox
A coding agent that runs in an isolated workspace, without your credentials, with restricted network access — and a test that proves the boundary holds.
14 min read → beginner · 1 dayFind the Money in Your Cloud Bill
A smaller bill you can prove: the biggest line items identified, idle resources removed, the workload right-sized, and a before-and-after figure from two real invoices.
13 min read → intermediate · 1 dayRun Two Coding Agents Without Losing Work
Two agents working on one repository in parallel, each in its own worktree, with an explicit merge order and a test run on the combined result rather than on each branch.
13 min read →Start here
One entry point per goal. Each begins with a pillar guide and then walks into the guides that matter next.
Jev and Laya, end to end
Two decision-model pillars: what each one is, what it costs, where it fits, and how to run it in production.
Start with Jev AI: The Complete Guide to TypeSafe's Decision Model →- Jev AI: The Complete Guide to TypeSafe's Decision Model
- Jev Use Cases: 15 Decisions Worth Replacing an LLM Call For
- Jev Pricing: What a Decision Actually Costs
- How to Write Decision Questions for Jev and Laya
- How to Use Jev as an LLM Guardrail
- Jev Images and Box Questions: What the Preview Can Do
- Laya AI: The Complete Guide to the Open-Source Decision Model
- How to Fine-Tune Laya on Your Own Decision Data
- How to Connect Laya to a Coding Agent Over MCP
- Jev vs Laya vs Clef: Which Decision Model Should You Use?
Add fast decisions to your AI app
Replace fragile JSON parsing and extra LLM calls with typed decisions: what Jev, Laya, and Clef do, how to wire them in, and how to prove they are right.
Start with What Is a Decision Model? Jev, Laya, and Typed Answers Instead of Parsed Prose →- What Is a Decision Model? Jev, Laya, and Typed Answers Instead of Parsed Prose
- What Is Jev? TypeSafe's Decision-Only Model Explained
- How to Set Up Jev in Your App (API Key, SDK, and First Decision)
- What Is Laya? The Open-Source Jev Alternative You Can Run Locally
- How to Run Laya Locally: Install, First Decision, CLI, HTTP, and MCP
- How to Write Decision Questions for Jev and Laya
- Jev vs an LLM Classifier: Cost, Latency, and When to Switch
- Jev vs Laya vs Clef: Which Decision Model Should You Use?
- How to Add a Decision Model to a Vibecoded App
- How to Evaluate a Decision Model Before You Ship It
Build your first app with AI
Go from prompting an assistant to a codebase you understand: the workflow, the spec, and the review habit.
Start with Working With AI Coding Agents: The Complete Workflow From Prompt to Production →- How to Stay Motivated When AI Coding Makes Everything Feel Easy
- How to Build Confidence as a Beginner Using AI Coding Assistants
- How to Learn Software Engineering While Building With AI
- The Beginner Vibecoder Playbook: A Weekly Routine for Building With AI
- What Is Vibe Coding (and Where Does It Break Down)?
- How to Write a Spec an AI Coding Agent Can Actually Follow
- How to Review AI-Generated Code Like a Senior Engineer
- How to Think Like an Owner When AI Writes the Code
Ship it to production
The checklist between "it works on my machine" and a deploy you can repeat, roll back, and afford.
Start with Deploying AI-Generated Apps to Production: A Vibecoder's Checklist →Secure what you shipped
The failures your assistant ships by default — injection, missing access control, hardcoded secrets — and how to close them.
Start with InfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong →Run containers and Kubernetes
Containers are easy; running them reliably is not. Learn what the cluster does before your assistant provisions one.
Start with Kubernetes for AI Builders: Run What Your Assistant Generates Without Wrecking Production →Understand the machine you deploy to
No prior knowledge assumed: what the components do, how fast each tier of memory is, and how to size a server.
Start with Hardware for AI Builders: How the Machine Your Code Runs On Actually Works →Explore every guide
Every topic on the site, mapped into clusters. Pick the one that matches what your AI assistant is generating right now.
Running Agents in Production
Agents as a service: CI jobs, staging access, monitoring, runtimes, and a runbook for when one goes wrong.
CI/CD & Delivery
Push code, have it tested and deployed automatically, and know how to undo it.
Containers & Kubernetes
What runs your app, what orchestrates it, and what your assistant generates when you say "deploy".
- Kubernetes for AI Builders: Run What Your Assistant Generates Without Wrecking Production
- What Is Kubernetes and Why Does My App Need It?
- How to Deploy Your First App to Kubernetes
- Kubernetes YAML Explained: Deployments, Services, and What Your AI Writes
- What Is a Kubernetes Ingress (and Why Is My App Unreachable)?
- Docker vs Podman: What's the Difference?
- How to Write a Secure Dockerfile
Kubernetes Cost & Scaling
Autoscaling, right-sizing, and upgrades — plus the line items that make a cluster cost more than the app it runs.
- Why Is My Kubernetes Bill So High (and How Do I Cut It)?
- Kubernetes Requests vs Limits: Why Your Pod Gets OOMKilled
- Kubernetes Autoscaling Explained: HPA vs VPA vs Cluster Autoscaler
- How to Set Up Horizontal Pod Autoscaling (HPA) in Kubernetes
- How to Upgrade a Kubernetes Cluster Without Downtime
- Kubernetes vs k3s: Which Should You Run for an AI-Built App?
k3s & Single-Server Kubernetes
Real Kubernetes on one cheap server: install it, deploy to it, then run a database and GitOps on the same node.
Infrastructure as Code
Infrastructure described in Git — and the generated Terraform plans that almost delete production.
Deploying & Hosting
Rolling, blue-green, and canary releases, plus the proxy and CDN layer in front of them.
Reliability & Background Jobs
The unhappy path the AI doesn't write: retries, queues, graceful shutdown, and health checks.
Observability & Monitoring
Knowing your site is down before your users do, and what the reliability vocabulary actually means.
Cloud & Cost
Choosing a provider, running on free tiers, and stopping the bill from growing faster than the app.
Hosting for Asia & China Compliance
ICP filing and what it does not cover, Hong Kong versus the mainland, and choosing a region for users in APAC.
- What Is ICP Filing (and Why Do China's Cloud Hosts Require It)?
- ICP Filing vs ICP License: What's the Difference?
- Do You Need an ICP Filing for an App, API, or Mini Program?
- Does a Foreign Company Need a Chinese Entity for an ICP Filing?
- How to Renew an ICP Filing (and What Happens If It Lapses)
- Does Hosting Behind a CDN in China Require an ICP Filing?
- Hosting in Hong Kong vs Mainland China: What Actually Changes
- How to Serve Users in China Without an ICP Filing
- Which APAC Cloud Region Should You Deploy To?
Diagnose a Failing Deploy
The symptoms you paste into a search box: a build that only fails in CI, a site that went slow, a container that restarts, a 504.
Information Security
OWASP, prompt injection, non-human identities, secrets, supply chains, and the attacks AI-generated code ships by default.
96 guides →Securing the Agent
Skills, tools, and permissions are the attack surface now: what an agent can be told to run, and what it can reach when it runs it.
Securing AI Features
Prompt injection, MCP servers, and over-scoped agent credentials — the attack surface the moment your app calls a model.
Kubernetes Security
The cluster your assistant configured is open by default. Close it: RBAC, network policy, pod security, and secrets.
- Kubernetes Security for AI Builders: Hardening the Cluster Your Assistant Configured
- The Kubernetes Security Checklist for AI-Built Clusters
- What Is Kubernetes RBAC (and What Did Your AI Grant Away)?
- What Is a Kubernetes Network Policy?
- Are Kubernetes Secrets Actually Secret?
- Kubernetes Pod Security: Why Your AI's Container Runs as Root
Authentication & Identity
Login, sessions, tokens, OAuth, and the ownership check your AI skipped.
- Authentication and Authorization for AI Builders: Who You Are, and What You're Allowed to Touch
- How to Choose an Authentication Method for Your App: A Decision Guide
- What Are the Different Types of Authentication (and What Is Each One For)?
- JWT Security: Common Mistakes That Get Tokens Stolen
- What Is OAuth 2.0?
- What Is a Non-Human Identity (NHI)?
Web Vulnerabilities
The OWASP mainstays that keep appearing in generated CRUD apps, one by one.
- What Is the OWASP Top 10?
- What Is Broken Access Control (IDOR)?
- What Is CSRF (Cross-Site Request Forgery)?
- What Is SSRF (Server-Side Request Forgery)?
- What Is SQL Injection (and Why Does AI-Generated Code Keep Writing It)?
- What Is XXE (XML External Entity Injection)?
- What Is Server-Side Template Injection (SSTI)?
- What Are Security Headers (and How Do You Add Them)?
Secrets & Supply Chain
Leaked keys, hallucinated packages, and the trust you extend to every dependency.
- Secret Scanning vs SAST vs DAST: Which Do You Actually Need?
- How to Scan Your Codebase for Hardcoded Secrets
- How to Find and Remove Secrets From Git History
- What Is Slopsquatting (AI Package Hallucination Attacks)?
- What Is a Software Supply Chain Attack?
- What Is a Software Bill of Materials (SBOM)?
- How to Automate API Key Rotation
Threats & Defense
The failures that reach production, and the frameworks used to reason about them.
Software Engineering
Vibe coding, productive AI habits, spec-driven development, testing, databases, Git, and building systems that don't fall over.
172 guides →Agentic Coding Operations
The layer above generation: skills, standards, review packets, and keeping a long agent run on task.
- What Are Agent Skills (and What Is a SKILL.md File)?
- Agent Skills vs MCP vs AGENTS.md: What's the Difference?
- What Is Agentic Engineering (and How Is It Different From Vibe Coding)?
- Why Is Code Review the Bottleneck in Agentic Coding?
- How to Review a 2,000-Line AI Pull Request
- What Is a Review Packet (and Why Agents Should Produce One)?
- Why Does My Agent Ignore AGENTS.md?
- How to Keep a Coding Agent On Task for Hours
Productive AI Coding Mindset
Stay motivated, build a focused routine, recover from messy builds, and keep ownership when AI writes the code.
- How to Stay Motivated When AI Coding Makes Everything Feel Easy
- How to Build Confidence as a Beginner Using AI Coding Assistants
- How to Learn Software Engineering While Building With AI
- The Beginner Vibecoder Playbook: A Weekly Routine for Building With AI
- How to Build a Productive AI Coding Routine
- How to Recover When an AI Build Gets Messy
- How to Recover When AI Makes a Mistake in Your Code
- How to Think Like an Owner When AI Writes the Code
Working With AI Agents
Choose an agent, write a spec it can follow, review every diff, and coordinate more than one at a time.
- Working With AI Coding Agents: The Complete Workflow From Prompt to Production
- How to Write a Spec an AI Coding Agent Can Actually Follow
- What Is Spec-Driven Development?
- What Is Context Engineering?
- How to Review AI-Generated Code Like a Senior Engineer
- What Is Multi-Agent Coding (and Why Do Agents Conflict With Each Other)?
Debugging & Refactoring AI Code
How to fix code you didn't write, find the change that broke it, and stop the debt from compounding.
- How to Debug AI-Generated Code When You Don't Understand It
- How to Debug AI-Generated Code: A Complete System for When You Don't Understand What the AI Wrote
- How to Refactor AI-Generated Code Without Breaking Your App
- How to Find Which AI-Generated Change Broke Your App Using Git Bisect
- How to Work With an AI Coding Assistant Without Creating a Mountain of Tech Debt
- How to Find and Remove Dead Code Your AI Assistant Left Behind
Databases
Why the app is fast with 50 rows and slow with 50,000 — indexes, transactions, migrations, and backups.
- Databases for AI Builders: Why Your AI-Generated App Gets Slow and Loses Data
- What Is Database Indexing (and Why Is My Query Slow)?
- What Is the N+1 Query Problem?
- What Is a Database Transaction (ACID)?
- What Are Database Migrations (and Why Do They Break Deploys)?
- How to Choose a Database for Your App: A Decision Guide
Consistency & Scale
Locks, deadlocks, rebuild storms, and coordination across services — plus the read paths that go stale and the decisions that decide how far data spreads.
- What Is a Database Deadlock (and How Do You Fix It)?
- How to Read an EXPLAIN Plan
- What Is a Composite Index?
- What Is a Covering Index?
- Cache Invalidation Explained
- What Is a Cache Stampede?
- What Is a Distributed Lock?
- What Is the Outbox Pattern?
- What Is a Saga Pattern (and How Is It Different From Two-Phase Commit)?
- How to Version an API
- What Is a Materialized View?
- How to Handle Timezones in a Database
- What Is Sharding?
- What Is a Read Replica?
APIs & Backend
The patterns generated endpoints quietly omit: rate limits, idempotency, caching, and gateways.
Testing & Code Quality
The fundamentals no assistant will teach you: tests that catch regressions, linting that stays green, debt you can see.
Git & Collaboration
Version control, merges, rebases, and committing in a way the next person can read.
Jev: The Hosted Decision Model
TypeSafe's Jev for routing, triage, and guardrails: what it is, what it costs, and how to use it safely.
- Jev AI: The Complete Guide to TypeSafe's Decision Model
- What Is Jev? TypeSafe's Decision-Only Model Explained
- How to Set Up Jev in Your App (API Key, SDK, and First Decision)
- Jev Use Cases: 15 Decisions Worth Replacing an LLM Call For
- Jev Pricing: What a Decision Actually Costs
- How to Use Jev as an LLM Guardrail
- How to Write Decision Questions for Jev and Laya
- Jev Images and Box Questions: What the Preview Can Do
Laya: Local Decision Models
Run typed decisions on your own hardware: Laya's checkpoints, setup, fine-tuning, MCP server, and security boundary.
- Laya AI: The Complete Guide to the Open-Source Decision Model
- What Is Laya? The Open-Source Jev Alternative You Can Run Locally
- How to Run Laya Locally: Install, First Decision, CLI, HTTP, and MCP
- How to Fine-Tune Laya on Your Own Decision Data
- How to Connect Laya to a Coding Agent Over MCP
- Laya Security: Pin Checkpoints, Verify Digests, and Protect laya-serve
Decision Model Integration & Evaluation
Choosing between providers, adding a decision layer to an app, evaluating it, and defending it from prompt injection.
- What Is a Decision Model? Jev, Laya, and Typed Answers Instead of Parsed Prose
- How to Write Decision Questions for Jev and Laya
- Jev vs an LLM Classifier: Cost, Latency, and When to Switch
- Jev vs Laya vs Clef: Which Decision Model Should You Use?
- How to Add a Decision Model to a Vibecoded App
- How to Evaluate a Decision Model Before You Ship It
- Can Prompt Injection Manipulate a Decision Model?
AI Coding Operations
Running agents as tools rather than toys: rules files, MCP servers, sandboxing, context, cost, and parallel agents.
Hardware & Machines
How the machine under your code works: processors, memory, storage, GPUs, and the servers you rent.
23 guides →How a Computer Works
The four components, the latency ladder underneath them, and the units that make a spec sheet readable.
- Hardware for AI Builders: How the Machine Your Code Runs On Actually Works
- What Is a CPU (and Why More Cores Isn't Always Faster)?
- What Is RAM (and Why Does Your App Run Out of Memory)?
- SSD vs HDD vs NVMe: What Storage Speed Actually Means
- Bits, Bytes, and Bandwidth: The Units Behind Every Spec Sheet
- How a Program Actually Runs: From Your Python to the CPU
GPUs & AI Accelerators
Why AI runs on graphics chips, what VRAM decides, and when a GPU is the wrong purchase.
Servers & Rented Machines
A vCPU is not a core, a server is not a bigger PC, and the machine you rent is shared with strangers.
Performance & Sizing
The numbers that decide how a machine feels: the latency ladder, cores versus threads, memory sizing, and egress.
Pillar guides
Curated hubs that tie a cluster of guides together. Read one end to end, or use it as a starting map.
Start here
The four hubs to read first, whatever you're building.
Working With AI Coding Agents: The Complete Workflow From Prompt to Production
Choosing an agent, writing specs it can follow, reviewing its diffs, and debugging what you didn't write. Every guide in the AI coding workflow, in one place. 30+ linked guides.
14 min readDevOps for AI Builders: What You Need to Know When Your AI Writes the Infra
Your AI coding assistant writes CI/CD pipelines, Dockerfiles, and Terraform. Here's every DevOps concept you need to understand so it doesn't burn production down. 60+ linked guides.
12 min readSoftware Engineering for AI Builders: The Concepts Your Coding Assistant Won't Teach You
Your AI writes the code, but it doesn't teach you testing, architecture, databases, or Git. Learn every software engineering concept you need to go from vibecoding to shipping. 45+ linked guides.
15 min readInfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong
Your AI coding assistant ships SQL injection, exposed secrets, and broken access control by default. Learn every infosec concept you need to catch these before they hit production. 40+ linked guides.
14 min readJev & Laya
Two decision-model pillars: the hosted option, the local option, and the comparison between them.
Jev AI: The Complete Guide to TypeSafe's Decision Model
Jev AI explained: what it is, what it returns, pricing, latency, use cases, setup, limitations, and how it compares with Laya, Clef, and OpenAI.
12 min readLaya AI: The Complete Guide to the Open-Source Decision Model
Laya AI explained: checkpoints, router, local setup, speed, cost, fine-tuning, security, and how it compares with Jev and other decision models.
11 min readJev vs Laya vs Clef: Which Decision Model Should You Use?
A practical comparison of Jev, Laya, Clef, and OpenAI's Decisions API: hosting, license, modality, price, latency, and when each one wins.
9 min readWhat Is a Decision Model? Jev, Laya, and Typed Answers Instead of Parsed Prose
A decision model returns a typed choice, score, or yes/no probability instead of generated text. How Jev, Laya, and Clef work, and when to use one.
9 min readSpecialist clusters
Deep dives into the areas where AI-generated code fails most often.
Kubernetes for AI Builders: Run What Your Assistant Generates Without Wrecking Production
Your AI writes Kubernetes manifests it doesn't understand. Learn the objects, the failure modes, the cost traps, and the security gaps — with every linked guide.
14 min readk3s for Vibecoders: Kubernetes on One Cheap Server, Without the Cloud Bill
k3s is real Kubernetes in a single binary that runs on a $6 VPS. Learn what it bundles, how to deploy your AI-built app to it, and when a managed cluster is still the better call.
12 min readHardware for AI Builders: How the Machine Your Code Runs On Actually Works
A zero-jargon guide to computer hardware for people who build with AI: what a CPU, RAM, SSD, GPU, and data-centre server actually do, and how to size a machine for your app.
14 min readKubernetes Security for AI Builders: Hardening the Cluster Your Assistant Configured
A default cluster trusts everything inside it. Learn RBAC, network policies, pod security, Secrets, and image hardening — the Kubernetes security work your AI's manifests skip.
13 min readDeploying AI-Generated Apps to Production: A Vibecoder's Checklist
Your AI wrote the app. Now here's every step between 'it works on my machine' and 'it's running in production.' Deployment, monitoring, secrets, databases, and the checklist your AI didn't include.
10 min readDatabases for AI Builders: Why Your AI-Generated App Gets Slow and Loses Data
Your AI writes working SQL that fails at scale. Learn indexing, the N+1 problem, transactions, connection pools, migrations, backups, and consistency — with linked guides for each.
13 min readAuthentication and Authorization for AI Builders: Who You Are, and What You're Allowed to Touch
Login, sessions, JWTs, OAuth, passkeys, and the object-level checks your AI assistant skips. Every auth concept a vibecoder needs, with a linked guide for each.
12 min readSecuring AI Agents and LLM Features: The Attack Surface You Just Added
Prompt injection, MCP servers, non-human identities, and hallucinated packages — every security concept that applies once your app has an LLM feature or an AI agent. With linked guides.
13 min readThe 15 Security Failures Your AI Coding Assistant Ships by Default
AI coding assistants default to SQL injection, hardcoded secrets, missing access controls, and 12 other security failures. Here's every one, with the fix and the linked guide.
12 min readBackground Jobs and Scheduled Tasks: The Part of Your App Nobody Monitors
Cron jobs fail silently, queues lose messages, and retries duplicate work. Learn scheduling, queues, dead letters, backoff, idempotency, and monitoring — with linked guides.
12 min readHow to Choose a Cloud Provider for Your AI-Generated App
Your AI writes the app. The cloud runs it. Compare every major provider — Big 3, PaaS, and budget VPS — by cost, complexity, and use case. Decision guide for vibecoders deploying AI-generated apps.
16 min readRecent guides
-
What Is Agent Drift (and How Do You Catch It)? -
Why Does My Agent Ignore AGENTS.md? - Why Is My Coding Agent Stuck in a Loop?
- Why Does My Agent Keep Editing the Wrong File?
- Why Does My Agent Say the Tests Pass When They Fail?
- Why Did My AI Coding Bill Spike?
- Jev AI: The Complete Guide to TypeSafe's Decision Model
- Laya AI: The Complete Guide to the Open-Source Decision Model
How to use this reference
Prodogon is a free, independent reference. Every guide is written answer-first, so a single section can be read, quoted, or cited on its own — whether you arrived from a search engine or your assistant did.
Search the whole site
Every guide is indexed. Search for a term you saw in a diff, a config file, or an error message.
Open search →Browse by tag
Tags cut across topics — Kubernetes, databases, secrets, testing, and more — to pull together related guides.
All tags →About Prodogon
Who writes it, how the guides are sourced, and why it exists for people building with AI coding assistants.
Read about →