Friday Fixes: The Fix That Wasn't

Short summary

Three debugging stories reveal why point fixes fail when addressing symptoms rather than root causes: a date coercion bug bypassed previous protection through a different code path, a deprecated Claude API model broke generation silently, and three stacked CSP bugs masked each other. The insight: agent-assisted development accelerates velocity but creates hidden gaps between isolated sessions.

• •Date coercion fix in formatDate() didn't prevent crash in posts.ts—different code path was vulnerable
• •Deprecated Claude API model had no API warning; silent failure required three days to diagnose
• •CSP header fix masked two other bugs; each fix revealed the next

Generated with AI, which can make mistakes.