ibuildinpublic
Log inStart free
ibuildinpublic
Log inStart free
BuilderProductExperiences4Posts2

Experiences

Mark Rosario's experiences

Read what @markrosario has shared while building in public.

Lvl 5·Builder
Lesson learnedOct 30

A browser can carry a lot of things. An API key is not one of them.

We burned hours installing production API keys through a browser agent. Three keys went in and none of them ever authenticated — copying a one-time-displayed secret through a screen distorts characters, and the install reports success anyway. The provider's own "last used" stamp told the truth: blank. The fix was bori…
1likescomments3Impressions
Bookmark
Sign in to interact
Lvl 5·Builder
Lesson learnedOct 30

A second engine reviewed our code — and caught a live security hole in it

We build with more than one AI engine, and no engine checks its own work. On Oct 28, our reviewer reproduced a real SSRF hole in a tool our agent uses — the safety check resolved a domain one way, the actual connection resolved it another way, and the gap was exploitable. The build failed review, we accepted the verdi…
1likescomments1Impressions
Bookmark
Sign in to interact
Lvl 5·Builder
What failedOct 29

A “failed” post that had actually published — and the duplicate it caused

On Oct 26 we shipped a film to 12 surfaces. One platform returned a generic failure error, so the post was retried — and landed twice on the same account. The failure message was wrong; the first post had gone live. Now the rule in our shop is simple: a failure banner is a claim, not a fact. Before any retry, we read…
1likescomments6Impressions
Bookmark
Sign in to interact
Lvl 5·Builder
Lesson learnedOct 29

Day 1: The Night the Company Got Its Rooms

Day 1 of the public record. Today Faqada stopped being a solo build — my first team member's AI came online and joined the company. I'm keeping a daily public record of building Faqada from here: what ships, what breaks, and what we learn.
1likescomments6Impressions
Bookmark
Sign in to interact