Urgent.News

What's breaking now, across thousands of outlets.

Tech

A green diff is not a completeness check

Every agent-authored change arrives with the same reassuring signal: the tests pass, the diff is small, nothing looks obviously wrong. And every so often one of those changes has quietly removed a column, a branch, or a configuration key that no test ever touched. The diff was honest. It reported exactly what it checked — the tests that exist. The gap is what a diff can never report: the…

A single change in software doesn't always guarantee the absence of issues. The change may pass all tests, yet still have unnoticed impacts, such as the removal of a column, branch, or configuration key. The diff, which reports only the tests that exist, cannot capture the completeness of a change relative to the surface it touches.

This is because deletion can be consistent with all test assertions: removing something that was never selected will not trigger any failures. Conversely, addition often breaks things quickly, as readers who are unaware of the new column start returning incorrect data or throwing errors. Reviewers usually look for new additions, mistaking them for potential mistakes in the code.

However, agents commonly make the opposite mistake: deleting what they believe to be unused code, which is often right about the tests but wrong about the actual usage. To address this issue, one approach is to create a separate diff that shows the changes in the surface, such as columns added, removed, or type-changed for databases, keys removed or defaulted differently for config files, and fields dropped from the response shape for APIs.

By reviewing this separate diff independently of the code change, reviewers can better assess the completeness of the change. To implement this, snapshot the surface before and after the change, and fail the check on any removal unless the same change set also touches every reader of that field. If readers cannot be enumerated mechanically, treat it as a reason to require human acknowledgment instead of skipping the check.

This approach converts the question "Did the agent drop something?" from a review question into a mechanical one that can be reliably addressed even during busy periods. Importantly, this is not an argument against deletion or against relying on diffs. Instead, it highlights that a diff provides information about what changed, while the review question is about what remains. These are two distinct claims, and only the former should be checked.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

My 9 Favorite Pickleball Paddles From 3 Years of Testing (2026)

Paddles are getting more sophisticated and expensive. We’ve tested 100+ over the years to find our favorites.

  • Selkirk Vanguard Control Invikta offers control, consistency, and power
  • Diadem Warrior BluCore paddle is durable with lifetime warranty
  • Joola Persus is designed for power with thermoformed design

The client follow-up cadence that actually gets replies

You sent the proposal. Then silence. Most freelancers do one of two things: nothing, or a long "just checking in" that reads as anxiety. Both lose the deal. The problem is rarely the wording.

  • Three specific follow-up messages sent on fixed dates: Day 3, Day 7, and Day 14
  • Day 7 touch is crucial, determining client's decision to proceed or park the idea
  • Three rules ensure effectiveness: one question per message, no proposal resend, graceful exit

Episode zero first, the rest of setup after

a new underway account now opens on one card. it says episode 0, it asks for your first name and one line about what you are documenting, and it has one gold button: start episode zero.

  • Episode Zero is the new starting point of the setup process
  • Users provide first name and one-line description after Episode Zero
  • Simplified setup with fewer screens improves user navigation

How to Build a Next.js App That's Harder to Break in Penetration Testing 🔐

You ship your Next.js app. It looks great and the Lighthouse score is green. Then a penetration tester sends you a report, and it's longer than your README. It happens to many of us.

  • Keep Next.js and dependencies updated to patch security vulnerabilities.
  • Validate permissions and input on the server side, not just client-side.
  • Add security headers like CSP, HSTS, and Referrer-Policy to tighten app security.

More from Saturday 14 November →