
A Signed Webhook Is Not Permission to Run the AI Workflow Again
Separate signature checks, durable receipt and permission to act. A practical webhook admission design keeps repeated deliveries from becoming fresh AI workflow requests.
Insights, tutorials, and updates from the ZharfAI team

Separate signature checks, durable receipt and permission to act. A practical webhook admission design keeps repeated deliveries from becoming fresh AI workflow requests.

Repeated JSON keys can disappear before validation begins. Reject ambiguity at the raw-input boundary and keep reviewers and executing tools on the same accepted data.

Decide when streamed AI output may become a final answer by separating byte decoding, event boundaries, stop reasons and application acceptance.

Correct OCR text can still point to the wrong evidence. Preserve page identity, units and image transformations before showing an exact document citation.

Haiku 5.5 brings a million-token context and much lower prices. The 100K pricing threshold, effort settings, and API changes determine what teams actually save.

Reading Anthropic's 144-page Haiku 5.5 system card: benchmark conditions, prompt injection, sandbox behavior, honesty regressions, oversight, and model welfare.

Passing tests do not establish that they can detect a defect. Use an isolated code mutation, a boundary example and a requirement-based assertion to assess the evidence before merging.

Two different identifiers can become the same value before an AI model sees them. Preserve their type through imports, detect collisions and know when to recover the original.

A lower p95 does not always mean a faster assistant. Learn how to pool latency measurements, expose traffic-mix changes and judge the evidence before a release.

Displaying a remote image is a network action. Separate text, links and media so an AI answer cannot quietly authorize an outbound request before the reader clicks.

A new test row is not necessarily a new customer. Choose customer and time boundaries that match deployment, then check overlap, label timing and score weights.

Sonnet 5.5 cuts cache-read pricing on October 7. We examine task costs, code-review evidence, API changes, and when Opus 5.5 still earns its higher price.