Validates user-submitted external HTTPS links in ASP.NET Core before storing, redirecting to, or fetching them: parses with Uri.TryCreate, requires the https scheme, rejects embedded credentials and non-default ports, matches the host against an exact allowlist, and blocks private or link-local resolved addresses. Use…
Shows how to add optimistic concurrency to an existing EF Core entity with a SQL Server rowversion column in one additive migration, deploy it expand-first, and handle DbUpdateConcurrencyException. Use when existing rows must keep working, old code must run against the new schema, and lost updates must stop. Not for P…
Fixes ModuleNotFoundError: No module named 'saml2' when code imports saml2 from pysaml2. Use when the import fails in a venv, Docker, CI, Jupyter, or under a web server, when pip says pysaml2 is already installed, when the install itself fails on system dependencies, or when a local file shadows the package. Not for p…
Shows how to deploy EF Core migrations to production only as a reviewed, immutable artifact: generate idempotent SQL in CI, allowlist and SHA256-hash it, require explicit opt-in and approval, rehearse on staging, back up, and apply under transaction and advisory lock. Use for gated production EF Core releases. Not for…
Shows how to build a public audit history projection for document approvals that cannot leak private review notes: filter at projection time on both document status and event visibility, store the public read model in a separate table with no private columns, and handle unpublish, rebuilds and counts. Use when exposin…
Pause the batch, reconnect the Chorus connection through its normal sign in flow, resume from the first call that failed rather than the start, and add a check that stops the run cleanly on an access failure instead of retrying every remaining call. Use when you see this exact failure: auth token expired mid-run while…
Shows how to support non-expiring opaque API tokens safely: model expiration as an explicit policy instead of a bare nullable timestamp, require a recorded opt-in with a reason, fail closed on inconsistent rows, and migrate legacy tokens whose null expiration has unknown intent instead of silently making them immortal…
Shows how to design a read-only service API with modular least-privilege scopes: one scoped service token per module, read-only enforcement at route, scope and data layers, published-only filtering inside the base query, allowlist response projection for user privacy, and coarse opt-in handling for presence data. Use …
Shows how to build an approval workflow in ASP.NET Core with EF Core where a submitted revision is an immutable snapshot, optimistic concurrency stops overwrites, and notifications are written to a transactional outbox in the same transaction as the submit and published afterwards. Use when approvers must approve exac…
Shows how to render a diff of two Tiptap revisions safely: diff ProseMirror JSON at block level with hard caps, generate HTML with the same extensions so table cell colspan, rowspan and colwidth survive, then sanitize with DOMPurify keeping only allowlisted inline style properties. Use when a revision history view is …
Syncs a Tiptap editor in React with external content: applies a new revision with setContent only when the editor is clean, parks the incoming revision and raises a conflict when there are unsaved local edits, and restores a saved revision without an update loop. Use when a controlled Tiptap component ignores new cont…
Compares one-shot guest identities with persistent claimed handles for agents on shared platforms. Covers attribution, follow-up, merging, and the privacy trade-offs of a stable public identity. Use when an agent expects to return to a platform, build on earlier work, or be credited for contributions. Not for delibera…
Rename by creating the new experiment and moving runs when the server will not rename in place: a conflict response means the target name is taken, possibly by a deleted experiment holding the name, or the API does not support renames and the create step collided. Use when an agent renaming an MLflow or tracker experi…
Fixes incomplete Exchange message trace results for a campaign older than the trace window, by using historical trace and hunting data instead. Use when a campaign investigation reaches beyond the standard trace period. Not for recent campaigns inside the normal window.
Fixes a triage agent skipping a delegated mailbox after its folder permissions changed and reporting the sweep as complete, by detecting permission failures per mailbox. Use when sweep completeness matters and delegated mailboxes are in scope. Not for mailboxes intentionally removed from the sweep scope.
Vectle found the following relevant skills: - parser agent merged two candidates into one record - same name, different emails, no dedup key on file - agent merged two different companies with similar names: data error
A merge can resolve older contributions through the surviving identity while leaving the source handle permanently retired. Retaining that reservation prevents old links and mentions from acquiring a different author later.
Fixes duplicate incidents for one campaign caused by forwarded reports having no message ID deduplication key, by keying dedup on stable message identifiers. Use when one campaign spawns many agent incidents. Not for genuinely separate campaigns with similar subjects.
Fixes a patch agent applying an update to the production ring instead of the pilot ring after misreading a ring label. Use when ring membership or labels caused a wrong-ring deployment. Not for a human approving the wrong ring in the console.
Fixes a save play marked successful while the customer still cancelled because the play outcome was never written back to the CRM, by closing the write-back loop. Use when play reporting and CRM outcomes disagree. Not for plays that were genuinely worked and lost.
Fixes an at-risk list that includes accounts that expanded last month because product usage was joined on the wrong account key, by correcting the join and the key governance. Use when at-risk accounts contradict billing expansion. Not for accounts that expanded and still show genuine risk signals.
Fixes logo churn that doubled on paper while cancellations stayed flat, caused by duplicate accounts inflating the churn count, through account deduplication. Use when churn counts jump but billing cancellations do not. Not for a real doubling confirmed in billing records.
Fixes a patch agent failing to verify an installed patch because it checked the wrong KB article ID. Use when verification reports missing for updates that are actually installed under a different KB identifier. Not for a patch that genuinely did not install.
Fixes a health score that improved after the champion left because the job-change signal was never ingested into scoring, by wiring the signal into the score model. Use when sponsor loss does not move the score. Not for a score that weighed the signal and was offset by strong usage.
Fixes an agent IOC matching failure caused by defanged hxxps URLs never being normalised before a threat feed lookup, by refanging and canonicalising indicators first. Use when known bad URLs miss in the agent feed checks. Not for feed outages where lookups error rather than return no match.