ZIV LABS
Updates

What changed, and when

A dated record of notable changes to this site: new pages and engineering notes, changes to existing ones, and corrections. If you find an error, tell us. Small Tools keeps its own updates page.

October 21, 2026

  • Added. A reference section, starting with a comparison of the permission and safety settings of three AI coding agents (Claude Code, Codex CLI, and Gemini CLI), checked against each tool's own help output and documentation on this date. AI coding agents: permission and safety settings
  • Added. An engineering note on treating a language model's output as untrusted input, with four runnable examples (shell, file path, HTML, SQL) and their fixes. It is the first note in an AI security series. Treat model output as untrusted input
  • Changed. The About page now says more about who runs ZIV LABS and what the engineering notes focus on. The product in development, previously listed as Business Loop OS, is now named Ops Loop; it is still not available. About
  • Added. This Updates page, a dated record of notable changes to the site. Updates
  • Added. A page about Small Tools: what it does by task, how it handles your input, and where its limits are. Small Tools
  • Added. A new engineering note on how to check whether an online tool uploads your input, with an observation of our own tool. Does this online tool upload your input?
  • Corrected. The home page and the Privacy Policy said that input to Small Tools is not uploaded. That statement applies to its formatting, conversion, and calculation tools; a few tools, such as IP and DNS lookups, send a request to an endpoint. The wording now matches Small Tools' own privacy policy. Privacy Policy
  • Changed. The engineering notes now carry full publication dates with a time zone and an image in their structured data, and the layout of the site header on narrow screens was fixed.

October 20, 2026

  • Added. The first three engineering notes: how JSON parsers disagree, how a flawed JWT verifier accepts forged tokens, and how to judge breaking changes in an OpenAPI contract. The code in each note was run before publishing. JSON validation pitfalls, JWT verification mistakes, Judging OpenAPI breaking changes
  • Added. A Guides index page for the engineering notes. Guides
  • Changed. The home, About, and Contact pages now describe the engineering notes and how corrections are handled. The site's pages are now generated with Next.js as a static export; page addresses did not change.