A QA, day by day

Testing depends on context: why copying another team's strategy can sink you

You don't test a banking app the same way you test a mobile game. The sixth testing principle explains why there's no universal recipe, and what happens when you copy one.

12 min04/25

Claude Code vs Cursor vs Codex, months of testing all three side by side

Three AI coding assistants, three different mental models. An agent that lives in the terminal, an editor with autocomplete that feels like magic, and a remote agent you delegate to. When I reach for each one, and why using them in parallel has changed my workflow.

11 min04/24

Hardening my resume chat: prompt injection, budget, and PII

The defense layers stitched into the portfolio assistant routes. Multi-layer injection handling, off-topic detection with a random marker, stacked rate limits, Turnstile with a circuit breaker, streaming PII redaction, and a daily budget as the last line of defense.

10 min04/23

An AI assistant inside my resume, the chat architecture

How the embedded AI agent chat inside my portfolio is put together under the hood. SSE streaming with typed events, tool calling against the blog's public API, prompt-as-code, and HttpOnly cookie sessions.

7 min04/22

AI is splitting the Spanish tech job market in two

90% of developers use AI every day, but only 16% get training. A senior backend engineer makes €35,000 at a consulting firm or €130,000 working remotely for Big Tech. Manfred calls it the biggest pay gap in the history of Spanish tech.

9 min04/21

The quiet restructuring of Spain's tech sector

Capgemini announces an ERE citing AI, banks are bringing tech teams in-house at full speed, and the bodyshopping model that employs 285,000 people is showing structural cracks. This is how Spain's tech sector is being restructured in 2026.

8 min04/20

AI, Playwright, and the transformation of testing in 2026

Playwright is up 180%, Selenium is down to 22%, 82% of QA people think AI will be key, and a new European law turns accessibility into a requirement. An analysis of the tools and trends reshaping the tester profile in Spain.

10 min04/19

Maximum privacy in ScamDetector, Vertex with ZDR and obfuscated mode

Four changes to make ScamDetector's privacy story something that's in the code, not just a banner. Forced routing to Google Vertex with Zero Data Retention, a send selector with server-side obfuscation, a GDPR policy rewritten from scratch, and self-hosted fonts so the user's IP doesn't leak to Google.