You’re right that I have to make sure that the backend changes don’t depend on the mobile changes, but I might have to be mindful of this anyway if the backend needs to stay compatible with old mobile app versions. Megamerge doesn’t seem to make it any harder.

I’d love to see a post of some kind when it’s all settled; you’re doing the lord’s work here.

What did the bracket in the slack channel determine was “Chicago’s best sandwich”? Or the top three, even? I’m always looking for new sandwiches.

Off the top of my head, I might nominate,

- the pork tenderloin at JT’s

- the Big L from Fontano’s (hot take, I know; it might go to Graziano’s if they hinge-cut the bread, but not doing so is a fatal flaw to me)

- the Cambodian fried chicken sandwich that’s occasionally available at Hermosa

- honorable mention: the comically oversized chicken torta at Migos

(Edit: I inexcusably transposed Bari and Fontano’s; the nomination is intended for Fontano’s)

I love it so much that when it was stolen on a trip to Montreal a few years ago, I bought the exact same year and model again without even googling other options.

It is a bit longer than I'd prefer--I live in urban Chicago and occasionally do have to forgo a good parking space, but usually those are, like, Honda Civic spaces that a slightly smaller truck wouldn't fit into either.

If you are the cincinnatian poet Caleb Kaiser, we went to college together and I’d love to catch up. Email in profile.

If you aren’t, disregard this. Sorry to derail the thread.

Regardless, here’s the CaMeL paper. Defeating Prompt Injections by Design (2025): https://arxiv.org/abs/2503.18813

Here’s a paper offering a survey of different mitigation techniques, including CaMeL. Design Patterns for Securing LLM Agents against Prompt Injections (2025): https://arxiv.org/abs/2506.08837

And here’s a high-level overview of the state of prompt injection from 'simonw (who coined the term), which includes links to summaries of both papers above: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

hyperclay is a web server that stores and serves versions of html files

Since the decision to delete a message is downstream from its untrusted text, I can’t think of an arrangement that works here, can you? I’m not sure whether to read you as saying that you have one in mind or as saying that it obviously can’t be done.

Lots of difficult things don't take very much time: shooting a bullseye, lifting something heavy, winning a round of geoguessr, playing the guitar solo from Peg. We don't call these things difficult because they take a lot of time in the moment, but because they take a lot of time to master.

I think reading code is like that too. When I think about the best code readers/reviewers I've worked with, they are (1) also among the best and fastest code writers I know, and (2) still much faster at reviewing code than they are at writing it.

https://clojuredocs.org/clojure.core/defn-

In Clojure this isn't syntax per-se: defn- and defn are both normal identifiers and are defined in the standard library, but, still, I think it's useful precedent for helping us understand how other people have thought about the minus character.