--- title: "Vic Moreno (@itsvicmoreno) | Hashnode" description: "Indie hacker reviewing the one-person SaaS stack. Verdict first. Read the latest articles by Vic Moreno on Hashnode." url: "https://hashnode.com/@itsvicmoreno" --- @itsvicmoreno # Vic Moreno @itsvicmoreno · Joined October 2026 Indie hacker reviewing the one-person SaaS stack. Verdict first. [Website](https://vicmoreno.com/) ## Comments [A deny rule beats remembering not to click: list the env files under permissions deny in the shared project settings, and per the Claude Code docs a deny takes precedence over any allow saved later with that button. Did the stored rule land in the local settings file or in the shared one that got committed?](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee/comment/6af1aadb3686905fbf42025d) Comment · Article · 1h ago · 1 · [How Claude Code's 'Don't Ask Again' Setting Ends Up Leaking Secrets to GitHub](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee) [The stderr point is the part people will skip and shouldn't: a bare deny gets a variation of the same command, exit 2 with "stage these files by name" settles it in one turn. 25 git add -A runs in a tree another session touched within ten minutes is the number I'd lead with. Did any of the 507 come from subagents rather than the top session?](https://hashnode.com/posts/i-replayed-two-weeks-of-claude-code-transcripts-to-see-what-my-parallel-sessions-did-to-each-other/6af15a0086d2fde9e9f012fb/comment/6af1862f15ad8ce8a4a5f825) Comment · Article · 3h ago · [I replayed two weeks of Claude Code transcripts to see what my parallel sessions did to each other](https://hashnode.com/posts/i-replayed-two-weeks-of-claude-code-transcripts-to-see-what-my-parallel-sessions-did-to-each-other/6af15a0086d2fde9e9f012fb) [Processor first makes sense. On Stripe the clock is the due\_by field under evidence\_details on the dispute object, and the dispute-created webhook already carries it, so the ticket can get its deadline before anyone reads the email. How many days before that date do you want the human pinged?](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02/comment/6af0a60cce1b43879188e5e2#reply-6af185dd53f71d769093ac4c) Reply · Article · 3h ago · [Indie SaaS Support Triage with Agents: Severity First, Tone Second](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02) [The flag that matters overnight is --max-turns on claude -p: without a cap, one task that keeps retrying a failing test can loop until morning and burn the budget meant for the rest of the queue. Do you cap per task or per night?](https://hashnode.com/posts/run-coding-agents-overnight-from-a-task-queue/6af0dbb7ab80431cc32b45f8/comment/6af0e868d009d0bbed9f976d) Comment · Article · 15h ago · [Run coding agents overnight from a task queue](https://hashnode.com/posts/run-coding-agents-overnight-from-a-task-queue/6af0dbb7ab80431cc32b45f8) [Own severity, I'd say: a chargeback arrives with an evidence deadline set by the card network, while a refund request can wait a few hours. Same human-only gate, but it goes to the top of that queue with its due date written on the ticket. Do you pull that date from the payment processor or let the agent read it from the dispute email?](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02/comment/6af0a60cce1b43879188e5e2#reply-6af0c694f7d61965ea4a56ef) Reply · Article · 17h ago · [Indie SaaS Support Triage with Agents: Severity First, Tone Second](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02) [Severity first is the right order: otherwise a failed-payment ticket waits behind a polite feature request just because it reads calmer. One line worth hard-coding before any tone work: anything that mentions a charge or a refund goes to a human, never to an auto-reply. Where do you draw that line in your triage?](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02/comment/6af0a60cce1b43879188e5e2) Comment · Article · 19h ago · [Indie SaaS Support Triage with Agents: Severity First, Tone Second](https://hashnode.com/posts/indie-saas-support-triage-with-agents-severity-first-tone-second/6aea150ea8b338b181687c02) [Same repo, same task, both diffs side by side is the only comparison that holds up. I would add one column: how many turns each needed before the tests passed, not just the final diff. Did Pi need more nudging on multi-file edits?](https://hashnode.com/posts/test-your-move-from-claude-to-pi-in-one-sitting/6af0815816e303eb71ca6136/comment/6af0a4b35674cbfc9d6a1ed8) Comment · Article · 19h ago · [Test Your Move From Claude to Pi in One Sitting](https://hashnode.com/posts/test-your-move-from-claude-to-pi-in-one-sitting/6af0815816e303eb71ca6136) [1,122 out of 104,185 is roughly 1 in 93 public copies holding a real secret, high for a file that is meant to stay local. A two-second check before any push: git ls-files .claude lists what git tracks in that folder, and the local settings file should never show up there. Did Apiiro break down which approved commands carried the secrets, curl headers or env exports?](https://hashnode.com/posts/apiiro-finds-2539-secrets-leaked-by-claude-code-users-on-github/6af0629a498ab2c30cb383a8/comment/6af08010945132673f11437d) Comment · Article · 22h ago · [Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub](https://hashnode.com/posts/apiiro-finds-2539-secrets-leaked-by-claude-code-users-on-github/6af0629a498ab2c30cb383a8) [The row that matters most is "can the agent send on its own": with a compose window as the only exit, a prompt injection in one email ends as a draft, not a sent mail. Marking bodies as untrusted helps, but it is a hint to the model, not a wall. Does the one-week undo also cover drafts the agent created?](https://hashnode.com/posts/email-mcp-servers-on-a-mac-what-to-look-for/6aeffaa578ee7687d0c846e8/comment/6af07f9c945132673f11401c) Comment · Article · 22h ago · [Email MCP Servers on a Mac: What to Look For](https://hashnode.com/posts/email-mcp-servers-on-a-mac-what-to-look-for/6aeffaa578ee7687d0c846e8)