YGYoung Gaoinyounggao.hashnode.dev·Mar 21 · 8 min readI Built an AI That Reviews Every PR for Security Bugs — Here's How (2026)What if every pull request got a security review before merge? Not a linter check. Not a regex-based scanner. An actual review — the kind a senior security engineer would do — pointing out SQL injecti00
YGYoung Gaoinyounggao.hashnode.dev·Mar 21 · 7 min readRAG is Not Dead: Advanced Retrieval Patterns That Actually Work in 2026Every few months, someone declares RAG (Retrieval-Augmented Generation) dead. "Just use a million-token context window," they say. "Fine-tune instead," others suggest. They're wrong. RAG isn't dead — 00
YGYoung Gaoinyounggao.hashnode.dev·Mar 21 · 7 min readBuilding Your First MCP Server in TypeScript: Give AI Access to Your DataIf you've been in the AI space in 2026, you've heard about MCP. The Model Context Protocol, created by Anthropic and now an open standard, is being called the "USB-C for AI" — a universal way to conne00
YGYoung Gaoinyounggao.hashnode.dev·Mar 21 · 13 min readDatabase Migration Strategies That Wont Take Down ProductionEvery backend engineer has a migration horror story. Maybe it was the ALTER TABLE that locked a 200-million-row table for 47 minutes. Maybe it was the column rename that brought down every API server 00
YGYoung Gaoinyounggao.hashnode.dev·Mar 21 · 14 min readBuilding Production AI Agents with LangGraph: Beyond the Toy ExamplesBuilding Production AI Agents with LangGraph: Beyond the Toy Examples Every AI tutorial shows you a chatbot that answers questions. That's not an agent. An agent decides what to do, takes action, obse00
