How AI dev tools work, how to build with them in Java, and how to secure them.
Mechanism over hype. Written, searchable breakdowns of the AI stack developers actually ship — Claude, MCP, coding agents, tokens, context, VS Code internals, and building production AI in enterprise Java with Spring AI — plus the AI security that protects them (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF). Every tutorial is paired with a video.
★ Start here · Most popular
The cornerstones — the best entry points into the catalog.
-
The AI Attack Surface Explained: The Mental Model for Securing AI
Learn the 6-stage AI pipeline attack surface—from data poisoning to excessive agency—mapped to OWASP LLM Top 10 2025, MITRE ATLAS, and NIST AI RMF.
ai attack surfaceowasp llm top 10 2025mitre atlasnist ai rmf -
What Is Spring AI? The Enterprise Java Framework for Calling Any AI Model
Spring AI 2.0.0 explained for Java/Spring Boot teams: what it is, why it's not just an LLM wrapper, and a working ChatClient demo in 10 lines.
spring aispring ai tutorialchatclientspring boot ai -
How LLM Tokens Work — And Why They Explain Your AI Bill
Claude never reads your words — it reads tokens. Understand tokenization, why it drives every dollar of your AI bill, and the letter-counting bug it creates.
tokenstokenizationllm costclaude api -
What Is MCP (Model Context Protocol) and How It Works
MCP is the USB-C moment for AI tools: one open protocol that collapses N×M custom integrations into N+M. Learn the three roles, three primitives, and two transports.
model context protocolMCPAI tool integrationClaude Code -
How Claude Code's Agent Loop Works (and Why It Breaks)
The agent loop is a while cycle around one API call. Learn how it runs, how it breaks in three classic ways, and the four code-level controls that keep it on track.
agent looptool usestop_reasonclaude code -
How Claude's Context Window Works: Limits, Costs, and Overflow
What fills Claude's context window, which models get 1M tokens, why the middle degrades, and how to design around all three constraints.
context windowlost in the middleclaude tokenslong context llm -
Prompt Injection Attacks Explained: How to Defend Your AI Agent
How untrusted content becomes agent commands, why indirect injection is the dangerous case, and the three layered defenses every production agent needs.
prompt injectionindirect prompt injectionai agent securityllm security -
Why Cursor, Windsurf, and Copilot Are All Built on VS Code
How VS Code's multi-process architecture — extension host, LSP, DAP, pty — became the shared skeleton under every major AI code editor.
vs code architectureextension hostlanguage server protocolcursor windsurf copilot
🆕 Latest tutorials
Freshly published — newest first.
-
Your Agent Blew the Context Window: Decompose Before You Overflow
A long agent run just overflowed the context window. The exam wants the first lever, not a rebuild — here's the mechanism behind the right answer.
Jul 24 -
It Failed and Answered Confidently Anyway: Error Propagation in Agents
Why a coordinator answers confidently after a subagent fails, the swallowed-error mechanism, and the fix: propagate and escalate. CCA D5 practice.
Jul 24 -
The Agent Loop Explained: Why Ignoring Tool Results Breaks Your Agent
An agent calls a tool, gets results back, then answers from memory anyway. Which part of the agent loop failed? Learn the mechanism, not just the key.
Jul 24 -
Where Does an Agent Remember Last Week? Session State vs Long-Term Memory
Why an agent forgets last week's conversation by default, and the architectural fix: session state vs a persistent long-term memory store.
Jul 24 -
Your Scratchpad Vanished on Compaction: Persisting Agent State
Why an agent's scratchpad notes disappear when context is compacted, and the fix: persist working state outside the window. CCA Domain 5 practice.
Jul 24 -
10,000 Docs Overnight, Cost Matters: Batch Processing LLM Jobs
10,000 documents, cost-sensitive, no latency deadline — the Message Batches API cuts cost ~50%. Learn when to batch vs call synchronously.
Jul 24 -
Your Retry Loop Never Stops: Bounded Retries for LLM Output
Why validation-retry loops must be bounded, and how feeding the error back into the next prompt turns rejections into self-correcting attempts.
Jul 24 -
Claude Certified Architect (CCA) Exam Guide: All Five Domains on One Diagram
The Claude Certified Architect exam mapped to one diagram — all five domains, their weights, and the five things you do to a Claude agent.
Jul 24
New breakdown weekly. Watch the videos and subscribe for the next one.
▶ Subscribe on YouTube