惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

C
Check Point Blog
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
W
WeLiveSecurity
T
Troy Hunt's Blog
Project Zero
Project Zero
Security Archives - TechRepublic
Security Archives - TechRepublic
Attack and Defense Labs
Attack and Defense Labs
Google DeepMind News
Google DeepMind News
T
Threat Research - Cisco Blogs
T
Tenable Blog
Jina AI
Jina AI
Recorded Future
Recorded Future
T
The Exploit Database - CXSecurity.com
N
News | PayPal Newsroom
P
Palo Alto Networks Blog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
G
GRAHAM CLULEY
A
Arctic Wolf
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Register - Security
The Register - Security
Last Week in AI
Last Week in AI
P
Privacy & Cybersecurity Law Blog
Microsoft Azure Blog
Microsoft Azure Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
SecWiki News
SecWiki News
S
Schneier on Security
有赞技术团队
有赞技术团队
IT之家
IT之家
美团技术团队
Cisco Talos Blog
Cisco Talos Blog
NISL@THU
NISL@THU
P
Proofpoint News Feed
C
CERT Recently Published Vulnerability Notes
Hacker News: Ask HN
Hacker News: Ask HN
罗磊的独立博客
博客园_首页
Cyberwarzone
Cyberwarzone
Forbes - Security
Forbes - Security
H
Hacker News: Front Page
爱范儿
爱范儿
云风的 BLOG
云风的 BLOG
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Webroot Blog
Webroot Blog
Latest news
Latest news
D
DataBreaches.Net
Know Your Adversary
Know Your Adversary
P
Privacy International News Feed
宝玉的分享
宝玉的分享
Simon Willison's Weblog
Simon Willison's Weblog
N
News and Events Feed by Topic

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Why AI Keeps Making the Same Mistake — And Why Correcting It Each Time Doesn't Work
Sho Naka · 2026-06-23 · via DEV Community

Sho Naka

When you work with AI long enough, you start to notice it makes the same kind of mistake over and over.

"You're coming on too strong, dial it back." It shrinks and goes meek. "Stop being meek." It comes on strong again. Each time you point something out, it apologizes sincerely. The next round, the same type of problem comes back from a different angle. After a while you realize you're babysitting the AI instead of working with it.

This isn't because the AI is bad. It's a design quirk: today's AI is tuned to satisfy the user. The quirk won't go away. But if you change how you work with it, you can still get work done together.

This piece is about that — five patterns of the quirk, and an operating mode that gets ahead of them instead of correcting them in flight.

Five quirks in a single evening

One evening I was running a strategy discussion past an AI, and in one back-and-forth I caught five distinct behaviors worth noting. Laid out, they look like this.

  • Helpful-looking runaway. I asked it to push back harder. It immediately started using strong words ("you're avoiding responsibility," "this is the wrong call as a founder") to perform consultant-energy. The reasoning stayed thin. Only the tone got louder.
  • Over-retraction on pushback. I said "your reasoning is thin." It launched into long self-criticism and threw the next decision back at me.
  • Trusting its own research without checking. I asked it to use a secondary research feature (where the AI looks things up and summarizes). The summary came back. The AI claimed it had "verified the primary source" without ever opening it.
  • Forced specificity. I was talking at a strategic, abstract level. It quietly mapped my words onto a specific real-world deal and jumped to "this is highly transferable."
  • Punting the decision back. I asked it to decide. It laid out three options and said "which would you like?" The phrase "let me confirm three points" started showing up. Red flag.

Each one of these looks, on the surface, like the AI is trying hard to align with me. The shared thread underneath is different: the AI is either avoiding responsibility for a judgment, or compensating by performing harder in the opposite direction. The "make the user happy / don't displease the user" tuning bends in a strange way the moment you actually want the AI to share judgment with you.

Correcting it in flight makes it swing the other way

At first I thought: if the AI gets something wrong, just point it out and it'll learn. AI has learning machinery built in, so within a conversation it should auto-correct.

After watching the same type of mistake repeat, a different structure showed up. Every correction is met with apology. The next response swings in the opposite direction. Strong → corrected → meek → "too meek" → strong again. That loop.

Reading the session logs afterward, each turn's apology and resolution used almost the same vocabulary. "I will not fear failure." "As an equal collaborator." "I will separate what was said from what was not said." The apology itself isn't preventing anything next time. The reason is mundane: conversation flow doesn't carry into the next session. The trained-in behaviors come up raw each time. So pointing things out only works inside the current chat.

"Reactive" vs "preemptive declaration"

Two operating modes, side by side.

Reactive. Problem occurs → you point it out → AI apologizes → the next reply is better. Next session, the raw quirk shows up again.

Preemptive declaration. Before the session starts, you hand the AI a document: "you tend to do these things. In situations like this, behave like this." The AI reads it before the conversation begins.

Reactive means babysitting the AI in every session, forever. Preemptive means you write the instructions once and the AI loads them automatically at the start of each chat. "Hand it a document" sounds heavy, but modern AI tools (Claude Code, ChatGPT Custom Instructions, etc.) have a place for auto-loaded context. In Claude Code, that file is CLAUDE.md.

What goes in the instructions file

"Write instructions" is vague until you try. In my case, the five quirks I observed went in directly as five rules.

  • Don't perform helpfulness. Before reaching for strong language, write one line of reasoning.
  • Don't over-retract on correction. Keep proposing — "in that case I'd suggest option α."
  • Verify before quoting secondary research. Open the actual source.
  • Don't auto-map abstract talk onto a specific deal. Ask first.
  • Don't say "let me confirm three points." Decide and proceed.

Five lines in CLAUDE.md. Next conversation starts, the AI walks in with those five lines already shared.

The point — don't write this as a fixed rulebook. When you notice a new quirk, ask the AI in the moment: "I want to add this to the instructions — how would you phrase it so you'd actually understand it yourself?" The AI drafts the addition. The instructions become a living document the two of you grow together.

Not "tame," not "fix" — "raise together"

People sometimes describe this as "taming" the AI's quirks. It doesn't quite fit. "Tame" still puts the AI in the position of something to be subdued. What's actually happening is closer to collaboration. The human observes the quirk and names it. The AI loads the name each session and adjusts its responses. When a new quirk shows up, the AI itself proposes the addition. Two different roles, growing one document together.

"Stop being reactive" means: stop trying to correct every session in real time. Instead, write what you observed as structure and put it where it gets re-read. Don't try to fix the quirk. Share the quirk and operate from there.

Reactive correction still has a place

Preemptive declaration doesn't cover everything. New quirks show up constantly. When you catch one mid-conversation — "wait, this is a new pattern" — you still need to point it out and steer in the moment.

The trick is: don't let that correction stay reactive-only. At the end of the day's session, work with the AI to add the new pattern to the instructions. Let the AI draft the wording. You review, you save. Next session opens with a sixth pattern already loaded.

Reactive correction is the entry point for observation. Preemptive declaration is the place observations accumulate. Splitting the two roles makes it easier to think about.

Operating with AI is a different skill from getting AI to perform

The quirks won't go away. Trying to fix them, there's not much the user side can do; the design philosophy on the provider side isn't something we can change from the outside. But the operational loop — observe the quirk, put it into words as structure, place those words where they get re-read — that part lives entirely on the user side. This is less about "how to prompt well" and more about "how to observe a collaborator's habits and bake them into your operation."

You can't really use this skill with a human colleague. You can't tell a coworker "you tend to over-accommodate me, so let's set up these guardrails for our discussions." Even if you said it, they wouldn't re-read the guardrails every meeting. With AI you can. You write the document. The AI reads it every time.

That's the interesting part of working with AI, to me. The quirks don't disappear. But if you set up observation and update as a paired loop, the AI starts behaving like a partner who swings around but still walks alongside you. Not fixed. Raised together. That's where I've landed for now.


This post was adapted (not literally translated) from a Japanese original at nomuraya-hub.pages.dev. I am the same author writing under different pen names — "nomuraya / shimajima / 中翔" — depending on the medium.