惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
SegmentFault 最新的问题
月光博客
月光博客
T
The Blog of Author Tim Ferriss
A
Arctic Wolf
S
Secure Thoughts
G
Google Developers Blog
博客园 - 叶小钗
Application and Cybersecurity Blog
Application and Cybersecurity Blog
L
LINUX DO - 最新话题
B
Blog RSS Feed
PCI Perspectives
PCI Perspectives
TaoSecurity Blog
TaoSecurity Blog
I
InfoQ
Stack Overflow Blog
Stack Overflow Blog
Help Net Security
Help Net Security
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
O
OpenAI News
Hacker News: Ask HN
Hacker News: Ask HN
Security Archives - TechRepublic
Security Archives - TechRepublic
P
Palo Alto Networks Blog
Cisco Talos Blog
Cisco Talos Blog
GbyAI
GbyAI
The Last Watchdog
The Last Watchdog
F
Fortinet All Blogs
V2EX - 技术
V2EX - 技术
宝玉的分享
宝玉的分享
C
Cyber Attacks, Cyber Crime and Cyber Security
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
H
Help Net Security
N
News and Events Feed by Topic
N
News and Events Feed by Topic
T
Tailwind CSS Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Know Your Adversary
Know Your Adversary
S
Securelist
V
V2EX
N
News | PayPal Newsroom
S
Security Affairs
C
Check Point Blog
T
Troy Hunt's Blog
P
Proofpoint News Feed
WordPress大学
WordPress大学
Google DeepMind News
Google DeepMind News
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
W
WeLiveSecurity
Microsoft Azure Blog
Microsoft Azure Blog
Y
Y Combinator Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
The next bottleneck after AI writes your code is reviewing the docs it writes
oubakiou · 2026-06-17 · via DEV Community

Coding agents draft specs, architecture docs, changelogs, and README updates in seconds — but a human still has to judge the quality of all that output.

The bottleneck shift

A year ago, the typical workflow was: you write a spec, you get comments, you revise, then you implement and get code review. Humans did most of the writing and coding. Now, agents produce first drafts of design docs, API references, runbooks, and onboarding guides — and they do it in seconds.

Code implementation and code review can now be handled by agents, so those are no longer the bottleneck. What surfaced instead is the step right before: document review. A human has to read 2,000 lines of generated markdown and decide what's wrong. The writing part got dramatically faster. LLMs can assist with document review too, but compared to code implementation and code review, the human judgment required is still larger.

This asymmetry compounds fast. Every agent-assisted project now has a stack of "needs human review" documents growing in a shared folder. If you're running multiple agent loops in parallel — one for the spec, one for the implementation plan, one for the test strategy — review becomes a pipeline stall. GitHub PRs remain the right tool when you need third-party review. But the step before that — the fast local self-review loop where you and your agent iterate on a draft — doesn't belong in a PR. Branching, diffing, and assigning reviewers is a lot of process for a first draft the agent wrote in seconds.

Why prose feedback is lossy

The most common workaround today is to have the agent read the document and then fix things based on natural-language feedback:

"The error handling in section 3.2 is too vague — be specific about what happens on timeout."

This looks reasonable. The agent reads it, searches for something about error handling, and makes a change. But several things go wrong:

Position is ambiguous. If section 3.2 has three paragraphs about error handling, which one did the reviewer mean? The agent guesses, and sometimes guesses wrong.

Context is lost. The reviewer was looking at a rendered document — they saw the Mermaid diagram, the table layout, the code blocks with syntax highlighting. The prose feedback carries none of that visual context.

Round-trips are vague. The agent applies a fix. Did it address the right spot? The reviewer pastes the updated draft back into the chat. No diff. No anchoring. Another round of guessing.

The fundamental problem: prose feedback loses the structure the reviewer had in mind. The reviewer knows which text range they're commenting on — but that spatial information is discarded the moment they express it in natural language.

Feedback as a machine-readable artifact

What if the reviewer's comments came back as structured JSON, with every comment anchored to a precise location in the source markdown?

That's what MDXG Redline (online demo) produces. The reviewer selects any text range in a rendered markdown document, leaves an inline comment, and on export the tool writes a JSON file like this:

{
  "document": "api-spec.md",
  "docHash": "a1b2c3d4e5f6a7b8",
  "exportedAt": "2026-06-15T10:30:00.000Z",
  "comments": [
    {
      "id": "f3a1c8b2",
      "quote": "The service retries up to 3 times",
      "comment": "Specify the backoff strategy — is it exponential? Fixed interval? This matters for downstream timeout config.",
      "headingPath": ["## 3. Error Handling", "### 3.2 Retry Policy"],
      "sourceLine": 142,
      "created": "2026-06-15T10:28:11.000Z"
    }
  ]
}

Every comment carries:

  • quote — the exact text the reviewer selected (human-readable reference)
  • comment — what the reviewer wrote
  • headingPath — the heading ancestry, from shallowest to deepest (["## 3. Error Handling", "### 3.2 Retry Policy"]), so the agent can navigate the document hierarchy
  • sourceLine — the 1-origin line number in the source markdown, so the agent can jump straight to the right spot

(The actual export also includes blockId, startOffset, and endOffset — internal anchoring fields used for round-trip re-import into the next review round. The four fields above are the ones your agent needs.)

No guessing, no ambiguity. The agent reads the JSON, opens the source file, goes to line 142, and applies the feedback directly. The feedback JSON is a plain file on disk — any agent that can read JSON and edit files can consume it, regardless of framework or provider.

The loop in practice

MDXG Redline is designed around a review loop where an agent and a human pass a document back and forth:

  1. The agent uses the CLI to generate a <name>-<hash>-review.html file from the markdown — a self-contained HTML file that renders the document with syntax highlighting, diagrams, and math.
  2. The CLI auto-launches the reviewer's browser.
  3. The reviewer reads the rendered document, selects text ranges, and leaves inline comments. One click writes <name>-<hash>-feedback.json to the same folder.
  4. The agent monitors in the background, automatically picks up the JSON, and applies the feedback.

Each revision gets a unique hash in the filename, so review/feedback pairs for different revisions never collide.

For Claude Code and Codex users, there's a md-review skill that automates the entire loop — HTML generation, waiting for feedback, and applying revisions:

# install the skill
gh skill install oubakiou/mdxg-redline md-review --agent claude-code --scope project

# then just tell the agent:
# "please request a review for spec.md"
# or invoke the slash command directly:
# /md-review README.md

The skill is a convenience wrapper. Since the feedback JSON is a plain file, the loop works with any agent — you can wire it into a custom LangChain pipeline or a simple shell script that polls for the JSON.

What it renders

MDXG Redline isn't just a review overlay — it's a markdown rendering engine packed into a single standalone HTML file with no backend and no dependencies.

Smartphone support — On mobile screens, the UI switches to a layout with a footer bar for TOC, Comments, and Search. You can review and comment from your phone — no need to wait until you're back at your desk.

Syntax highlighting for ~235 languages — The CLI auto-detects which languages your document uses and injects only those Shiki grammars, keeping the file lean.

Mermaid diagrams and KaTeX math — Fenced `mermaid blocks render as SVGs; $...$ / $$...$$ math renders via KaTeX. Both are auto-detected and injected only when present.

Word-style stacked pages — The document splits at H1/H2 boundaries into paper-like sheets you scroll through vertically, with a sidebar for navigation. Footnotes and left-hand keyboard navigation are also built in.

See the full feature list in the README for details.

Try it in 30 seconds

No install needed — open mkdn.review and load any public GitHub raw URL. Here's a one-click example that loads the project's own README:

MKDN

Select any text in the rendered document, leave a comment, and click "Copy as JSON" to see the structured output.

Want to try with your own project? Just replace the URL: mkdn.review/?url=<your-github-raw-url>.

Local review — if you have Node.js:

`bash
npx mdxg-redline your-draft.md
`

This generates a review HTML in the same directory and opens it in your browser. The generated file is fully self-contained — you can email it, drop it in Slack, or put it in a shared folder. Everything stays local; no content or comments are sent anywhere.

Privacy note: The standalone and CLI builds enforce connect-src 'none' via CSP — your document body and comments cannot leave the browser. The online version (mkdn.review) likewise never sends your content or comments anywhere — the only network request is the ?url= fetch, which retrieves public raw content from a short allowlist (GitHub raw, Gist raw).

It's an MDXG implementation

MDXG Redline is a third-party implementation of the Markdown Experience Guidelines (MDXG) by Vercel Labs — the read-only Viewer rendering profile, with a review layer (inline commenting + structured JSON export) added on top. See the compliance table for details.


MDXG Redline is MIT-licensed and fully open source. If reviewing agent-generated documents is a bottleneck in your workflow, give it a try:

If you've tried it with your agent workflow, I'd love to hear how the structured JSON feedback format worked for you — drop a comment below or open an issue on GitHub.