Fact-check pass on the six blog posts

[FindMalek]

Closes #151
Closes #152
Closes #154
Closes #155
Refs #153, #156 (each needs one follow-up edit once FindMalek/sonaraem#414 / FindMalek/zero-locker#44 merge)

What

Every post was checked against its source: the Databuddy PR thread, the dotfiles repo at e6fcff6, the Sonaraem #414 head (7617407), Dukkani main, and Zero Locker at 1b912b4. Posts with factual corrections get updatedAt: 2026-10-01.

• Rate limiting oRPC (content: blog post — rate limiting an oRPC API (rewrite of the zero-locker article) #156): the post said the three limiter bugs "are fixed in zero-locker#44", but Fix React Server Components CVE vulnerabilities #44 is still open. It now says the fix is proposed and production still behaves as described. Added the link back to the original zero-locker.com article (decision: both pieces stand, this one links back). The excerpt no longer claims "about 60 lines".
• A database per PR (content: blog post — a full environment and database per PR in Dukkani #154): matched fix: CI workflow Node version mismatch causing silent cleanup-preview failures dukkani#514. The Neon delete step still ran (if: always()), only the install and R2 steps were skipped, and the fix was one character in three workflows. Removed "waiting for Neon to run out of room", which contradicted the post's own hedge. The Dukkani case study's stack list links to the post.
• Spotify allowlist rotation (content: blog post — getting past Spotify's allowlist in Sonaraem #153): the #408/#409 fixes are attributed to the open #414, and the "still open" section says production still runs the fixed 4 + 1 allowlist. The Sonaraem case study gets an update note pointing to the post. Its status no longer calls the fixed allowlist the plan, and it lists the self-hosting guide (sonaraem#395) as written.
• Dotfiles (content: blog post on my dotfiles and keeping every AI agent on the same rules #152): the "word for word" rule and the .zshenv snippet are now verbatim. The work tracker and the work-only skill are no longer named. Notes that the rsync -L fix (FindMalek/dotfiles#5) isn't landed.
• Batching ClickHouse in Databuddy (content: blog post — batching ClickHouse goal queries in Databuddy #151): the bot left two correctness findings plus a lint nit, and the review gap was about a month. Adds an optional post field to ContributionPullRequest, so the #680 row on the contributions card shows a "Write-up" link to the post. The chatbot context gets it as writeUp.
• Why your region matters (content: blog post — region deployment (rewrite of the zero-locker article) #155): everything checked out against the deployment history and code. Only change: links the Zero Locker case study.

Verification

• pnpm lint: 0 errors (4 pre-existing warnings).
• pnpm build passes (run locally with SKIP_ENV_VALIDATION=1, no secrets on this machine).
• On a local production server, the corrected sections render on each post. The Sonaraem and Dukkani case studies link to the posts, and /blog/rate-limiting-orpc.md makes the case-study link absolute.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
findmalek	Ready	Preview	Oct 1, 2026 5:17am UTC

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 45 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: bfe936e5-8e19-47fc-86b3-9c4714c0039e

📥 Commits

Reviewing files that changed from the base of the PR and between 7c248de and 040d420.

📒 Files selected for processing (12)

• components/app/project-contribution-card.tsx
• config/consts.ts
• data/blog/a-database-per-pull-request.mdx
• data/blog/batching-clickhouse-queries-in-databuddy.mdx
• data/blog/dotfiles-that-keep-every-agent-on-the-same-rules.mdx
• data/blog/rate-limiting-orpc.mdx
• data/blog/spotify-allowlist-rotation.mdx
• data/blog/why-your-region-matters.mdx
• data/projects/11-dukkani.mdx
• data/projects/12-sonaraem.mdx
• lib/chatbot-context.ts
• types/index.d.ts

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}