Glossary
40 terms from the idea log, each explained in one plain-English sentence, with abbreviations spelled out.
Allow rule
an entry in Claude Code's permission list that says which command it may run without asking.
Backport
building a fix into an older version of a program, so the version number stays the same but the flaw is fixed.
Baseline
a standard that shows browser support for web features (what already works in all major browsers).
CDN
a network placed in front of a server (e.g. Cloudflare) that speeds it up and protects it.
CLI
a program you use in a terminal with text commands (e.g. gh).
Effort
a Claude setting that controls how much it "thinks" and works on a task (low to max).
Git
a version control system that keeps every version of your files; GitHub is its online hosting service.
GitHub Actions
GitHub's built-in automation that runs the workflows described in a repository.
h2 / h2c
the labels for encrypted (h2) and unencrypted (h2c) HTTP/2 in server settings.
HACS
Home Assistant's community add-on store, from which unofficial integrations can be installed.
Harness
the framework program (e.g. Claude Code) that runs the AI and gives it tools and instructions.
HTTP/2
the newer, faster version of the web's data transfer protocol that browsers and servers use to communicate.
Implicit state machine
unspoken "state logic" scattered across the code (e.g. loading/error/done) that can end up in contradictory states.
IPO
a company's first public sale of shares, by which it lists on a stock exchange.
Linux namespaces and FUSE
Linux kernel features that let a program run on an isolated "copy" of the file system without changing the real one.
Lockfile
a file that pins the exact versions of dependencies so they can't change unnoticed.
MCP
a standard "connector" through which an AI model reaches external tools (Gmail, GitHub, etc.).
npx
a Node.js command that runs an npm package without installing it.
NTLMv2 hash
a login "fingerprint" derived from a Windows password, which an attacker can use to log in as the user without knowing the password.
Open-weight model
an AI model whose "brain" (parameters) anyone can download and run.
Patch Tuesday
Microsoft's monthly security update day (the second Tuesday of every month).
Pentest
an authorized, simulated attack on a system to find its weak points.
PR
a proposed code change that is reviewed before being merged into the main code.
RCE
an attacker can run their own program on the server over the internet.
Skill
a package of instructions and scripts that Claude loads only when it needs it.
Spear phishing
a scam email tailored to a specific person and built on genuine details.
TBW
an SSD's manufacturer-rated lifespan, expressed as the total amount of data written.
Token
a chunk of text that is the basic unit AI models process and bill by (about ¾ of an English word).
Tool Search
a feature that loads tool descriptions only on demand, so they don't take up space in every request.
TPU
Google's own chip designed specifically for training and running AI models.
uvx
a command of the uv Python tool that runs a Python program in a temporary environment without installing it.
No results.