... middle on an untrusted network. doesn't matter how. it's out there now. and it's valid for another 58 minutes. a self-contained JWT has no phone-home. the API just checks the signature and the expiry. it has no idea the token is in the wrong hands. you can't revoke it. you can't block it. you just wait it out. the usual answer is 'make tokens short-lived.' but short-lived tokens mean more refresh ... ... token revocation that actually works in real time. session-bound tokens, live introspection, back-channel logout that propagates everywhere the moment you pull the trigger. curious how people are handling this today. are you accepting the risk of JWT expiry

... file workspace should actually be. The basic problem I started with was simple: Storing a file is easy. Managing what happens after you share it is much harder. That led me to build things like protected sharing links, expiry controls, download limits, file requests, access tracking, and multiple-drive management. But while building it, I started wondering whether the traditional cloud storage model is too narrow. A file can be something you: - Store - Share with a client - Collect from someone ... ... rather than asking people to use a separate tool for every one of these workflows, I m experimenting with putting more of them around the file itself. I m still building and figuring out which parts are genuinely useful versus

... conditions under which it was true, so it can be invalidated by the world changing rather than by someone remembering to go and delete it. Nobody is asking a knowledge base to forget. Curious whether anyone here has shipped expiry properly, and what triggered it. Time, contradiction, or someone noticing by hand? Comment from Arash Rahimi(@irahimiam): "decisions and context are two different objects" is the sentence I needed. I've been storing handoff notes but never stopped ...

... puts the Mac to sleep. I kept the original concept intact: the menu bar remains a tiny LED, while timer controls live in Advanced Settings. This is time-based safety not battery- or temperature-aware behavior yet. Because expiry intentionally puts the Mac to sleep, please save your work before using it. The update is free, open source, signed, and notarized: https://capsomnia.com/ A big thank-you to Vivek Advani for contributing the original timer implementation on GitHub. What should ...

... does not use public profiles, phone number discovery or messages from strangers. Connections are created through single-use, time-limited QR, NFC or private token invitations. The current Android build includes encrypted messaging and attachments, trusted contacts, automatic message expiry, PIN and fingerprint protection, multiple selected recipients and an emergency alarm feature. I m especially looking for feedback on: APK installation and onboarding Invitation and pairing Adding trusted contacts Sending messages and images Message expiry

... does not and it asks. That way the gate fires on the thing that actually changed instead of on a clock or on a category. Comment from Dale Mooney(@dalemooney): @alex_amancio_candoa_   @aadilghani  Constant versus invariant is the useful thing here and I am taking it. One addition: you cannot separate them by observation, but you can by deliberately violating the constant once. A property that survives a test faking an unattended caller is an invariant ... ... that authority is currently armed; it does not tell you that this specific action, target, or trigger was approved. So I think the environment has to declare more than risk. Ideally the capability is bound to actor/trigger + tool + target + expiry

... with each other. 07/03/2025 is March 7 or July 3 depending on the billing software, and both interpretations are plausible for a purchase date. Getting this wrong is not cosmetic. A swapped day and month can move a warranty expiry by four months, which means we either tell a user their coverage is over while it is active, or worse, promise coverage that already lapsed. Our resolution stack, in order: explicit format cues elsewhere on the invoice, GST filing conventions ...

... Then staleness is checkable instead of a vibe. But that's a workaround, not a solution, and I'd rather be wrong about that than right. Curious what people actually building in this space think. Is anyone solving expiry, or are we all just accumulating ...

... then AssetLoom can be your shortcut. It covers things like device tracking, employee onboarding/offboarding workflows (you can leave it automatically assigned the device kits to the newcomers), or license renewal/compliance tracking (automatically alert once the license is close to expiry), same as low stock tracking for your inventories, or asset overdue to return... If any of that sounds like something that could make your day-to-day IT ops easier, we'd love for you to give AssetLoom ...

... most already were, it just carried the verdict and not the date it was true as of. Now anything like that gets a timestamp attached, not just a conclusion. Comment from Abdullah Javaid(@abdullah_javaid3): @rabnoor_s  An expiry, not just a timestamp. A date only tells the reader something if they already know how fast that particular fact decays, and that model usually lives in the writer's head, not the reader's. What's worked better ... ... does this for shell history, keeping when and where and whether it worked alongside the command instead of just the command. Not asking you for anything, and if you think a timestamp is insufficient and it really needs an expiry

... customer, AI turns that into a clean rule in the background. Checks it against everything else first so it doesn't save a duplicate or a contradiction. Rules can expire Holiday hours, flash sale codes, whatever. Set an expiry and it prunes itself once it's dead weight. Big policy docs don't nuke your prompt anymore Paste in a huge policy, it writes a short version for the main prompt and embeds the full thing for search. Fast ...

... GitHub README, documentation, or website. Status API Programmatically access monitor status for your own dashboards and integrations. SSL Certificate Monitoring PulseBoard now continuously checks your SSL certificates and tracks: Certificate issuer Valid from date Expiration date SSL health Automatic expiry warnings (within 14 days) Instead of discovering an expired certificate after your website goes down, you'll know before it becomes a problem. Foundation for a Smarter Vigil AI Behind the scenes, we're expanding the evidence available to Vigil ...

... built to fix something that bugs me every week: food quietly going bad in the back of the fridge. In Italy the average family throws away ~75 kg of food a year. FreshMind exists to change that, one expiry date at a time. What it does Scan a barcode it tracks the expiry

... luck. I'm a high school sophomore, and after getting interested in finance, I built StrikeLab an interactive options pricing education site that lets you actually play with the variables behind Black-Scholes (strike price, volatility, time to expiry, etc.) and see in real time how the option's value changes. A few things I ran into building it: Making math intuitive without hiding it is genuinely hard. Most "beginner" explainers avoid the formula entirely, which means users never build ...

... most preparation tools chase the Stage 1 documentation pass. The real certificate-loss risk is year-2 surveillance Nonconformities sitting open past 90 days, overdue management reviews, stale policies. So Encor instruments the full 3-year certification cycle: certificate-expiry countdowns, weekly governance digest emails, Corrective Action and Preventive Action aging widgets, a "ready for your Certification Body" traffic-light indicator. Built honest: I read ISO/IEC 42001:2023 and ISO/IEC Technical Specification 42006:2025 cover-to-cover (both purchased from ...

... disconnected chatbots they coordinate through the shared board, hand off to each other, escalate to a human when they hit a state they don't have authority for. Free Standard tier is live: 100 credits/month, no card, no trial expiry. Run the agents, see the moves on the board. Genuinely curious to hear from this crowd on mazori ai: How are you handling human-in-the-loop for autonomous agents in production? Slack approvals, web UIs, something else? Anyone else ... ... putting agent activity into the existing work management surface (Jira/Linear/Asana) vs

... building the lock system before opening the door. The latest beta room previews the future shopify_oauth_states table, including: state fingerprint payload hash signature hash session fingerprint tenant binding workspace binding Shopify store binding operator user binding expiry window consumed-at marker replay tracking callback receipt reference redacted metadata only The goal is to make Shopify OAuth state one-time-use, auditable, replay-resistant, tenant-bound, and safe before enabling any real exchange path. What is still left before ... ... link. Connect OAuth state persistence to the future callback flow. Once the state vault table exists, the system can move toward a real persisted OAuth state flow: issue state store only safe hashes/fingerprints bind to tenant/workspace/store/operator/session reject replay reject expiry

... building the lock system before opening the door. The latest beta room previews the future shopify_oauth_states table, including: state fingerprint payload hash signature hash session fingerprint tenant binding workspace binding Shopify store binding operator user binding expiry window consumed-at marker replay tracking callback receipt reference redacted metadata only The goal is to make Shopify OAuth state one-time-use, auditable, replay-resistant, tenant-bound, and safe before enabling any real exchange path. What is still left before ... ... link. Connect OAuth state persistence to the future callback flow. Once the state vault table exists, the system can move toward a real persisted OAuth state flow: issue state store only safe hashes/fingerprints bind to tenant/workspace/store/operator/session reject replay reject expiry

... average family throws away 30% of their groceries every year that's $1,500 straight in the trash, usually because they forgot what they had. What Spoilless does: - Scan your grocery receipt everything auto-adds to your pantry with expiry dates - Get alerts before food expires - AI suggests meals based on what's about to go bad - Waste dashboard tracks how much money you've saved Solo founder. Bootstrapped. Built with Lovable and Supabase. Early bird pricing $7.99/month ...

... things we focused on that most transfer tools skip: Every file up to 200MB is virus-scanned before the download link activates Files are encrypted in transit and at rest Links auto-expire and files are permanently deleted after expiry No forced sign-ups - just verify your email and send We're actively building and would love honest feedback on: What features are missing that you'd expect from a file transfer tool? Would you use this over WeTransfer ... ... storage on the free plan - most tools cap you at 100MB to 3 GB and charge for anything beyond that. We wanted the free tier to be more useful than that. 4. Guaranteed permanent deletion after expiry

... platform for teams that need full visibility into uptime, SSL, APIs, and SLA performance. The goal: Help teams detect issues faster, prevent downtime, and stay in control with simple, reliable monitoring more custom. What it does: uptime monitoring SSL expiry alerts API health checks SLA tracking custom automation rules Slack / Jira / YouTrack integrations & many more. Built in Europe with a security first approach. Built independently without outside funding, just a small team focused on creating a simpler, more reliable ...

... founder of Munch. I built this because I kept watching creators spend hours turning one video into posts. You paste a YouTube or Vimeo URL Munch extracts the transcript using 5 fallback strategies (so it actually works on videos competitors choke on) Claude AI writes 8 complete, platform-ready pieces in ~60 seconds. No file uploads. No per-action credits. One munch = everything. PH exclusive: Your first munch is completely free, no card needed. Just sign up at munch.video ... ... outputs, no subscription Annual plans available on all tiers. ============================================================================ WHAT'S RUNNING UNDER THE HOOD (the stuff that proves it's not just smoke and mirrors) ============================================================================ WHY CLAUDE? =========== Munch runs on Claude Anthropic's flagship model, not a cheaper alternative

... similar chaos building Hello Aria our AI productivity assistant that manages your day via WhatsApp/Telegram/iOS. WhatsApp delivery receipts + FCM tokens on iOS + Telegram update channels keeping them all in sync and cleaned up is genuinely non-trivial. The token expiry issue especially we had an early phase where stale tokens were silently failing and delivery rates were dropping for no obvious reason. Fixed it by adding token validation on every send and aggressive cleanup of 410/invalid responses. Good luck with ...

... outputs, no subscription Annual plans available on all tiers. ============================================================================ WHAT'S RUNNING UNDER THE HOOD (the stuff that proves it's not just smoke and mirrors) ============================================================================ WHY CLAUDE? =========== Munch runs on Claude Anthropic's flagship model, not a cheaper alternative. We made a deliberate choice not to cut corners on the AI layer because the AI layer is the product. Long-form content repurposing requires a model that can hold narrative across 800 words, match a brand voice consistently across ... ... different formats, and write something you'd actually publish not something you spend 20 minutes editing into shape. We tested the alternatives

... Document Vault is live today on Product Hunt. I built it after an immigration officer told me my daughter's passport had only 7 months left - I had no idea. I couldn't find a single app that tracked expiry dates for a whole family, worked offline, and didn't require an account or subscription. So I built one. - Track passports, visas, and travel docs for the whole family - Reminders at 6 months, 3 months, 1 month, and expiry