I live in Delhi and there are now two dark stores within a few streets of the kirana my family has bought from for years. The kirana knows us, gives udhaar, and is 2 minutes away. I can t work out why the apps don t just use it as their inventory.

My own guess is that nobody can trust what s actually on a kirana s shelf, but I m not sure that s the whole story. Does anyone here have a real answer? Has it been tried anywhere else in the world?

This is probably a shared problem for a lot of people right now.

It s Monday (but honestly, it happens on other days too) many people try to sync up, you end up with endless calls scattered throughout the day, and:

Hey everyone,

Historically I founded @Nack AI, And it did quite well. But we eventually packed it up. So, I've been away from product hunt for 3 years since.

The thread on when to launch got me thinking about what happens right after.

In the past, I launched product via Reddit and not PH. One that I did on PH was a dead one. We launched a fintech product a few years back and it went well (through Reddit though)! 100+ signups in about 72 hours. I have never felt more like a founder than I did that Tuesday.

Then Wednesday arrived. Two of us, both technical, trying to have 100 conversations while also fixing everything those 100 people were cheerfully breaking. We got to maybe 20-30 properly. The rest got a welcome email and then a long, dignified silence.

A lot of my fixes never become app updates. Prices, the copy of reminders and pushes, which AI engine handles a request, all of it sits on the backend or in a config document I edit from an admin panel. A bug there is fixed the same hour and nobody sees an update prompt.

The price is one rule I cannot break: every backend change has to keep working with older app versions, because a share of users never update. So the app release is left for things that really live on the device, and those go out bundled.

Where do you draw the line? What did you move to the server and regret, and what do you wish you had moved earlier?

I see this platform succeeding in moderating discussions and communities in general. When the platform succeeds, individuals succeed too (and vice versa).

I believe that everyone can make friends here and contribute to a strong, supportive community.

Connecting third-party MCP servers makes desktop AI assistants way more capable but it opens up serious security risks if those servers aren't tightly scoped.

A tool meant for simple data lookups often carries dangerous write or delete permissions in the background. When those tools sit directly in the context window bad data or malicious prompts can lead to unintended actions without explicit approval.

If you're building or using custom MCP tools daily how are you validating actions before execution to keep your system safe?

I've been thinking about a frustrating problem in agent development: when a run goes wrong, reproducing the failure isn't always straightforward.

You can save the conversation, but that doesn't necessarily preserve the tool responses, external state, or exact context that shaped each decision. Replay the run later, and the agent may take a completely different path.