Lessons learned, problems and solutions
A Besançon wine shop owner gets 4 quotes for the same website: €990, €2500, €6000, €15000. Why the 10x gap? Realistic price grid for Burgundy-Franche-Comté, low-cost traps, and the 30% Pass Commerce regional grant.
The "offshore dev at €250/day" pitch seduced for 10 years. The 2026 verdict: mass returns to local. Time-zones, business semantics, legal — the real trade-offs for French SMEs.
Real price ranges in 2026 by site type: brochure €1500-8000, e-commerce €4000-25000, custom app €8000-100000+. The 4 traps that blow up the budget and the ideal-quote checklist.
My Leboncoin ads sank in 3 days. I built a Manifest V3 extension that bumps them on a loop and scans prospect demands with weighted scoring. Code, DataDome, anti-scam.
36 resume iterations in two hours. Claude codes, I judge the render, dual ATS + recruiter scoring at every pass. What the iterative loop really changes.
You put everything in your CLAUDE.md because "more context = better". How I cut 52% of a production CLAUDE.md after a security audit, and why the agent codes better with less.
The pre-pentest audit in successive passes. How to verify findings before panicking, and how to select which probes become permanent regression tests.
The event-XOR-error invariant on command handlers. How to inform the caller of a business outcome without breaking the event/error separation, and why audit logging must be atomic.
tls.Config.VerifyConnection only runs at handshake. A client on keep-alive after revocation keeps serving. Double-gate pattern and CRL hot-reload with monotonic check.
A single TLS port serving three hosts via SNI with different ClientAuth levels. Plus the session cert binding pattern to block cookie replay attacks.