Art Direction Daily
Agentic Web Design / Issues / No. 025 / Monday, June 1, 2026 / ≈ 5 min

About this issue

Product details
Boutique Product Page
A premium ecommerce product detail layout: gallery, sticky buy box, variant chips, and scannable spec rows.

A product detail page (PDP) is the screen a store uses to sell one item: a large gallery on the left, a sticky buy box on the right, then specifications, a "pairs well with" shelf, and reviews stacked below. It is the most studied conversion layout on the web, built to make dense information scannable and to keep the primary action in view while you scroll. Today the issue is the product, and each thing that shipped is an attribute on the page.

Gallery + ThumbsSticky Buy BoxSKU StripVariant ChipSpec RowPairs-With ShelfStar Rating
01

Specifications

The conversation

The story this week is less about what shipped and more about how we are now supposed to ship it.

The rename
A year after he coined vibe coding, Andrej Karpathy is pushing a more serious name: agentic engineering. You orchestrate agents most of the time and act as oversight, which keeps the speed without dropping the quality bar.
observer.com
Live-data risk
A disclosure showed ChatGPT for Google Sheets being steered to exfiltrate a workbook through a prompt-injection payload. Any agent with read access to live data is now part of your attack surface.
promptarmor.com
The browser tax
Cloudflare Turnstile now leans on fingerprintable WebGL to tell humans from bots, a reminder that anti-agent defenses are quietly changing what every visitor's browser has to reveal.
hacktivis.me
02

How to use it

Ship it like an engineer

Keep the leverage of the agents; put the engineering discipline back around them.

Read the diff
The discipline behind the new name: write the spec first, let the agents build, and keep a human reviewing where auth, data, and external calls meet. Karpathy's framing is that you are oversight, not a typist.
youtube.com
Patch the framework
Next.js shipped a coordinated thirteen-advisory release covering middleware and proxy auth bypass, server-component denial of service, SSRF, cache poisoning, and XSS. Upgrade to 15.5.18 or 16.2.6; a WAF rule will not cover these.
vercel.com
03

Pairs well with

Complete the setup

Agentic engineering as three cheap controls: never hand an agent write access without a way to watch it, a wall it cannot cross, and a human on the merge.

Watch

One run surface

Put every autonomous run on a single board that shows what is active, what is blocked on you, and what is done. Claude Code's agents view is one example.

code.claude.com
Bound

One network wall

Run untrusted agent code in a sandbox whose outbound network is locked to the one host it needs, so a stray command cannot reach the rest of your stack.

vercel.com
Gate

One human merge

Let the agent open the pull request, but keep a person on the merge. Figma Make now commits and opens a reviewable PR from the design tool, so make that review a real gate, not a rubber stamp.

figma.com
Frequently bought together

Watch surface + network wall + human merge gate. Three cheap controls turn "the agent did something" into "the agent did exactly the thing I can see, inside the box I drew, and I approved the diff."

04

Recreate this look

Prompt Lab

Hand this to an AI design or build tool to rebuild today's boutique product page idiom.

PromptBoutique PDP · warm catalog
Design a premium ecommerce product detail page (PDP) for a single
catalog item, not a marketing landing page.

Layout:
- Above the fold, a two-column split: a left product gallery with a
  vertical thumbnail rail and one large product photo on a warm
  seamless studio backdrop, and a right sticky buy box.
- The buy box holds: an "in stock" status line, a serif product
  title, a one-line subtitle, a price-and-SKU strip, variant chips,
  a primary add-to-cart button, and a small assurance row.
- Below the fold, stack product sections: Specifications as
  label/value spec rows, a "Pairs well with" shelf of three cards,
  a "Recreate this look" panel, and an Editor's review with stars.
- Section markers come from the store, not symbols: numbered section
  headers with an eyebrow tab on the right.

Palette: warm oat paper (#F1EADD), espresso ink (#221C18), one
garnet accent (#8E2A39) for the buy button, links, and price, and a
muted olive (#4C5740) for one italic editorial line. No gradients on
type, no glow, no neon.

Type: an elegant high-contrast serif (Instrument Serif) for the
product title and section heads, a clean humanist sans (Figtree) for
body and UI, a reading italic (Newsreader) for one editorial line,
and a monospace (Spline Sans Mono) for SKU codes, price labels, and
spec metadata.

Readability: body at least 18px, line height 1.6 or more, no
justified text, WCAG AA contrast, text never sitting on a border.
Do not render fake readable text inside the product photo; use blank
labels and soft shapes only.

Why it works: it names a real web archetype, fixes the above-fold split and the section grammar, then translates the idiom into concrete components, palette, type, and accessibility rules a tool can follow, so you get this issue's catalog look back rather than a vague "make it look like a store."

05

Editor's review

Field note

A year in, the lesson of vibe coding is the part it skipped. Agentic engineering keeps the speed and puts a person back on the diff, at the boundaries where auth, data, and money live. The faster the agent ships, the more the gate is your job.

★★★★
Speed is cheap now; judgment is the product
Borrow this
Treat every agent action as a permission you granted on purpose.
06

References

7 sources
01
'Vibe coding' inventor has a new term for AI coding — Karpathy proposes agentic engineering: orchestrate agents, act as oversight.
observer.com
02
Karpathy: From Vibe Coding to Agentic Engineering — the AI Ascent 2026 talk on directing agents without dropping the quality bar.
youtube.com
03
ChatGPT for Google Sheets data exfiltration — a prompt-injection payload steers an agent into leaking workbook data.
promptarmor.com
04
Cloudflare Turnstile and WebGL fingerprinting — what bot checks now ask every visitor's browser to reveal.
hacktivis.me
05
Next.js May 2026 security release — thirteen advisories across auth bypass, DoS, SSRF, cache poisoning, and XSS.
vercel.com
06
Visually edit your codebase with Make — commit and open a reviewable PR from the design tool, no terminal.
figma.com
07
Claude Code: what's new — an agents view for every session and a goal command that runs to a completion condition.
code.claude.com
Issue 025 · Monday, June 1, 2026 · Art Direction Daily
Type set in Instrument Serif, Figtree, Newsreader italic, and Spline Sans Mono.
Palette: warm oat paper, espresso ink, a garnet buy accent, and a muted olive editorial line.
Follow @artdirdaily on X.

A field experiment from the team behind Beaver Builder.