Surviving the AI Vulnerability Thunderdome
AI is finding bugs faster than humans can fix them. From the PHP2Shell RCEs to 400 complexity issues in my own code, here is how to survive with agentic SDLC.
~/Code/jduncan-blog
Engineering, craft, and curiosity.
Self-taught engineer, recovering history major. Tech, woodworking, home automation.
AI is finding bugs faster than humans can fix them. From the PHP2Shell RCEs to 400 complexity issues in my own code, here is how to survive with agentic SDLC.
My Level 5 software factory ships code unattended, until it hits CI limits, 50-node plans, or reward-hacking loops. Three lessons from recent failures.
Everyone is talking about AI in extremes. We said the exact same things about server virtualization and Kubernetes. Generative AI is a tool. Let's learn how to use it.
Agentic development is two different jobs, judgement and mechanics, and we keep running them through one chat window. A series on designing the contract between humans and agents, with a month of data from my own software factory.
If humans and agents do different work, something has to sit between them. In my factory, that's a GitHub issue written as a contract: humans define done, machines check it.