SDLC

How software actually gets built — planning, process, testing, review, and shipping with (and without) AI in the loop.

GitHub Actions OIDC should trust workflows, not repositories
The SQLite CVE mess shows where your vulnerability automation needs a gate
The SOC 2 controls you already run, and the five gaps that stop them counting
Coding agents make senior engineers more valuable, if the rulebook leaves their head
Open weights are now part of your AI disaster-recovery plan
Open-weight access now belongs in your AI supply chain
The SOC 2 deadline that matters is the start of your observation window
The bowling alley lesson isn’t “one hacker did it” — ugly verticals just got cheap enough for small teams
Dependabot's cooldown is the policy your Node repo needed once agents sped up dependency churn
Take-home projects are untrusted code, so give them a sandbox
Your eval harness needs its own threat model
Model portability is now a governance feature for AI agents
Your real moat after GPT-5.6 and Kimi K3 is a private eval harness
Trust Boundaries for AI Agents: Securing Automated Workflows
Parallel Agent Orchestration: Building Multi-Agent Pipelines
Hardening Your Code-Signing Pipeline Against Supply-Chain Attacks
Scheduling Unattended Coding Workflows with Agent Routines
Anatomy of a Supply-Chain Breach: When a Connector Leaks Your Secrets
From AI Editor to Agent Orchestrator: Managing Parallel Coding Agents
Automating Security Reviews in Your PR Pipeline
How a Source Map Can Leak Your Entire Source Code
Beyond Bypass Permissions: Risk-Aware Autonomy for Coding Agents
Event-Driven AI Agents: Pushing Real-Time Events into a Session
Harness Design: Structuring AI Agents for Long-Running Builds
How AI Finds Vulnerabilities Traditional Scanners Miss
From Writing Code to Directing It: How the Developer Role Is Shifting
From Code to Canvas: Turning Production UI into Editable Figma Designs
Writing Effective Specs for AI Agents
Inside Agentic Coding Models: Long-Context Self-Summarization and RL
Coordinating Parallel AI Agents on Long-Running Engineering Tasks
Copilot in SSMS: AI-Assisted T-SQL in SQL Server Management Studio
Parallel AI Coding: Subagents and Agent Skills in a Modern Editor
An Agentic Coding Workflow That Scales: Hooks, Sub-Agents, and Feedback Loops
Context on Demand: How Dynamic Context Discovery Cuts Agent Token Use
AI in the Inspector: Debugging Faster with Chrome DevTools Assistance
AGENTS.md Explained: A README for Your AI Coding Agents
Does AI Really Make You 80% Faster? Reading a Productivity Study
A First Look at Agent-First AI IDEs
Meet Seer: How an AI Debugger Diagnoses Production Errors
Anatomy of the First Reported AI-Orchestrated Cyber Espionage Campaign
Cursor 2.0: Multi-Agent Coding and What Actually Changed
Plan Before You Prompt: Copilot's New Planning Mode in Visual Studio
AI That Patches Your Code: Inside an Autonomous Vulnerability Agent
Codex Goes Agentic: Running a Coding Model Autonomously for Hours
Autonomous Pentesting: AI Agents That Exploit Bugs Instead of Just Flagging Them
Profiling by Prompt: Copilot's New Performance Agent in Visual Studio
The Lethal Trifecta: Understanding Prompt Injection in AI Agents
AI in Your Git Workflow: Copilot Commit Messages and Code Review
Building AI Agent Teams with Claude Code Sub-Agents
Agile Planning Poker ♣️ - more than a Game for Estimates