7 min read
Let an Open-Weight Model Audit Your Code, but Do Not Give It the Keys
How to run a nightly AI security audit without giving the model credentials, production access or authority to merge its own fixes.
Blog posts tagged
SOFTWARE ENGINEERINGPage 1
7 min read
Claude's Watermarking Policy Extends to Code
Claude's invisible marks could improve provenance, but Anthropic has not yet shown that they leave generated code quality and optimisation untouched.
7 min read
GitHub Now Supports Stacked Pull Requests Natively
What stacked pull requests are, how GitHub's native workflow works, and where the public preview still needs care.
5 min read
Configure AI Models Instead of Hard-Coding Them
Keep model names in configuration, select models by task, and compare routes using the cost of completed work.
6 min read
The Safest Dependency Update May Be the One You Delay
Why a short cooldown for routine dependency releases is a practical supply-chain control, not neglect disguised as caution.
8 min read
Vue Vapor Mode's Real Breakthrough Is the Migration Boundary
Why Vue 3.6's opt-in Vapor Mode matters less as a benchmark win than as a practical way to improve performance without rewriting an established Vue application.
5 min read
The Pull Request Can Now Rewrite Its Own AI Reviewer
Why pull-request-controlled AI review instructions collapse a trust boundary, and how teams can restore it without giving up useful repository context.
8 min read
The Laravel action pattern deserves to escape Laravel
Why modelling each business operation as a reusable action keeps controllers, jobs, commands, listeners and other delivery mechanisms thin.