Writing

Notes on judgment, and what the tools changed.

Essays on AI-assisted development, the security of generated code, and what changes when review capacity becomes the constraint.

4 min read

The security risks nobody checks in vibe-coded apps

Generated code ships with a recognisable set of holes: absent authorisation, secrets in the client bundle, unbounded AI endpoints, and dependencies nobody chose. What I look for when reviewing an app that was mostly written by a model.

  • Security
  • AI-assisted development
  • Code review
  • Engineering leadership
4 min read

Why human validation is still the constraint

Generation got cheap; verification did not. What actually has to be checked when a model writes the code, why the reviewer is now the bottleneck, and how to restructure review so that is sustainable.

  • AI-assisted development
  • Code review
  • Engineering leadership
  • Process
4 min read · video

Is AI going to replace software developers?

The honest answer from someone who runs a 39-project portfolio with these tools in daily use: the job is being restructured rather than removed, some rungs of the ladder are genuinely disappearing, and the scarce skill has shifted from producing code to judging it.

  • AI-assisted development
  • Engineering leadership
  • Careers