Skip to main content
Skip to the notes

The agent writes the code. The engineer owns the outcome

Pini Shvartsman — Technology Leader · AI Transformation & Autonomous Engineering

I redesign engineering organizations around AI-powered execution and human accountability — and I build the autonomous systems that make it real.

Scroll

Execution moved.

I lead engineering organizations through this shift. Here’s what actually changed.

“Writing code was never the bottleneck.”

The full argument →

“AI agents aren’t tools you use. They’re workers you manage.”

Agents on the org chart →

The development sequence: agents take every step; the engineer directs, judges, and owns from above

The development sequence, before and after agents. Every execution step moves to agents; direction, judgment, and ownership of the outcome stay with the engineer — one seat above the whole flow.
StepExecutor beforeExecutor now
PlanHumanAgent
ScaffoldHumanAgent
WriteHumanAgent
ValidateHumanAgent
ShipHumanAgent
OperateHumanAgent
The sequence changed. The responsibility didn’t →
466 million lines of government code audited by agents in 20 hours — one Canadian province’s entire codebase. What Alberta’s weekend audit means →
Next · 02 The Cost ↓

Cheap to produce. Not cheap to own.

The bill lands on whoever owns production. That seat is mine.

“The cost doesn’t show up at generation time. It shows up at ownership time.”

The economics →

“Engineering discipline became a career risk. That’s the shift.”

What actually broke →
The dashboard stays green

“Throughput is legible. Judgment is invisible.”

Why the seniors are losing →Next · 03 Judgment ↓

The scarce asset.

I came up through every rung — support, NOC, full-stack, architecture. The engineers I lead won’t climb that ladder, so I’m designing the new one.

“The first group learned with AI as a teacher; the second learned with AI as a tool.”

Why I’m worried →

Marcus

247 commits last month. 23 features shipped. Velocity charts trending up. Then one question — “why did you structure the caching layer this way?” — and silence.

Sarah

Same company. Nearly identical velocity. Asked the same question, she walked through the trade-offs, the two AI suggestions she rejected, and the monitoring she added for the failure modes she predicted.

“The agent has all the answers. You are the only one who knows which questions to ask.”

The hopeful version →
Next · 04 Overwatch ↓

Supervision is architecture.

Agentic Overwatch is the discipline I named — and the one I run.

“You cannot govern a workforce that runs flat out, around the clock, with a team that logs off at 5 PM.”

Agentic Overwatch →

The overwatch tier model

T1 · Detect — agents

Watch everything, all the time. Surface what matters.

T2 · Remediate — agents

Reproduce, propose, fix — inside the guardrails.

T3 · Judge — humans

Authorize what ships. Own what happens next.

Your presence lights the human seat Tap the third lane to take the seat

The overwatch tier model
TierWho runs itWhat it does
T1 DetectAgentsWatch everything, all the time; surface what matters
T2 RemediateAgentsReproduce, propose, fix inside the guardrails
T3 JudgeHumansAuthorize what ships; own what happens next

“The diff is the claim. The evidence is the proof. The human is the judge, not the fact-checker.”

The evidence gate →

“They’re debating tools while we’re deploying workers.”

How my org runs →

Not a proposal — the operating model behind these notes, running in production.

Take the Tier 3 seat → Six agent changes arrive with their evidence. You rule on each one.
Next · 05 The Operator ↓

Written from the seat.

Pini Shvartsman

Technology leader, hands still on the system. Everything above runs in production — I write down what holds.

The builder

Taking things apart since age eight. IRC channels, scripts, communities that didn’t care how old you were as long as you kept up.

Employee #5

No DevOps, no infrastructure, barely a product. Built all of it — the CI/CD, the platform, the offshore team — and grew from five people to leading engineering at global scale.

The through-line

“I just kept saying yes to whatever scared me most.” The current answer: redesigning how an engineering org runs when agents do the executing.

“We were the failsafe, and the failsafe doesn’t get to sleep through the incident.”

A year inside a NOC →
The record — every tick a published note. The quiet was deliberate.
01

Embed

Inside your team — your codebase, your incidents, your constraints.

02

Ship one

The first system goes to production, not to a slide.

03

Prove it

Measured against the work it replaced: real time, real budget.

04

Make it repeatable

The version that works becomes a capability your org owns.

Enter the archive · 06 Field Notes ↓

The words I had to coin.

New work needed new names. Each one is argued for in a note — take them, use them, tell me where they’re wrong.

Field notes

Everything I’ve published from the seat — 68 field notes on running engineering when agents do the executing and I stay accountable for the outcome.

Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room

Agents don’t just write code anymore. They run ops, security, QA, data, and support, around the clock, while we still govern them with a team …

I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers

A guide for engineering managers on growing junior developers in an AI-heavy world, and for junior developers who want to stand out beyond just being …

AI Makes Code Cheap to Produce. Not Cheap to Own.

AI accounts for 42% of committed code. 96% of developers don’t fully trust the output. Only 48% always verify before committing. The gap between …

Stop Reviewing Code. Start Reviewing Evidence.

Agent-heavy teams ship twice the PRs at more than twice the size, and reviews wait almost five times longer for pickup. The review model built for …

AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.

The culture shifted. ‘Ship fast with AI’ became the expectation. Anyone who slows down to think looks unproductive. Discipline became a …

Execution moved to agents. The work — and who owns it — did not.

Developer Work Did Not Change. The Sequence Did.

AI doesn’t make the job different. It changes when parts of the job happen, turning Monday morning from archaeology into editing.

When AI Writes 90% of Your Code, What Are You Actually Doing?

Anthropic’s CEO says Claude writes 90% of code for most teams. If you think that means developers are obsolete, you’ve missed the point …

Org Charts for AI Agents: Mapping Your Human and AI Workforce

AI agents aren’t coming. They’re already here, doing real work, while most organizations are still debating how to use ChatGPT. If …

Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.

A Canadian province ran Claude Code across 466 million lines of government code in 20 hours — work they priced at 6.5 years the old way. The number …

The IDE Is Becoming Mission Control

Cursor 3 rebuilt its UI around agents. GitHub calls Agent HQ ‘mission control.’ VS Code is ‘your home for multi-agent …

From "Toys" to "Tools": The Missing Layer Developers Actually Need

AI coding isn’t about clever completions anymore. It’s about stitching work together so results cross the threshold from toy to tool—from …

Cheap to produce is not cheap to own. The bill arrives downstream.

AI Makes Code Cheap to Produce. Not Cheap to Own.

AI accounts for 42% of committed code. 96% of developers don’t fully trust the output. Only 48% always verify before committing. The gap between …

AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.

The culture shifted. ‘Ship fast with AI’ became the expectation. Anyone who slows down to think looks unproductive. Discipline became a …

The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.

Forbes just said vibe coding will break your company. Senior engineers are organizing against it. The data is on their side: independent audits keep …

Make the Cheap Path the Default. Make the Expensive Path Prove It.

Half of most AI agent bills is waste with a good story: context pollution, verification theater, tool schemas nobody reads, retries nobody capped. …

SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.

The bargain that powered SaaS for two decades was simple: rent generic software because custom is too expensive. That bargain is breaking. The cost of …

Ship Faster Without Breaking Things: DORA 2025 in Real Life

AI is making teams faster, but instability persists. The 2025 DORA report reveals which organizational capabilities turn AI into a force …

The scarce asset — and how engineers grow it when AI does the typing.

I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers

A guide for engineering managers on growing junior developers in an AI-heavy world, and for junior developers who want to stand out beyond just being …

What's Holding You Back from Succeeding in the AI Era?

I’ve watched teams double their output with AI, and I’ve also seen developers stall and managers struggle. The difference isn’t the …

The End of Courses: Learn From AI Like a Toddler, Or Become Obsolete

Remember when shipping an app meant 40 hours of video courses and weeks of syntax memorization? An agent builds it in three minutes now. The 40-hour …

Hiring Developers in the Age of AI: What Actually Matters Now

LeetCode is dead. With AI writing the code, we need to fundamentally rethink how we identify and hire the developers who will actually thrive in 2025 …

Supervision as architecture: control rooms, evidence gates, agents on the org chart.

Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room

Agents don’t just write code anymore. They run ops, security, QA, data, and support, around the clock, while we still govern them with a team …

Stop Reviewing Code. Start Reviewing Evidence.

Agent-heavy teams ship twice the PRs at more than twice the size, and reviews wait almost five times longer for pickup. The review model built for …

Everyone Trained Their Engineers on AI. The Gap Didn't Move.

82% of organizations now offer AI training. 59% still report a skills gap. Security spent twenty years and 19,500 employees learning why: knowledge …

The One-Man Show Company. Don't Let the Monkeys Touch Production.

A company used to start with people. Now it can start with one person and a swarm of AI agents that draft, build, test, sell, and support faster than …

The Context Engine: What Comes After We've Solved Code Generation

We’ve largely solved the context problem in AI coding tools. RAG systems ingest our docs, codebase-aware assistants understand our architecture, …

CLI Agent Orchestrator: When One AI Agent Isn't Enough

AWS open-sourced CLI Agent Orchestrator, a framework coordinating multiple AI agents for complex developer tasks. It’s hierarchical …

Agents are an insider workforce. Secure them like one.

Prompt Injection 2.0: The New Frontier of AI Attacks

·1631 words·8 mins
Prompt injection has evolved from toy demos to sophisticated attacks targeting production AI systems. What was once a curiosity is now a genuine …

Building AI Systems That Don't Break Under Attack

Understanding the threats is step one. Building defensive architectures that actually work in production is step two. Here’s what’s …

Securing the AI Supply Chain: The Threat Nobody's Talking About

·2088 words·10 mins
We’re building AI systems on top of models, datasets, and tools we don’t control. The supply chain is the attack vector nobody’s …

AI Security Isn't a Tool Problem, It's a Culture Problem

You can implement every technical control and still get breached if your culture doesn’t support security. The final piece of AI security …

'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.

35% of developers access AI coding tools through personal accounts. AI lets one person bypass every paved road the organization built, very fast and …

Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.

AI browsers that summarize pages and automate tasks are vulnerable to prompt injection—hidden instructions in web content that can hijack the AI. …

Glassworm Is Back. Your Code Review Won't Catch It.

151 malicious packages in one week. The payload is invisible. Literally invisible. Glassworm uses Unicode characters that don’t render in any …

Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes

Bots are everywhere, and you can’t tell the real ones from the fakes. Web Bot Authentication uses cryptographic signatures to give automated …

Hands-on: agents, RAG, MCP, and the tooling underneath — no hype.

Build Your First AI Agent This Week: A Practical Guide

Stop reading about AI agents and build one. Here’s the step-by-step path: picking the right problem, setting up your tools, building a working …

AI Agents for Real Productivity: What Works in 2025

Beyond the hype and the demos, what actually works when you build AI agents for real work? Here’s the landscape, the platforms worth using, and …

RAG for Developers: A No-BS Introduction

·1042 words·5 mins
Developers keep asking me to explain RAG. Here’s the straightforward explanation: it’s the difference between an AI that makes stuff up …

So, You've Built a RAG. Now Let's Make It Not Suck.

Your basic RAG works in the demo. It falls apart with real users. Here’s how to upgrade from a fragile prototype to a production system that …

Model Context Protocol: The Missing Connection Between AI and Your Real Work

Your AI coding assistant is blind to your company’s actual context. MCP fixes that. Here’s how to connect Claude, ChatGPT, and Cursor to …

The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work

Everyone’s using AI IDEs but few understand what’s happening under the hood. Let’s demystify how these tools work, why they differ, …

The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)

Every time you switch from Claude to ChatGPT, you start from zero. It’s not a bug. It’s architecture. Here’s the real engineering …

Your AI Agents Are Flying Blind. Here's How to Fix That.

Every AI agent in your org starts every session with zero context. No business rules. No architecture decisions. No conventions. The code they …

News through an operator's lens — what launches mean for how orgs run.

I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.

Anthropic shipped 120+ features in 90 days, then blocked OpenClaw from using Claude subscriptions. The same company building the best developer tools …

Cursor Automations: Your AI Just Stopped Waiting for Permission

Cursor shipped Automations on March 5. AI agents now trigger from Slack messages, Git pushes, PagerDuty alerts, and timers. No human in the prompt …

Claude Can Now Use Your Computer. Here's What That Actually Means.

Anthropic just shipped computer use for Claude. It can click, scroll, navigate your browser, open files, run dev tools, and submit PRs. Pair it with …

GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows

GitHub released two different CLI tools for AI in one week. Together, they represent both interactive AI partnership and autonomous development …

The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things

OpenAI and Stripe just released a new protocol that lets AI agents complete purchases. This is the HTTP moment for AI commerce, and we need to talk …

The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us

AI adoption has exploded from 20% to 40% of U.S. workers in just two years. But Anthropic’s new Economic Index reveals a troubling pattern: the …

OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.

OpenAI shut down Sora, killed a $1 billion Disney deal, and pivoted to enterprise and robotics. The most-downloaded AI video app on iOS, gone. This …

Two Weeks with Gemini in Chrome: The Browser That Actually Gets It

·1015 words·5 mins
After two weeks of daily use, Gemini in Chrome has fundamentally changed how I browse the web. Here’s what works, what doesn’t, and why …

202631

  1. Everyone Trained Their Engineers on AI. The Gap Didn't Move.
  2. Make the Cheap Path the Default. Make the Expensive Path Prove It.
  3. Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.
  4. Stop Reviewing Code. Start Reviewing Evidence.
  5. Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room
  6. The One-Man Show Company. Don't Let the Monkeys Touch Production.
  7. 100 Days to the EU AI Act Deadline. Your Engineering Team Hasn't Started.
  8. The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.
  9. The End of Courses: Learn From AI Like a Toddler, Or Become Obsolete
  10. I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.
  11. The IDE Is Becoming Mission Control
  12. Your AI Stack Is Rented Until You Can Run Part of It Yourself
  13. AI Makes Code Cheap to Produce. Not Cheap to Own.
  14. 'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.
  15. The Claude Code Leak Isn't Dramatic. That's the Point.
  16. Cisco Built an LLM Security Leaderboard. You Should Care Even If You Don't Use Cisco.
  17. OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.
  18. Claude Can Now Use Your Computer. Here's What That Actually Means.
  19. DeerFlow 2.0: ByteDance Just Open-Sourced What Most Companies Are Trying to Build Internally
  20. Zuckerberg Is Building an AI CEO Assistant. The Rest of Us Should Have Started Already.
  21. Cursor Automations: Your AI Just Stopped Waiting for Permission
  22. AI Is Now Reviewing AI's Code. That Should Make You Think.
  23. Glassworm Is Back. Your Code Review Won't Catch It.
  24. WordPress Just Let AI Agents Publish to 43% of the Web. Now What?
  25. AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.
  26. SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.
  27. Google Stitch Just Made UI Design a Developer Skill
  28. OpenClaw Is Not a Chatbot. It's a Personal Agent Gateway.
  29. Open WebUI Isn't a ChatGPT Clone. It's AI Infrastructure.
  30. NotebookLM Is Not a Chatbot. It's a Research Workbench.
  31. Your AI Agents Are Flying Blind. Here's How to Fix That.

202537

  1. Org Charts for AI Agents: Mapping Your Human and AI Workforce
  2. Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes
  3. CLI Agent Orchestrator: When One AI Agent Isn't Enough
  4. AI Wrapper Companies: Is This Real or Just API Theater?
  5. Amazon S3 Vectors: When Storage Learns to Think
  6. Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.
  7. Have You Seen All These OpenAI Blueprints? What the Heck Are They Doing, and Why Is (or Isn't) Your Country In?
  8. Krakow Offsite: Real Connections, Real Momentum
  9. When Nvidia's CEO Says 100% of Engineers Use Cursor, He's Not Exaggerating
  10. When AI Writes 90% of Your Code, What Are You Actually Doing?
  11. Securing Intelligence: The Complete AI Security Series [Video]
  12. AI Security Isn't a Tool Problem, It's a Culture Problem
  13. Securing the AI Supply Chain: The Threat Nobody's Talking About
  14. Building AI Systems That Don't Break Under Attack
  15. Prompt Injection 2.0: The New Frontier of AI Attacks
  16. AI's Dual Edge: When to Disrupt and When to Compound
  17. Grokipedia and the New Era: When Building a Wikipedia Becomes Trivially Easy
  18. Two Weeks with Gemini in Chrome: The Browser That Actually Gets It
  19. Google Jules: Always on My Radar, But Never Quite the Star
  20. Ship Faster Without Breaking Things: DORA 2025 in Real Life
  21. Build Your First AI Agent This Week: A Practical Guide
  22. AI Agents for Real Productivity: What Works in 2025
  23. What's Holding You Back from Succeeding in the AI Era?
  24. Model Context Protocol: The Missing Connection Between AI and Your Real Work
  25. The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)
  26. The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things
  27. The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work
  28. Developer Work Did Not Change. The Sequence Did.
  29. GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows
  30. So, You've Built a RAG. Now Let's Make It Not Suck.
  31. Hiring Developers in the Age of AI: What Actually Matters Now
  32. RAG for Developers: A No-BS Introduction
  33. The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us
  34. The Context Engine: What Comes After We've Solved Code Generation
  35. I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers
  36. When CI/CD Speaks Human: A Friendly Nudge to DevOps (and Developers)
  37. From "Toys" to "Tools": The Missing Layer Developers Actually Need

Not advice from a deck. Advice from the seat — backed by a system in production.

I still lead this work every day: building AI systems that investigate bugs, review code, and run operational workflows. The engagements I take come from that seat — the org-level practices that actually hold up, not tool training. A few at a time.

See how we can work together →