Rethinking the SDLC 14
14 min read
The Agentic Software Factory: Every Control Surface, Named
The full agentic production system: nine control surfaces, five failure modes, and a maturity model from ad-hoc to governed factory.
Read the note →
Field notes
You're Not Managing Engineers Anymore. You're Allocating Judgment.
Your Agent Has Prod Access. Your IAM Thinks It's a Person.
DORA Measured the Old Constraint. Agents Broke the Instrument.
Technical Debt Just Got Cheaper. Something Worse Moved In.
Your Dashboards Were Built for Eyes. Your Operator Doesn't Have Any.
Stop Asking Whether Agents Should Act in an Incident. Decide How Far.
If you read three
Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room
Agentic Overwatch is the discipline of supervising a fleet of autonomous AI agents across every function in production, the way a NOC or SOC …
I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers
Practical advice for managers developing junior talent and for junior engineers who want to build real expertise that goes beyond prompting and tool …
AI Makes Code Cheap to Produce. Not Cheap to Own.
The governance gap in AI-assisted development: code production is accelerating faster than review, testing, scanning, and ownership can keep up. What …
The run 82 notes · newest first
202645
September
- The Agentic Software Factory: Every Control Surface, Named
- You're Not Managing Engineers Anymore. You're Allocating Judgment.
- Your Agent Has Prod Access. Your IAM Thinks It's a Person.
- DORA Measured the Old Constraint. Agents Broke the Instrument.
- Technical Debt Just Got Cheaper. Something Worse Moved In.
- Your Dashboards Were Built for Eyes. Your Operator Doesn't Have Any.
- Stop Asking Whether Agents Should Act in an Incident. Decide How Far.
- Your Infrastructure Assumes a Human at the Keyboard
August
- Your Pipeline Runs Scripts. It Should Be Making Decisions.
- Coverage Was Always Theater. Agents Made It Free.
- Human Review Is Scarce Now. Stop Spending It Line by Line.
- The Scarce Skill Isn't Writing Code. It's Knowing What Shouldn't Exist.
- A Ticket Is a Lossy Compression of Intent
- Rethinking the SDLC: Execution Is No Longer the Constraint
July
- Everyone Trained Their Engineers on AI. The Gap Didn't Move.
- Make the Cheap Path the Default. Make the Expensive Path Prove It.
- Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.
- Stop Reviewing Code. Start Reviewing Evidence.
June
April
- The One-Man Show Company. Don't Let the Monkeys Touch Production.
- 100 Days to the EU AI Act Deadline. Your Engineering Team Hasn't Started.
- The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.
- The End of Courses: Learn From AI Like a Toddler, Or Become Obsolete
- I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.
- The IDE Is Becoming Mission Control
- Your AI Stack Is Rented Until You Can Run Part of It Yourself
- AI Makes Code Cheap to Produce. Not Cheap to Own.
- 'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.
- The Claude Code Leak Isn't Dramatic. That's the Point.
March
- Cisco Built an LLM Security Leaderboard. You Should Care Even If You Don't Use Cisco.
- OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.
- Claude Can Now Use Your Computer. Here's What That Actually Means.
- DeerFlow 2.0: ByteDance Just Open-Sourced What Most Companies Are Trying to Build Internally
- Zuckerberg Is Building an AI CEO Assistant. The Rest of Us Should Have Started Already.
- Cursor Automations: Your AI Just Stopped Waiting for Permission
- AI Is Now Reviewing AI's Code. That Should Make You Think.
- Glassworm Is Back. Your Code Review Won't Catch It.
- WordPress Just Let AI Agents Publish to 43% of the Web. Now What?
- AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.
- SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.
- Google Stitch Just Made UI Design a Developer Skill
- OpenClaw Is Not a Chatbot. It's a Personal Agent Gateway.
- Open WebUI Isn't a ChatGPT Clone. It's AI Infrastructure.
- NotebookLM Is Not a Chatbot. It's a Research Workbench.
- Your AI Agents Are Flying Blind. Here's How to Fix That.
202537
December
November
- Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes
- CLI Agent Orchestrator: When One AI Agent Isn't Enough
- AI Wrapper Companies: Is This Real or Just API Theater?
October
- Amazon S3 Vectors: When Storage Learns to Think
- Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.
- Have You Seen All These OpenAI Blueprints? What the Heck Are They Doing, and Why Is (or Isn't) Your Country In?
- Krakow Offsite: Real Connections, Real Momentum
- When Nvidia's CEO Says 100% of Engineers Use Cursor, He's Not Exaggerating
- When AI Writes 90% of Your Code, What Are You Actually Doing?
- Securing Intelligence: The Complete AI Security Series [Video]
- AI Security Isn't a Tool Problem, It's a Culture Problem
- Securing the AI Supply Chain: The Threat Nobody's Talking About
- Building AI Systems That Don't Break Under Attack
- Prompt Injection 2.0: The New Frontier of AI Attacks
- AI's Dual Edge: When to Disrupt and When to Compound
- Grokipedia and the New Era: When Building a Wikipedia Becomes Trivially Easy
- Two Weeks with Gemini in Chrome: The Browser That Actually Gets It
- Google Jules: Always on My Radar, But Never Quite the Star
- Ship Faster Without Breaking Things: DORA 2025 in Real Life
- Build Your First AI Agent This Week: A Practical Guide
- AI Agents for Real Productivity: What Works in 2025
- What's Holding You Back from Succeeding in the AI Era?
September
- Model Context Protocol: The Missing Connection Between AI and Your Real Work
- The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)
- The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things
- The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work
- Developer Work Did Not Change. The Sequence Did.
- GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows
- So, You've Built a RAG. Now Let's Make It Not Suck.
- Hiring Developers in the Age of AI: What Actually Matters Now
- RAG for Developers: A No-BS Introduction
- The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us
- The Context Engine: What Comes After We've Solved Code Generation
- I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers
- When CI/CD Speaks Human: A Friendly Nudge to DevOps (and Developers)
- From "Toys" to "Tools": The Missing Layer Developers Actually Need
Collections read in order
The Shift 6 Execution moved to agents. The work — and who owns it — did not.
- Developer Work Did Not Change. The Sequence Did.
- When AI Writes 90% of Your Code, What Are You Actually Doing?
- Org Charts for AI Agents: Mapping Your Human and AI Workforce
- Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.
- The IDE Is Becoming Mission Control
- From "Toys" to "Tools": The Missing Layer Developers Actually Need
The Cost 6 Cheap to produce is not cheap to own. The bill arrives downstream.
- AI Makes Code Cheap to Produce. Not Cheap to Own.
- AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.
- The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.
- Make the Cheap Path the Default. Make the Expensive Path Prove It.
- SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.
- Ship Faster Without Breaking Things: DORA 2025 in Real Life
Judgment 4 The scarce asset — and how engineers grow it when AI does the typing.
Overwatch 6 Supervision as architecture: control rooms, evidence gates, agents on the org chart.
- Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room
- Stop Reviewing Code. Start Reviewing Evidence.
- Everyone Trained Their Engineers on AI. The Gap Didn't Move.
- The One-Man Show Company. Don't Let the Monkeys Touch Production.
- The Context Engine: What Comes After We've Solved Code Generation
- CLI Agent Orchestrator: When One AI Agent Isn't Enough
The Perimeter 8 Agents are an insider workforce. Secure them like one.
- Prompt Injection 2.0: The New Frontier of AI Attacks
- Building AI Systems That Don't Break Under Attack
- Securing the AI Supply Chain: The Threat Nobody's Talking About
- AI Security Isn't a Tool Problem, It's a Culture Problem
- 'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.
- Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.
- Glassworm Is Back. Your Code Review Won't Catch It.
- Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes
The Playbook 8 Hands-on: agents, RAG, MCP, and the tooling underneath — no hype.
- Build Your First AI Agent This Week: A Practical Guide
- AI Agents for Real Productivity: What Works in 2025
- RAG for Developers: A No-BS Introduction
- So, You've Built a RAG. Now Let's Make It Not Suck.
- Model Context Protocol: The Missing Connection Between AI and Your Real Work
- The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work
- The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)
- Your AI Agents Are Flying Blind. Here's How to Fix That.
Dispatches 8 News through an operator's lens — what launches mean for how orgs run.
- I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.
- Cursor Automations: Your AI Just Stopped Waiting for Permission
- Claude Can Now Use Your Computer. Here's What That Actually Means.
- GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows
- The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things
- The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us
- OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.
- Two Weeks with Gemini in Chrome: The Browser That Actually Gets It