Writing
Field notes from auditing AI-built software.
Short, useful, opinionated. Mostly about the boring problems — auth, deploys, backups, money — that bite teams a month after launch.
When to Rewrite AI-Generated Code Instead of Fixing It
A decision framework for AI-built apps: harden in place, refactor a subsystem, or rebuild. How to tell which one your codebase actually needs.
Security Checklist for AI-Built Apps
A practical security checklist for AI-built apps: auth, data, secrets, dependencies, logs, and backups. Specific items, not vague principles.
The Production Risks of Vibe Coding
Vibe coding is a real way to ship software now. It is also a specific set of failure modes when those apps meet real users. Here is where they break.
Why Your AI-Generated Code Needs an Audit Before Launch
AI prototypes ship fast, but security, auth, deployment, and data handling still need a senior review before launch. Here is what an audit actually catches.
The five most common ways an AI-built app gets popped in its first week.
Composite incident review from four real audits. The bugs are not changed.