/01 Blog

Writing aboutwhat breaks.

Field notes on AI-generated code: the failures that repeat, why testing misses them, and what to check before you ship.

Compliance2 July 2026 · 5 min read

SOC 2 and AI-generated code: what auditors actually ask for

Using AI to write code does not break SOC 2, but it changes what you must evidence. What auditors ask about AI-generated code, and how to answer.

Read the post

Best practices4 min

AI Code Review Tools Compared: What Each Catches

Linters, SAST, LLM pull-request bots, human review and specialist review each catch a different class of defect. Here is what each one misses.

18 June 2026

Code quality7 min

Vibe Coding: Why AI Code Breaks in Production

Vibe coding lets anyone build software by describing it to an AI. The code works in the demo and fails in production, in four predictable ways.

20 May 2026

Best practices5 min

How to Review AI-Generated Code: A 5-Point Check

A five-point checklist for reviewing Cursor, Copilot and Claude Code output before production: auth, error handling, queries, logic and responses.

15 May 2026

Security4 min

Security Risks in Cursor and Copilot Code

AI coding tools produce vulnerabilities in predictable shapes: SQL injection, IDOR, hardcoded credentials and wildcard CORS. Each pattern and its fix.

10 May 2026

Security4 min

Zero Code Retention: Policy vs Architecture

Most code review tools store your code, and a privacy policy lasts exactly as long as current management does. Here is the difference that matters.

5 May 2026

For founders5 min

Code Review for Non-Technical Founders

You built your product with AI tools and launch is weeks away. What code review actually finds, why testing misses it, and how to run one yourself.

28 April 2026

/04 Start

Reading about it is
slower than running it.

Three credits, no card. Point it at the file you are least sure about.

Start free