Engineering notes, project retrospectives, and opinions on building software that lasts.
Generated code produces working features quickly and skips security decisions at the same speed. Open endpoints, tokens in the browser, passwords in API responses: these are not AI failures, they are review failures.