5 posts
AI code
What the measured samples say and what to test because of it.
- 2026-09-18
How to test AI-generated code before release
The same tests as any code, with a different starting list. The documented failure profile of AI-assisted code gives you ten categories and the order to run them in.
- 2026-09-12
What the measured samples say about AI-generated code
Five studies with stated samples, read for what a tester should do differently. Every figure links to the evidence page with its source, its verification date and, for percentages, the denominator.
- 2026-09-02
Row-level security: the most documented failure on AI-built apps
A CVE, a platform-wide database exposure and the vendor's own going-live note all describe the same thing. Two checklist items catch it on every release.
- 2026-08-25
Secrets in the bundle: why it keeps happening
A key that reaches the browser is public. Three measured sources say it keeps happening, the framework docs say why, and one automated item catches it before release.
- 2026-08-18
Coding agents and production credentials
Every agent's docs describe a mode where commands run without approval. The checklist's answer is not to forbid the mode; it is to make sure the shell it runs in cannot reach production.