» Tag
devops
203 postsWhen AI Writes Most of the Code, Peer Review Must Be Redesigned
As AI agents write and review most production code, traditional PR-approval compliance controls no longer reflect reality—here's what should replace them.
Review-Loop Engineering: Designing Real Human Oversight for Agent Loops
Why 'human in the loop' isn't real oversight for AI coding agents, and how review-loop engineering designs packets that expose gaps, not just green checks.
We gated CI on six LLM eval frameworks — only two survived
An eight-month CI test of six LLM eval frameworks found only Promptfoo and DeepEval reliable as merge-queue gates, thanks to deterministic checks.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comThe Dead-End State Trap: A Hidden Danger in LLM Agent Pipelines
In LLM agent pipelines, safety states added to stop infinite loops can silently create dead-ends that freeze the whole orchestrator, forcing a manual restart.
The Hidden Risk of Giving LLM Agents Terminal Access
Giving autonomous AI agents shell access can wreck your filesystem. Open-source rewind-sdk uses OverlayFS to enable millisecond-fast checkpoints and rollbacks.
When Green Tests Lie: Ten Patterns Behind False Positives
Ten real examples from a single audit day show how passing tests and checks can mask broken software, and how to actually test the checkers themselves.
Platform Engineering: The Fix for Developers' Wasted Wait Time
Engineering teams lose sprint capacity waiting on infra provisioning and access approvals. See how golden paths and internal developer platforms fix this.
How Anthropic bakes security into its Claude-driven dev lifecycle
A look at how Anthropic embeds AI-driven security checks across coding, CI review, and deployment in its Claude-based dev lifecycle.
Golden AMIs with Packer and Ansible: Automated, Auditable Servers
How Packer and Ansible-local standardize EC2 provisioning on AWS, using SSM for secure builds and Parameter Store for centralized config, with a bonus disaster recovery win.
Containing Financial Blast Radius from Bedrock and Marketplace Cloud Spend
A compromised AWS credential can turn into a major financial incident within hours via Bedrock and Marketplace. A DevOps governance model to limit blast radius before detection catches up.