Teams Built Quality And Security Infrastructure Around The Repository And That Is Now Breaking
A pull request used to be where a change became real. An engineer wrote the code, pushed it, and opened the PR; that was the moment the rest of the...
14/08/2026
What Is an AgBOM? Inventorying the Autonomous Coding Agents in Your Pipeline
Your team probably knows who merged the last pull request. But do you know which AI agent wrote it, what tools it invoked, what credentials it used,...
22/07/2026
Pre-Commit vs CI Quality Gates: When Fast-Shipping Moves The Checks Upstream
Teams that ship dozens of pull requests a week eventually run into the same wall: CI-stage quality gates turn into a queue. A developer opens a PR,...
21/07/2026
Detecting Malicious Intent Across AI-Generated Pull Requests: A Governance Framework for Engineering Leaders
No single pull request has to look malicious to create a serious security problem. One adds logging. Another introduces a background job. A third...
14/07/2026
AI Code Review Is Not Enough: How Engineering Leaders Should Gate AI-Generated Code
The easiest pull requests to approve are often the ones that deserve the closest inspection. AI-generated code tends to arrive well formatted, well...
09/07/2026
Why Engineering Teams Keep Building In-House AI Code Review Tools, and What It Really Costs
LLMs made internal AI code review tools easy to prototype. They did, however, not make them easy to operate.
.svg)
