|
Hello Reader, AI can generate code, arguably with a pretty decent quality. Thatâs not news anymore. The question thatâs been forming in my head all week is different: how do we decide what should go into production? Writing code is not the hard part (arguably, it never was). The hard part is making sure the right code ships and the wrong code doesnât. And right now, that selection problem is becoming the defining challenge of AI-assisted development. Last week has definitely showed this. Focus on code reviewsLast week, Anthropic announced that Claude Code now has a Code Review feature. When a PR opens, Claude dispatches a team of agents to hunt for bugs. Many people point out the irony in Claude reviewing itâs own code (insert spiderman meme). Boris Cherny, who created Claude Code, responded to one of the tweets in an interesting manner: the more tokens you throw at a coding problem, the better the result. In other words, one agent can cause bugs while another catches them. A feature release like this one is always an interesting signal. As I mentioned in my last newsletter, it seems that code reviews are the next big challenge in AI adpoptin. With code velocity at an all time high, manual reviews just donât cut it anymore. It seems like code review systems are what comes next. In fact, Claude is not the first tool to tackle this problem. Martian recently released a review bench of various different code review tools. Tools were put on trial against real codebases and ranked on how thorough and precise each tool is. I highly recommend checking out the results. I think that code reviews are indeed an interesting problem space. It does seem to be the current bottleneck and potentially a great way to keep bugs at bay. But I also feel that thereâs more. Code review not just just about catching bugs. It has always been about knowledge transfer, about mentorship, about building a shared understanding of the codebase. I wonder what heppens with all this, when an AI reviews your code. Will the knowledge stay in the modelâs context window and then be gone? I wonder how the part where the team gets smarter happen in the AI era. Is code evolving, or just mutating?Itamar Friedman, CEO of Qodo, published a piece that reframes the entire AI coding conversation through the lens of evolution. His argument is simple but profound: code generation is just mutation. Models write functions, agents generate pull requests, systems produce entire features - but from an evolutionary perspective, thatâs just creating variation. What creates progress is selection. Evolution requires three ingredients: mutation, selection, and persistence. Without selection, mutations accumulate. With selection, improvement compounds. He points out that software engineering has always had selection loops â tests, code review, CI pipelines, governance mechanisms. We just never described them that way. And now AI is dramatically increasing the mutation rate. Agents can understand unfamiliar codebases, propose architectural refactors, implement entire features. The rate of code production is skyrocketing. But the selection layer is not scaling at the same speed. The bottleneck in software development is moving from writing code to verifying it and selecting what survives. This landed hard for me. In my previous newsletter I talked about how quality engineering is evolving, and Itamarâs framing gives it a language Iâve been missing. Weâre not just âtestersâ or âquality engineersâ. Weâre the selection layer. And if that layer doesnât keep up with the mutation rate, systems donât evolve â they drift. The hot dog problemMo Bitar posted a video called âI was a 10x engineer. Now Iâm uselessâ and it hit me harder than I expected. Mo describes what happened when he used ChatGPT to deploy his entire product without looking at the code. It worked. And he hates it. His analogy is perfect: he made a hot dog. It looks like food, it tastes like food, the transaction is complete. But he canât sell it because he has no emotional connection to it. He didnât earn it. He didnât suffer for it. And that suffering, that struggle, thatâs what used to make us better at our craft. Moâs video is honest, and asks an important question. What do you do, when you love to code? The activity and the craft of coding doesnât seem to be in such a high demand as it used to. This new AI era takes something away from those who loved it. On the other hand, I belive there is a path forward, the goalpost has just moved. This tweet by Franziska seems to suggest an interesting problem space for engineers. Instead of making your work faster, you engineer AI systems. The problem with AI demosVidhya Ranganathan wrote a piece called âProduction Telemetry Is the Spec That Survivedâ that I think should be required reading for anyone deploying AI agents on existing codebases. She introduces a framework that distinguishes between greenfield systems (new, clean, well-specified), brownfield (evolving, messy), and what she calls âblackfieldâ - legacy systems under heavy load where the original intent is lost, documentation has rotted, and business rules hide in undocumented conditionals. AI coding tools are great at greenfield. They struggle with brownfield. And they fail at blackfield, because they infer specifications from code patterns, creating implicit specs that fail silently when they contradict accumulated production behavior. The only honest specification left in these systems lives in production telemetry: traffic patterns, error rates, usage data. I think this has always been a great pointer for testers on which tests should be written first. But it is also a very smart approach for adoption of new tools and testing PoC for services that provide nice demos, but leave you curious about real world usage. OpenAI acquires PromptFooThis connects to OpenAI acquiring Promptfoo, an AI security startup that specializes in red-teaming and vulnerability testing for AI systems. Promptfoo serves about 25% of Fortune 500 companies and has 130,000 developers using it monthly. OpenAI is integrating it into their Frontier platform to make security testing a built-in part of how teams ship AI agents. The fact that OpenAI felt the need to buy a company whose entire job is testing whether AI systems are safe tells you something about where we are. Weâre building agents that write code, review code, and deploy code, and weâre only now starting to seriously ask: but who tests the agents? Great questions to be asked about AIHank Green and Cal Newport sat down for a conversation about AI that I think captures the current moment better than most. Hankâs approach is to catalog every legitimate concern - addiction, manipulation, hallucination, labor displacement, economic bubbles, childrenâs exposure - and resist the urge to collapse them into a single narrative. Each concern has its own severity and its own likelihood. Theyâre separate problems. Cal Newport introduced a concept: âprogress laundering.â Advances in one AI technology, like language models, get unfairly attributed to completely different domains like protein folding or robotics. These are separate technologies with separate trajectories, but the narrative treats them as one unstoppable wave. Itâs a useful framing because it explains why the discourse feels so overwhelming. Weâre not dealing with one problem. Weâre dealing with dozens of separate problems being marketed as one. The whole conversation is great, but what surprised me (but makes perfect sense) was Calâs take on current AI models. He claims that weâll probably end up with smaller, specialized systems that do specific things well - which, in a way, loops back to where we started. Specialized models. Specialized agents. Selection systems that keep the good mutations and discard the rest. Instead of having one know-it-all model like GPT-5.4, many will focus on models that are really good at specialized tasks. But thatâs a prediction, not a certainty, so weâll see where we eventually end up. Iâd love to hear how this is landing for you. Has your team started using AI code reviews, or are you still doing them manually? Do you see yourself as the selection layer, or does that framing feel off? And if youâre someone who loves the craft of coding - how are you making peace with the hot dog era? Hit reply, Iâm genuinely curious where everyone is at right now. |
Sign up for weekly tips on testing, development, and everything related. Unsubscribe anytime you feel like you had enough đ
Hey Reader,, Theo asked a question this week thatâs been sitting in the back of every developerâs head: how much better do the models have to get before you stop reading the code? Itâs been going on for days, but I honeslty love it. We are talking about verification and quality! Although the initial question might not be the right one. Reading was never the goal, itâs one tactic for earning the right to ship something. If reading is the sharpest tool youâve got, read. If you have something...
Hey Reader,, A few years ago Cursor was a nicer place to type code. This week it announced Origin, its own Git competitor built for agent workloads, and got acquired by SpaceX for sixty billion dollars. Somewhere in between, it stopped being an editor and started becoming the whole stack â the place you write, review, merge, and increasingly test your software. I come from QA, so my first instinct isnât excitement, itâs a question: when one tool owns every step of the loop, whoâs the...
âToo dangerous to releaseâ has become its own genre of AI announcement. Project Glasswing is the latest entry: not quite a product launch, but a claim about a threshold, dressed up with enough corporate coalition to signal this one is serious. Anthropic says their new security-focused model, Claude Mythos Preview, can find software vulnerabilities better than all but the most skilled human experts. George Hotz challenged the âtoo dangerous to releaseâ narrative by pointing at the obvious:...