Topics / Tag
#Risk
4 articles
- Human-in-the-loop is not a security boundaryTwo AI agents deleted production databases. Neither was stopped by its instructions. Approval improves an agent's decisions; it doesn't limit what the agent can do. Why agent safety is a permissions and architecture problem first, how to size the risk of an action, and what humans are actually for.8 min read
- Tech debt snowballs, then it avalanchesTechnical debt rarely fails slowly. It grows quietly for months, then one day nothing can move until it's fixed. How to spot the snowball, why you don't get to choose the avalanche day, and what a lead can do before it arrives.5 min read
- Last write wins, and the customer losesA multi-tab bug that looked like a one-off defect turned out to be a design assumption the product had outgrown. Why I argued for fixing the model, not just the bug, and how to raise that kind of risk.3 min read
- Release risk usually isn't in the codeMost release risk I've dealt with wasn't a software defect. It was environment differences, unclear ownership of manual steps, late changes and rollback plans nobody had tried. What I learned preparing a high-risk platform migration.3 min read