Topic
Source code written or modified by AI coding assistants and autonomous agents, now a growing share of commits merged into production software.
Just over half of 200 senior leaders polled for ArmorCode say they will struggle to simplify software security if they keep working the way they do. AI is adding to the pile from both ends, since developers write code faster and scanners find more weaknesses.
Reality
Project OT would have cut some teams by 60 percent. Meta's own numbers showed incidents up 40 percent and the time spent on them up 70, and Zuckerberg killed the second wave.
Perspective Coverage
4 publishersReality
Commits on GitHub doubled to 2.9 billion a month between April and August. Set against 130 million merged pull requests, that puts roughly 22 changes behind each human approval. It is a review-capacity number, not a capacity-planning one.
Reality
ScriptAI drafts detection and remediation logic for software flaws that have no vendor patch behind them. Vicarius says the draft, review and verify cycle finishes in under an hour, against weeks by hand. It is live for vRx customers today.
Reality
A dev.to walkthrough traces a checksum failure that only appears in CI to the shell expanding fragments/*.json in whatever collation order the job inherited, and proposes committing the file list so the order ships with the script.
Reality
Jason Page has submitted his encrypted inheritance app to Apple with public source, a default release schedule of 90 days of silence plus 35 cancellable days, and a published list of what has not been tested.
Reality
A queue worker built its remaining-seconds budget from time.time(), and after the host woke from sleep it logged remaining=-1842.7. Two days of debugging went to sockets, Docker and NTP before the clocks got compared.
Reality
Salesforce attributes the flattening to overload eroding its second-pair-of-eyes guarantee, while a dev.to analysis argues part of it is reviewers declining to spend time on agent pull requests they can already tell will never merge.
Reality
The case that generated code fails without the usual warning signs comes from two practitioner accounts, while the only measured series is curl's inbound bug reports, and Daniel Stenberg stopped taking those in January 2026.
Reality
Before judging agent-written code, a dev.to author seeded a small C backup client with eight known behaviors and observed it with system-call traces, a loopback capture and a digest check to see which observer caught what.
Reality
AWS's post on the deployment gives the sandbox defaults that decide whether it fits an inline path, among them a 15-minute session time-to-live configurable to eight hours and a choice between VPC-only and public internet access.
Reality
PractiTest puts AI use across testing organizations at 76.8%, with test creation at 69.6% and risk identification at 19.9%. Sonar has 42% of committed code AI-assisted and heading to 65%, all of it flowing toward the same reviewers.
Reality
The consultancy's ten-check list treats generated code as something to prevent and detect rather than read line by line, which trades review labour for a dependency on whoever keeps the backend's OpenAPI spec current.
Reality
A team that interviewed more than 100 tech leads about AI-generated pull requests shipped per-viewer criticality tiers. Reviewers like the ordering and report awkwardness at declaring which files they skip.
Reality
A dev.to post argues that assistant-written Kotlin breaks between files rather than inside them. Its own worked example, a nine-dependency ViewModel with an empty catch block, is already covered by detekt defaults nobody has to enable.
Reality
Authorization was absent rather than broken, which is the defect class a reviewer catches and a test suite signs off on. The newsletter reporting it also finds individual output up and team output flat.
Reality
Code review has always been sampling, and the signals it sampled stood in for a mind that had read the code. A dev.to post argues that when diffs arrive without one, what needs rewriting is the process, not the effort.
Reality