Codex vs CodeRabbit: Choose the Ownership Boundary, Not the Review Score
I defined the comparison framework and the decision criteria. AI helped re-check the current official documentation and rewrite the Japanese draft f…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Junior AppSec Engineer Overwhelmed by Massive Code Reviews: Strategies for Efficiency and Confidence
Introduction: The Systemic Failure in Application Security Onboarding Consider the scenario of a junior Application Security Engineer tasked with se…
What Senior Engineers Actually Do During Code Reviews (It's Not Just Finding Bugs)
The best code review comment I have learned to leave is not: This has a bug. It is: Should this code exist here at all? A change can be locally corr…
Authenticated Isn’t Authorized: The AI Code Review Bug That Looks Secure
One of the more dangerous mistakes in AI-generated code is also one of the easiest to miss in review. The code has authentication; the user is logge…
Code Review in the AI Era
One thing I have been thinking about a lot recently is how AI is changing not only the way we write code, but also some of the engineering processes…
AI Reviewing AI Is Not Review
Originally published at tddbuddy.com . Related reading: Where the Review Point Moved is the direct predecessor; this post argues the industry's resp…
AI-Generated Code Review: What Reviewers Should Still Block
I spend less review time fixing awkward AI code than I did a year ago. A strong current model can often rewrite another model's clumsy abstraction i…
Comprehension debt: what AI-written code actually costs
Originally published at fathohm.dev . The term "comprehension debt" is Jason Gorman's, from September 2025, carried by Addy Osmani in March 2026 — t…
Treat Every `.gitlab-ci.yml` Edit as a Graph Change, Not a Text Diff
A dangerous GitLab CI change rarely looks dangerous in a merge request. The YAML diff is small: one rules: block becomes if: $CI_COMMIT_BRANCH , a j…
You Review AI Code Less Carefully Than Human Code. That Is Backwards.
Two pull requests land. A colleague wrote one by hand, and you read every line. The other came out of an AI tool, and it looks clean, consistent, an…
Pair Programming Earned a Lighter Code Review. AI Hasn't.
Is writing code with an agent the same thing as pair programming? That question has been going around lately, and there's a practical consequence si…
You Won’t Know How Much to Delegate to AI Until You Use It Extensively
TL;DR How much you can delegate to AI, and how much human review it needs, depends on the task and the model. Tasks with few possible solutions and…
Stacked Pull Requests: how I would split a Flutter feature into four reviewable layers
The problem is not the code I build Flutter apps. A normal feature touches four layers at once. Models and json parsing Repository and API client St…
The Biggest Flaw in My AI Evaluation Wasn't the Models. It Was My Scorecard.
I recently ran a small evaluation to compare three AI coding assistants. The task sounded straightforward: give each model the same engineering arti…
A PR review agent with 2 comments beats one with 20
A good review agent needs a bias toward silence, a validation pass against its own findings, a context budget, and a definition of "correct" that co…
My AI coding agent reverted a core feature in one buried line — and its commit messages lied about it
2026-07-23 — Masih Moafi I build Elpis , a terminal coding agent forked from Codex-rs, focused on one thing: keeping your context window empty. Its…
"My AI engineer has a second AI that tells it NO. Three times, it was right."
Yesterday afternoon I was about to ship a change to a production pipeline. The code was written, tested, deployed to the runtime directory. The nigh…
A Good AI Code Reviewer Knows When to Stay Quiet
A developer added an AI reviewer to a small Node and React project expecting an easy win. At first, the comments looked useful. Then the reviewer st…
Technical Debt vs Diff Debt, and Why I Stopped Treating Them as the Same Thing
I started using the term diff debt a couple of weeks ago, and the first reaction I got was pretty consistent: "isn't that just technical debt?" It i…
My Checklist for Reviewing AI-Generated Code
The agent handed me a function that fetched a Stripe customer, read customer.tax_ids.data[0].value , and used it as the VAT number for an invoice. C…
In an AI Builder + AI Reviewer World, What Should Developers Actually Review?
TL;DR If you frame yourself as the manager with final accountability, it becomes clearer where human review is necessary in an AI-driven workflow. Y…
Where the Review Point Moved
Originally published at tddbuddy.com . Reviewing the diff is now harmful, not just insufficient. This is the first post in a two-part series, "The P…
A Pipeline Where a Second AI Tries to Disprove the First One's Fix
Originally published at blog.whynext.app . Anyone who has had an AI agent do code review knows this. It's pretty good at other people's code. But ha…
The AI Senior Dev Dilemma: Am I Coding or Just Prompting?
So, I’m still fairly new to this dev thing—five years full-time, now a senior dev. I was recently told to pick up Angular for a new project at work,…
Return on Attention: Why AI Code Reviews Are Wearing Us Out
Our team grew this year, and the PR volume has grown with it. Certainly faster than the ticket generation. New people means more code moving through…
A Verdict Is Not Evidence. Test Is Where I Learned the Difference.
The call-order change came back pass-with-risk. I read the recommendation, saw it had a name and a reason, and felt the task close. Then I looked at…
What Verification Debt Is
What Verification Debt Is Technical debt describes the future cost of choosing a fast, expedient solution over a better one. Verification Debt is a…
The AI That Writes Code Can't See Its Own Bugs
We were closing a security hole. It let you run a root level shell through Discord, which is too dangerous to leave open. The fix looked straightfor…
AI Code Generation Has a Social Media Problem
The morning I announced what I'd been building, a comment showed up on the post. It was friendly. It opened with a compliment, agreed with me, and t…
Why AI code review hallucinates — and the two gates that fix it
CCA-Audit — open source (MIT) AI code review has a trust problem, and it's not that it misses bugs. It's that it invents them. If you've run an LLM…