r/codingProtection

AI made our velocity metrics look great. Then the midnight pages started.
▲ 1 r/codingProtection+3 crossposts

AI made our velocity metrics look great. Then the midnight pages started.

After rolling out an AI coding assistant, most teams see the same pattern: PRs get bigger, cycle times drop, sprint records fall. Feels great. Then a few months in, the on-call rotation gets brutal.

This isn't coincidence. The DORA 2024 report confirmed it across the industry: teams with significantly higher AI adoption also showed higher change failure rates.

Three failure patterns explain most of it, and none of them are new problems — they're old ones running faster:

1. Polished code fools reviewers. AI-generated code looks right. It follows conventions, reads cleanly, gets approved faster. But a model can produce a wrong implementation with the same fluency as a correct one. Reviewers pattern-match to familiar structure and skip the hard reasoning.

2. The model grades its own homework. When the same model writes the code and the tests, it tests its own assumptions — not your requirements. Coverage goes green. Edge cases nobody described stay untested.

3. AI can't see the whole system. The model only knows the code it's shown. It has no awareness of the shared retry queue, the upstream producer, the implicit guarantee held together by a three-year-old design decision. Clean-looking refactors quietly remove something critical.

The fix isn't slowing down AI adoption. It's redesigning the delivery process so it's worth amplifying:

  • Write the spec before you write the prompt
  • Tier changes by risk — anything touching payments or auth requires human business-logic review and a contract test against the live API
  • Treat observability as a release gate — no monitoring dashboard, no merge

Teams that had strong practices before AI got faster. Teams that didn't started getting paged at midnight.

Full write-up with a FinTech case study (wrong field placement silently dropped disbursements during peak load, every unit test green): https://leaddev.com/ai/ai-coding-made-us-faster-why-did-incidents-increase

u/OfficialLeadDev — 2 days ago
▲ 10 r/codingProtection+3 crossposts

Towards uniformity

We have more and more developers who use AI coding assistants and just prompt, review, re-prompt, re-review, ... and finally do PR with what they get from AI and PR are approved/merged.

We also see more and more POs who say they use AI to describe their ideas, to get new ideas, integrate AI suggesctions and let AI write stories they review and send to dev.

But does it mean that all future apps in a functional domain will progressively by internally similar, at the same level, at the same quality, with the same uniformity ?

What will differentiate the PI values of an app as compared to another ?

Are we exposing security of the "now similar" apps (same attacks, AI knowing the code and its weaknesses) ?

reddit.com
u/Spare_Dependent6893 — 2 days ago
▲ 534 r/codingProtection+1 crossposts

does anyone here actually work at a tech company?

i see every now and then posts of this sub and of experienced devs talking about ai slop.

about how they are working with people who cant code without ai and only write vibe coded commits.

and how they are the most intelligent people at their company who refuse to use ai and sre the only ones that understand the code and nobody else can answer or explain what they are doing.

and everybody at the comments agree with them and talk about how at their company evrybody is also dumb as hell and are only producing ai slop and how the ai bubble is gonna crash at any minute.

they never mention their company or describe what type of projects they work on for some reason.

well i work in oracle, have friends in meta, google, amazon etc. everybody in our teams is using claude, codex or cursor. nobody thinks its a bad tool. and its not even a debate. if you are a good engineer, and you know how to do critical thinking, i dont see how is it possible to not see how using llms is a necessity going forward.

there is the other spectrum of course of people who use agentic workflows and run llms 24/4 to produce vibe coded apps. thats what people againts llms normally use as an example. but if you dont see how you can use llms in your well thought out tasks and tickets then you are gonna be left behind. thats all

- a person working on a real tech company

reddit.com
u/Longjumping_Virus895 — 5 days ago