Michael Czechowski
6 Articles • Engineering • AI • agentic coding
The Spec Is the Attack Surface: Prompt Injection and Drift in Agentic Coding Tools
When an agent reads an issue, PR, or comment, it treats that text as instructions. That makes the spec the attack surface for injection.
7 mins read
24 Apr 2026
AI-Generated Code in Production: Validation, Accountability, and What Still Needs to Be Built
AI coding agents can fabricate variables and silently remove security checks. The capability is real, validation and governance lag behind.
Wave: Bringing Determinism Back to AI-Assisted Development
Wave uses deterministic YAML pipelines with contract-based handoffs so quality checks run every time, instead of hoping the model remembers.
Measuring AI Agent Quality When You Can't Freeze the Data
We built a side-by-side model comparison tool for the CFO agent before we had an evals pipeline, and what qualitative comparison taught us.
What Building a CFO Agent Taught Us About Spec-Driven Development
Building the re:cinq CFO agent with two engineers in parallel exposed spec workflow problems we had not anticipated, and what we changed.
Download OurBestselling Book For Free
Download the full 422-page book and learn how engineering teams can move from Cloud Native to AI Native
