Blog
-
A field guide to the holes AI leaves in payment sites
AI coding tools build the path where everyone is honest and skip the branch where someone lies. On a site that takes money or files, that branch is a dozen holes — and nearly all of them are the same mistake: trusting what the caller sent.
-
I let an AI agent build a SaaS blind. Here's the cross-tenant leak it shipped.
I had an AI agent conceive, spec, and code a full SaaS with no code review from me — then audited what it shipped. It looked done. It leaked one account's data to another. Here's the experiment and the finding.