The Rule of Two for AI Agents in CI/CD
AI agents in GitHub Actions and delivery pipelines need clear boundaries. Teams should avoid combining untrusted input, secrets, and external communication in one workflow.
K
Kyluke McDougall 
AI Coding Sandboxes Are Not Enough. Design the Blast Radius.
Sandboxes, permissions, and allowlists matter. But serious teams also need to decide how far an AI coding agent mistake can spread.
K
Kyluke McDougall 
AI Coding Agents Need Guardrails Before They Get Near Production
Claude Code, Cursor, MCP tools, and similar agents are becoming more powerful. For serious product teams, the key question is no longer speed. It is control.
K
Kyluke McDougall 
On-prem AI coding does not solve the architecture question
Hybrid and on-prem AI coding agents may unlock adoption in regulated companies. They still need architecture, boundaries, review and operational design.
K
Kyluke McDougall 
MCP turns AI coding agents into connected systems
MCP makes AI coding agents more useful by connecting them to tools, data and workflows. It also means teams need production-style security boundaries around those connections.
K
Kyluke McDougall 
When AI agents touch databases, speed needs boundaries
AI coding agents can accelerate schema work, migrations and backend changes. They should not be allowed near production data without clear operating rules.
K
Kyluke McDougall 
When coding agents enter the delivery pipeline
AI coding agents become strategically interesting when they touch CI, pull requests, reviews and deployments. That is exactly when teams need clear operating rules.
K
Kyluke McDougall 
When AI agents install packages, supply-chain security becomes architecture
AI coding tools speed up development. They also speed up the moment when compromised dependencies, scripts and credentials become production risk.
K
Kyluke McDougall 
Codex hooks show where AI coding is going
AI coding agents are becoming part of the delivery workflow. The teams that benefit most will not be the ones that trust them blindly, but the ones that put policy, review and operational controls around them.
K
Kyluke McDougall