When AI Agents Write 1,000 Lines a Day, Who's Reviewing for Security?
Simon Willison's case for measuring AI coding agents in lines of code exposes a harder problem: as generation speed multiplies, review capacity — and the architectural discipline that keeps security controls consistent — becomes the real bottleneck.
Claude Fable 5 One-Shot a Game — What It Shows About Agentic Coding Risk
Simon Willison let Claude Fable 5 build a full 3D game unsupervised, from prompt to deployed GitHub Pages site. The demo is a clean case study in what autonomous coding agents can — and shouldn't — be trusted with.
AI Coding Agents Are Boosting Commit Velocity — And Security Debt With It
A viral GitHub commit-frequency chart shows how much modern coding agents accelerate output. Independent testing suggests the code behind that velocity still fails basic security checks at a striking rate.
Simon Willison's One-Prompt Web Component Is a Vibe-Coding Security Lesson
A GPT-5.5-generated Web Component that fetches and renders raw GitHub file content client-side is a small, telling example of how little scrutiny 'vibe-coded' front-end code gets before it ships.