<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Ai on onereddog</title><link>https://www.onereddog.com.au/tags/ai/</link><description>Recent content in Ai on onereddog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sat, 06 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.onereddog.com.au/tags/ai/index.xml" rel="self" type="application/rss+xml"/><item><title>The Immutable Dev Env</title><link>https://www.onereddog.com.au/appsec/immutable-dev-env/</link><pubDate>Sat, 06 Jun 2026 00:00:00 +0000</pubDate><guid>https://www.onereddog.com.au/appsec/immutable-dev-env/</guid><description>The Environment is the Policy: Real-Time Patching Across the Entire Stack There is a comfortable version of supply chain security and a rigorous one. The comfortable version is a quarterly audit. You run a scanner, triage the findings, open some tickets, close some tickets, and write a report. It feels like security work. It is actually security theatre.
The rigorous version starts with a different question: what is the total attack surface of the system that produces and runs your software, and what is its current state at this exact moment?</description></item><item><title>The Missing Layer</title><link>https://www.onereddog.com.au/appsec/agentic-harness/</link><pubDate>Sun, 31 May 2026 00:00:00 +0000</pubDate><guid>https://www.onereddog.com.au/appsec/agentic-harness/</guid><description>The Missing Layer: Why Claude Code Needs a Harness I recently took part in a company hackathon. A colleague had an idea, so I built the app: native Swift for iPhone, one day, with an agent doing the heavy lifting. The app worked, the demo impressed the judges. We didn&amp;rsquo;t win. That&amp;rsquo;s not the point.
The point is that the capability is real. You can ship something that works, fast, with an agent handling most of the implementation, following sound engineering principles.</description></item></channel></rss>