Nobody reads code anymore: 6 field-tested rules for shipping safely with AI

Specialist_Agent3599 · reddit · 2026-09-03

After two months of record shipping speed, the author's team stopped reading AI-generated code entirely. Instead of fighting it, he shares 6 field-tested verification practices: write far more tests than feel necessary; never review code with the model that wrote it (NVIDIA's fine-tuned 8B reviewer beat 70B/340B models; a 7B HF reviewer beat a 70B baseline by 46%); prefer several cheap independent review passes over one perfect pass (a 12B reviewer experiment confirms it); never trust green tests — LLM suites have hit 100% coverage with only a 4% mutation score, so break code on purpose; run a dedicated security pass (Veracode: 45% of generated code fails security tests, 86% of XSS cases insecure); and tier human review by blast radius — auth, payments, and migrations always get human eyes, since data from 22,000 developers shows review time up 441% and unreviewed merges up 31% under heavy AI adoption.

Original post →

More from coding & agent

coding & agent channel →