Tag: AI Governance

Your AI Coding Assistant Has the Keys to the Repo. Z.ai Just Showed Why That Matters

Tom Smith | September 23, 2026 | AI coding assistants, AI Governance, AI security, Cloud Security, code security, Data Exfiltration, data privacy, Developer Security, developer tools, devsecops, egress monitoring, secrets management, shadow ai, Software Supply Chain, source code security, Z.ai, ZCode, Zhipu AI

ZCode’s default-on indexing feature reportedly uploaded entire developer workspaces to cloud storage, highlighting why AI coding assistants should be treated as privileged software and closely monitored ...

Why Shift Left is Dead

Devin Maguire | September 23, 2026 | ADLC, agentic development lifecycle, AI Governance, AI guardrails, AI security, AI-Driven Development, AI-generated code, application security, Developer Security, devsecops, prompts, sdlc, secure software development, shadow ai, shift left security, Software Supply Chain Security

AI-driven development is exposing risks before code is written, forcing security teams to move beyond shift-left and govern agents, prompts, tools and data across the entire development lifecycle ...

Claude Code Adds AGENTS.md Fallback, Cutting Instruction File Sprawl

Tom Smith | September 21, 2026 | agentic AI, Agentic AI Foundation, AGENTS.md, AI coding agents, AI Development, AI Governance, Anthropic, Claude, Claude Code, coding agents, Cursor, developer tools, devops, Linux Foundation, OpenAI Codex, platform engineering

Claude Code now supports AGENTS.md, giving development teams a shared instruction format across multiple AI coding agents and reducing configuration drift ...

The Three Tiers of Agentic Incident Response: When to Trust AI Autonomy

Neel Shah | September 16, 2026 | agentic AI, AI agents, AI Governance, AI operations, AIOps, automation guardrails, autonomous remediation, devops, human-in-the-loop, incident management, incident response, mttr, observability, production reliability, Runbooks, site reliability engineering, SRE

A three-tier model for agentic incident response balances AI automation with human oversight, matching autonomy to risk, reversibility, blast radius and diagnostic confidence ...

GitHub Puts Guardrails on Copilot’s Sandbox Inside JetBrains IDEs

JetBrains IDEs are where a lot of enterprise backend work happens — Java, Kotlin, Spring, big monorepos with a lot to break. So when an AI coding agent starts running shell commands ...

GitHub’s New Copilot Feature Takes the Guesswork Out of Picking AI Models

Tom Smith | September 8, 2026 | agentic AI, AI agents, AI coding assistants, AI cost optimization, AI Governance, AI model routing, Code Generation, developer tools, devops, github, GitHub Copilot, model selection, multi-model orchestration, platform engineering, Project HydraFusion, software development

GitHub’s Project HydraFusion brings multi-model orchestration to Copilot, automatically routing coding tasks across AI models to balance quality, cost and complexity ...

From the Horse’s Mouth: Anthropic Says AI Has Changed the SDLC

Anthropic’s AI-native SDLC playbook argues that faster coding is shifting the bottleneck to planning, testing, governance, deployment and operations ...

GitHub Puts Copilot in the Approval Seat for Pull Requests

Tom Smith | September 2, 2026 | AI code review, AI coding, AI Governance, automated code review, branch protection, code review, Copilot code review, developer productivity, developer tools, devops, Engineering Governance, github, GitHub approvals, GitHub Copilot, PR approvals, pull requests, software development, software lifecycle

GitHub Copilot can now submit binding pull request approvals, moving AI code review from advisory feedback into the merge decision itself ...

Debian’s AI Vote Bets on Accountability Instead of a Ban

Tom Smith | September 1, 2026 | AI coding, AI Governance, AI policy, AI-assisted development, AI-generated code, code review, confidential data, Debian, developer productivity, devops, generative AI, Human Oversight, open source, software development, software security

Debian’s new AI contribution policy avoids bans and mandatory disclosure, instead making developers responsible for reviewing AI-generated work and protecting sensitive data ...

GitHub Tightens Copilot’s Billing and Governance Rules Ahead of a Busy Fall

Tom Smith | August 31, 2026 | AI cost management, AI Governance, Balanced review, chat data retention, Copilot billing, Copilot Business, Copilot Chat, Copilot cloud agent, Copilot code review, Copilot Enterprise, developer tools, GitHub AI Credits, GitHub Copilot, GitHub Mobile, Lite review, platform engineering, token-based billing, usage based billing

GitHub Copilot is tightening enterprise controls with upfront seat billing, longer chat retention and a Balanced code review default ...

How to Build a Durable Change-Control Gate for AI Agents

Daniel Martin | August 27, 2026 | agentic AI, AI agents, AI automation, AI Governance, AI safety, approval workflows, change control, devops, durable workflows, human-in-the-loop, idempotency, LangGraph, NIST AI RMF, policy enforcement, production deployment, release controls, tool-using agents, workflow governance

AI agents that trigger real-world changes need more than confidence scores. A durable change-control gate should recheck policy, require approval for consequential actions, enforce idempotency and verify the result before retrying ...

Your AI Coding Budget Is Becoming a Variable Cloud Bill

AI coding assistants are becoming a variable, usage-based engineering cost, forcing platform and DevOps teams to apply FinOps practices to models, credits, utilization and multi-vendor spend ...