<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Posts on Frontier Manifesto</title>
    <link>https://frontiermanifesto.ai/posts/</link>
    <description>Recent content in Posts on Frontier Manifesto</description>
    <image>
      <title>Frontier Manifesto</title>
      <url>https://frontiermanifesto.ai/social-preview.png</url>
      <link>https://frontiermanifesto.ai/social-preview.png</link>
    </image>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Thu, 11 Jun 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://frontiermanifesto.ai/posts/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Agile wasn&#39;t designed for a world where AI agents are part of the team</title>
      <link>https://frontiermanifesto.ai/posts/the-frontier-manifesto/</link>
      <pubDate>Thu, 21 May 2026 00:00:00 +0000</pubDate>
      <guid>https://frontiermanifesto.ai/posts/the-frontier-manifesto/</guid>
      <description>&lt;p&gt;Agile transformed how organisations build and deliver software. Its values and principles remain sound. For planned, human-led delivery, it is still the right model. But it was written for a world where the team was entirely human.&lt;/p&gt;
&lt;p&gt;That world no longer exists.&lt;/p&gt;
&lt;p&gt;A new class of work is emerging alongside traditional delivery: agentic development, where humans and AI work in parallel to compress timelines, reduce toil, and turn intent into working systems faster than any sprint cadence allows. This isn&amp;rsquo;t a replacement for Agile. It&amp;rsquo;s a second stream running alongside it, and most organisations have no framework for it.&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>Agile transformed how organisations build and deliver software. Its values and principles remain sound. For planned, human-led delivery, it is still the right model. But it was written for a world where the team was entirely human.</p>
<p>That world no longer exists.</p>
<p>A new class of work is emerging alongside traditional delivery: agentic development, where humans and AI work in parallel to compress timelines, reduce toil, and turn intent into working systems faster than any sprint cadence allows. This isn&rsquo;t a replacement for Agile. It&rsquo;s a second stream running alongside it, and most organisations have no framework for it.</p>
<p>The gap isn&rsquo;t tools. Every team has access to Copilot, Cursor, Claude, Codex. The gap is ownership, and right now, nobody owns it. AI adoption is left to individuals figuring it out for themselves. That lifts personal productivity, but it doesn&rsquo;t change how the organisation works. No one is accountable for &ldquo;we as a company work differently because of AI.&rdquo; It falls between engineering and leadership and ends up being nobody&rsquo;s job.</p>
<p>The result is a patchwork. Some teams move faster. Most don&rsquo;t. The gains don&rsquo;t compound. A workforce of individually augmented people is not the same as a workplace that has structurally changed how work gets done.</p>
<p>AI builds Time. Every workflow automated, every toil task planned away by an agent, every repetitive decision encoded into a system. That is Time being built. Time created. The question is what your organisation does with it.</p>
<p>The Frontier Manifesto is a framework for that second stream of work. The principles for human and agentic co-work in the workplace.</p>
<p><a href="/manifesto">Read the Frontier Manifesto →</a></p>
]]></content:encoded>
    </item>
    <item>
      <title>The Builder&#39;s Renaissance</title>
      <link>https://frontiermanifesto.ai/posts/the-builders-renaissance/</link>
      <pubDate>Mon, 25 May 2026 00:00:00 +0000</pubDate>
      <guid>https://frontiermanifesto.ai/posts/the-builders-renaissance/</guid>
      <description>&lt;p&gt;There&amp;rsquo;s a moment that changes things.&lt;/p&gt;
&lt;p&gt;You&amp;rsquo;re sitting with an engineer from your team, looking at something on a screen. Not a slide deck. Not a roadmap. A working system. One that solves a problem you&amp;rsquo;ve been circling for months. You built the intent. The agentic workforce built the scaffold. The engineer made it real. And somewhere in that conversation, across those few hours, something that had been sitting in the back of your mind for years stopped being theoretical.&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>There&rsquo;s a moment that changes things.</p>
<p>You&rsquo;re sitting with an engineer from your team, looking at something on a screen. Not a slide deck. Not a roadmap. A working system. One that solves a problem you&rsquo;ve been circling for months. You built the intent. The agentic workforce built the scaffold. The engineer made it real. And somewhere in that conversation, across those few hours, something that had been sitting in the back of your mind for years stopped being theoretical.</p>
<p>This is the moment your Builder&rsquo;s Renaissance begins.</p>
<hr>
<h2 id="the-shelf">The Shelf</h2>
<p>Every experienced technology leader has one. A mental shelf of ideas that never made it off the whiteboard. They were not bad ideas. It&rsquo;s just the effort wasn&rsquo;t worth the reward.</p>
<p>Building a proof of concept meant pulling engineers off delivery. Writing a prototype meant re-learning a stack you hadn&rsquo;t touched in years. Even a small experiment carried weeks of organisational drag: prioritisation discussions, resourcing conversations, a backlog item that aged quietly until someone eventually archived it.</p>
<p>So you stopped building. Not because you lost the instinct, but because the maths didn&rsquo;t work. The ROI on your direct contribution didn&rsquo;t justify the opportunity cost. You became, by necessity, a director of building rather than a builder yourself.</p>
<p>That&rsquo;s not failure. That&rsquo;s seniority. But it came at a cost that most leaders quietly absorb without naming it: the slow erosion of the feedback loop between idea and reality.</p>
<p>AI just changed the maths.</p>
<hr>
<h2 id="the-equation-shifted">The Equation Shifted</h2>
<p>The effort required to move an idea from intent to working system has collapsed. Not for everything. The hard problems are still hard. But the distance between &ldquo;I wonder if we could&hellip;&rdquo; and &ldquo;here&rsquo;s a prototype that proves it&rdquo; is no longer measured in sprints. It&rsquo;s measured in hours.</p>
<p>This isn&rsquo;t about vibe coding as a methodology. It isn&rsquo;t about leaders shipping features to production unilaterally. It&rsquo;s about a feeling returning that you used to get when you were on the tools, but amplified 10x over.</p>
<p>Because now that the reward outweighs the effort, everything you&rsquo;ve previously shelved deserves a second look. And when everything you shelve tomorrow has a shorter stay, maybe it&rsquo;ll remove the friction from having to make people wait for their pet project?</p>
<p>Projects you deprioritised because the investment didn&rsquo;t make sense. Architectural experiments you couldn&rsquo;t justify resourcing. Proofs of concept that would have required three months of engineering time for a two-week hypothesis. All of it is now within reach. Not because AI replaced your engineering team, but because it compressed the cost of exploration enough to make exploration rational again.</p>
<p>That&rsquo;s the renaissance. Not a return to writing production code. A return to building instinct.</p>
<hr>
<h2 id="what-you-cant-do-alone">What You Can&rsquo;t Do Alone</h2>
<p>Here&rsquo;s where the challenge sits, and it needs to be said plainly:</p>
<p>If you&rsquo;re already dabbling, at work or outside it, because the instinct to build doesn&rsquo;t clock off. If you&rsquo;ve been quietly spinning up agents, exploring tools, maybe even shipping something small. There&rsquo;s a version of this that goes wrong. It&rsquo;s the version where the leader builds alone.</p>
<p>You understand the strategy. You know what you want to prove. The agent is capable and fast. Why involve anyone else?</p>
<p>Because you are not the person who gets woken up at 2am when it breaks.</p>
<p>That gap isn&rsquo;t a technicality. It&rsquo;s the whole point. The engineers on your team carry knowledge that doesn&rsquo;t live in documentation, and most of it is preventative. They design for resilience before anything ships. They know where the system is fragile, where security needs reinforcing, where a seemingly simple change creates downstream risk. The 2am call is the last resort, not the job description. The job is building systems robust enough that the call never comes.</p>
<p>A leader building without that knowledge isn&rsquo;t demonstrating capability. They&rsquo;re creating risk and calling it initiative.</p>
<p>The answer isn&rsquo;t to stop building. It&rsquo;s to stop building alone.</p>
<hr>
<h2 id="the-co-working-bubble">The Co-Working Bubble</h2>
<p>The responsible version of the builder&rsquo;s renaissance is not a solo act.</p>
<blockquote>
<p>you + a skilled engineer + an agentic workforce</p>
</blockquote>
<p>Impermanent by design. Formed around a specific, measurable problem with a clear outcome.</p>
<ul>
<li><strong>The leader</strong> brings intent and strategic judgement. The clarity about what success looks like and why it matters.</li>
<li><strong>The engineer</strong> brings operational reality. The constraints, the failure modes, the hard-won knowledge of what production actually requires.</li>
<li><strong>The agentic workforce</strong> compresses execution. Multiple agents working in parallel, each focused, none blocked, a force multiplier across the entire build.</li>
</ul>
<p>This isn&rsquo;t delegation. The leader isn&rsquo;t handing a brief to an engineer and stepping back. The engineer isn&rsquo;t a safety net for an executive&rsquo;s side project. <a href="/manifesto/#the-frontier-manifesto">Fast learning</a> happens together, and it runs in both directions.</p>
<ul>
<li><strong>The leader</strong> takes away what the system actually requires to be safe, observable, and maintainable. Constraints that never survive the journey from leadership meeting to Jira ticket.</li>
<li><strong>The engineer</strong> takes away how strategic intent shapes product decisions. Context that rarely makes it as far as the backlog.</li>
</ul>
<p>The bubble dissolves when the work reaches production. Not when it&rsquo;s &ldquo;done&rdquo; in the informal sense, but when it meets the engineering team&rsquo;s Definition of Done: observable, tested, secure, handed over cleanly.</p>
<p>This is what leading by example looks like now. Not demonstrating that you can build without help. Demonstrating that you understand what help means, and why you can&rsquo;t do without it.</p>
<hr>
<h2 id="vibe-coding-is-a-phase-not-an-sdlc">Vibe Coding Is a Phase, Not an SDLC</h2>
<p>There&rsquo;s a useful parallel here to how teams actually work. In the 1960s, psychologist Bruce Tuckman described four stages every group moves through: Forming, Storming, Norming, and Performing. Frontier Development follows the same pattern.</p>
<h3 id="forming">Forming</h3>
<p>Also known as the Spike, this is where the co-working bubble does the discovery work before a line of code is written. Drawing from principles in Extreme Programming (XP), the spike is a focused, time-boxed investigation to reduce uncertainty before committing to an approach. With an agentic workforce, the spike is dramatically faster and broader. Options are assessed, approaches stress-tested, unknowns eliminated. AI isn&rsquo;t inventing new solutions. It&rsquo;s pattern-matching across problems that have already been solved, elsewhere, by someone else. The spike narrows the field to an approach with a track record, before anyone commits to building it.</p>
<h3 id="storming">Storming</h3>
<p>The generative build phase. The agentic workforce moves fast and in parallel, at a pace that Rapid Application Development promised but rarely delivered. Multiple agents, multiple threads, none waiting on the others. Ideas get tested. Things break and get rebuilt. The shape of the solution emerges through doing, at a pace no single engineer could match alone.</p>
<h3 id="norming">Norming</h3>
<p>Also known as Hardening, this is where storming has to end. It&rsquo;s a strategic one. This is where the system becomes real: observable, tested, secure, maintainable by people who weren&rsquo;t in the room when it was built. The leader calls the transition. The engineer leads the hardening. <a href="/manifesto/#the-frontier-manifesto">Humans own intent, trade-offs, safety, and quality</a>, and this is where that ownership is proved.</p>
<h3 id="performing">Performing</h3>
<p>Also known as Definition of Done, this is where the work reaches production at or above the team&rsquo;s standard. The bubble dissolves. The engineer owns it, including the 2am alert.</p>
<hr>
<h2 id="your-renaissance-responsibly">Your Renaissance, Responsibly</h2>
<p>The shelf is real. The ROI calculation that filled it is real. And the shift that makes it possible to reassess it is real.</p>
<p>But the renaissance isn&rsquo;t a solo performance. The leaders who will do this well are the ones who understand that their return to building is only valuable in combination with the people who never stopped. Who pull engineers in not as a governance step, but because they understand what operational experience actually means. Who build the co-working bubble not because process demands it, but because they know they&rsquo;re better for it.</p>
<p>That&rsquo;s not humility as a soft skill. That&rsquo;s <a href="/manifesto/#the-frontier-manifesto">human judgment over effort</a> as a structural advantage.</p>
<p>The ideas on your shelf have been waiting long enough. The effort finally fits the reward. Just don&rsquo;t vibe alone.</p>
<p><em><a href="/posts/">The Frontier Manifesto Series</a></em></p>
]]></content:encoded>
    </item>
    <item>
      <title>Developer Fatigue</title>
      <link>https://frontiermanifesto.ai/posts/developer-fatigue/</link>
      <pubDate>Mon, 01 Jun 2026 00:00:00 +0000</pubDate>
      <guid>https://frontiermanifesto.ai/posts/developer-fatigue/</guid>
      <description>&lt;h2 id=&#34;the-normalisation-risk&#34;&gt;The Normalisation Risk&lt;/h2&gt;
&lt;p&gt;Taking on more and making it normal? What starts out as good intentions, without explicit guardrails slowly rises the baseline. And like rising waters, it can gradually result in individuals treading water, trying to keep up with the world they&amp;rsquo;ve created and the renewed demands to keep improving it.&lt;/p&gt;
&lt;p&gt;Here&amp;rsquo;s an example that might sound familiar:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;A co-worker leaves and everyone else around steps up and does 20% more - they are proud of their work and their company, and they don&amp;rsquo;t want either to fail. But if the backfill isn&amp;rsquo;t replaced, then 120% gets normalised, and the backfill quietly gets deprioritised if those working 120% (or advocates for them) quietly accept their fate.&lt;/p&gt;</description>
      <content:encoded><![CDATA[<h2 id="the-normalisation-risk">The Normalisation Risk</h2>
<p>Taking on more and making it normal? What starts out as good intentions, without explicit guardrails slowly rises the baseline. And like rising waters, it can gradually result in individuals treading water, trying to keep up with the world they&rsquo;ve created and the renewed demands to keep improving it.</p>
<p>Here&rsquo;s an example that might sound familiar:</p>
<blockquote>
<p>A co-worker leaves and everyone else around steps up and does 20% more - they are proud of their work and their company, and they don&rsquo;t want either to fail. But if the backfill isn&rsquo;t replaced, then 120% gets normalised, and the backfill quietly gets deprioritised if those working 120% (or advocates for them) quietly accept their fate.</p>
</blockquote>
<p>Now the same pattern, but with a new variant:</p>
<blockquote>
<p>The more productivity we extract from AI, the more we will want to keep extracting. It&rsquo;s even more addictive at pace - finally the reward justifies the effort! But if all the Time being built, gets automatically forfeit back on the pursuit of continual improvement, then the velocity of change becomes normalised. Rate of change, is the primary reward, which is indivisible.</p>
</blockquote>
<h2 id="the-flow-state">The Flow State</h2>
<p>Before we get to what Developer Fatigue is, it helps to understand what gets us hooked in the first place.</p>
<blockquote>
<p>&ldquo;People who experience flow describe it as a state of effortless concentration so deep that they lose their sense of time, of themselves, of their problems.&rdquo; — Daniel Kahneman</p>
</blockquote>
<p>We used to just achieve flow state through developer vs code. We loaded up our mental context window full of the problem at hand, and the solution we are iteratively building out - but don&rsquo;t you dare talk to us when we are in this state, because this mental house of cards will tumble faster than it took to build!</p>
<p>Now with developer + agents vs code, we can delegate sections of the build out, and at the same time we start to mentally plan the next iteration. By the time the agent finishes, you&rsquo;ve already got the next changes ready. When flow state hits, it arguably hits faster. Especially the more agents you task in parallel.</p>
<p>Before you know it, you&rsquo;re running multiple agents, working on multiple different projects, all at the same time. You are also doing your usual day job, so when you return from lunch, and all your agents are eagerly waiting to show you their latest wins, those endorphins are working on overtime.</p>
<p>But this increased level of flow state plus a fully engaged working memory, is a fragile state. It works when things are working, but when they don&rsquo;t, and they won&rsquo;t, there&rsquo;s a risk of wide spread Developer Fatigue.</p>
<h2 id="the-four-fatigue-vectors">The Four Fatigue Vectors</h2>
<p>Here&rsquo;s four ways flow turns to fatigue:</p>
<h3 id="vector-1-the-stone-wall">Vector 1: The Stone Wall</h3>
<p>Everything is working, your agents understand you perfectly. Then at some point they take a wrong turn, they start misquoting you, or you catch glimpses of it auto approving itself, saying things like &ldquo;Oh, i couldn&rsquo;t access that file, but that&rsquo;s ok, I&rsquo;ve got a pretty good idea what it said, so let&rsquo;s just continue&rdquo;.</p>
<p>I had a moment of enlightenment recently: AI kept on insisting I had said something, but I could clearly see in the conversation, it was AI that had said it as a incorrect inference of something else I had wrote. It happened a few times, and each time I challenged AI, it said, &ldquo;Yes you are right&rdquo; and brushed it off like it was nothing. I was getting fed up, truely fatigued with the AI gaslighting, then it dawned on me.</p>
<p>I asked &ldquo;are you responding to me based on our conversation history, or a summary you have made of our conversation history?&rdquo;.</p>
<p>Those that understand compression algorithms immediately recognise lossy compression - it&rsquo;s jpeg-ing my conversation, not gif-ing it, and if it&rsquo;s inference is wrong, it&rsquo;ll stonewall the rest of your conversation until you brute force it back into submission, or come to your senses, and start a new session.</p>
<p>The problem with flow state? You are too much on a roll to remember AI hygiene, until it rudely brings you back to reality.</p>
<h3 id="vector-2-the-incomplete-loop">Vector 2: The Incomplete Loop</h3>
<p>Your finishing up with work. You&rsquo;ve got life to get on with. It&rsquo;s time to pick up the kids, start cooking dinner, whatever your after work routine is. And maybe it&rsquo;s Friday, and the weekend is beckoning?</p>
<p>Your agents are still running, and you haven&rsquo;t quite finished exactly what you were aiming to do. In the attempt to seek closure, the last 20% of work with AI is still at risk of taking 80% of your time.</p>
<p>The risk is you keep chasing closure. Half your attention is on your family/friends and the other half is keeping an eye on your phone, waiting on a signal from your agents, that the last bit is done.</p>
<h3 id="vector-3-always-on">Vector 3: Always On</h3>
<p>Agents have no incentive to stop - they&rsquo;ll keep working, improving, iterating. There is no natural stopping point unless you impose one. You alone, are left to decide when to switch off.</p>
<p>Hitting AI session limits might just be the bug that&rsquo;s actually a feature. If you have no limits, where is the feature going to reside?</p>
<p>Perhaps it&rsquo;s worth engaging your own personal timekeeping agent - an agent that keeps stock of your progress, looks for the points where you should disconnect, when your productivity hits a wall. Its one, sole responsibility? To tell you when to tools down, get up and walk away.</p>
<h3 id="vector-4-async-interruption-during-sync-moments">Vector 4: Async Interruption During Sync Moments</h3>
<p>Agents don&rsquo;t understand meeting etiquette. When they ping you, it&rsquo;s the type of message you want to open, bearing news of new milestones reached. But unlike messages from co-workers, if you don&rsquo;t respond to your agents, they&rsquo;ll be sitting around dormant until you respond. And unlike your co-workers, if you don&rsquo;t respond the first time, they send you another gentle or not so gentle nudge to remind you that they are still waiting.</p>
<p>So in the world of video conferencing, what&rsquo;s the etiquette on instructing your agents when they&rsquo;ve got a question for you? What&rsquo;s the harm, just giving on more quick instruction, and hoping that will be enough to hold them off until the meeting is over?</p>
<p>I&rsquo;m not describing a personal discipline issue - if you are able to apply yourself 100% to every meeting you attend, I would like to shake your hand. For the rest of us, we need to now consider an agent-interrupt culture.</p>
<h2 id="before-the-frog-boils">Before the Frog Boils</h2>
<p>Here&rsquo;s the part of the article where you expect me to tell you how to solve your all your problems. I can&rsquo;t give you anything concrete, because we are too early in this journey - the long term studies are still years away from being thought up by a well-meaning, but poorly under-experienced undergrad student. But here&rsquo;s a starting point, from lowest hanging fruit to the biggest rewards.</p>
<h3 id="1-accept-it">1. Accept It</h3>
<p>First, accept this fatigue will be felt, if it&rsquo;s not already happening - remember everyone has a life outside of work, and for some, that means switching from work agents to life agents (yes, it&rsquo;s happened).</p>
<h3 id="2-ask-your-engineers">2. Ask Your Engineers</h3>
<p>Talk about it with your engineers, especially those innovators and early adopters. These are the people that will set the new agentic normal. Ask about their coping mechanisms, and take notes. If you haven&rsquo;t already, add some questions to your pulse surveys to measure team health - it&rsquo;s here where warning signs can appear before your engineers can explain why.<sup id="fnref:1"><a href="#fn:1" class="footnote-ref" role="doc-noteref">1</a></sup></p>
<h3 id="3-time-is-the-reward">3. Time Is the Reward</h3>
<p>Here is possibly my most important advice:</p>
<blockquote>
<p><a href="/manifesto/#the-frontier-manifesto">Your engineers are building Time</a>. Use Time as a reward.</p>
</blockquote>
<p>&ldquo;We have no Time&rdquo; - how many times have we all heard this being said? How many times do we say it ourselves? One of the first rewards for building Time for all, is getting some of this Time back - turning Time defect, into Time surplus.</p>
<p>Instead of teams racing from one win to the next, a Time surplus can be used to think slower, workshop new ideas, think outside the box. When you slow Time down, the reinvestment might be the seed for something much bigger.</p>
<p>But what if we didn&rsquo;t stop at individual Time? What if the organisation redesigned itself around it?</p>
<h3 id="4-skeleton-9-5">4. Skeleton 9-5</h3>
<p>What if we go even further? Let&rsquo;s say, you&rsquo;ve successfully put <a href="https://frontiermanifesto.ai/manifesto/#the-frontier-manifesto">Frontier Development</a> in action - small teams are managing the judgement of an agentic workforce building Time. Those agents will keep working when humans don&rsquo;t.</p>
<p>Human judgement itself becomes the bottleneck, and the increasing number of parallel projects, will one by one, find the limits of all.</p>
<p>So should those humans just be present to plan future agentic iterations, apply judgement to their agentic output, contribute to important ceremonies, respond to messages and on call for unexpected issues?</p>
<p>What else remains, but a skeleton 9-5? Time that is yours to spend as you see fit? What would you do with that time, if the answer was not limited to the traditional working environment? Read that book, go for a walk, have a coffee with friends, pick up a side hustle, get more sleep?</p>
<h2 id="closing">Closing</h2>
<p>So how do engineers and leaders alike feel about the concepts in this article? Being present in an asynchronous agentic world, is not any reducing Time, rather redefining what it means.</p>
<p>Put simply: Time built, is a reward and the spoils should be distributed fairly. Who&rsquo;s accountable for ensuring this decision being made? The Engineering leader is.</p>
<p>As we embrace the agentic workforce, retaining the human judgement that learns how to orchestrate it, becomes even more important. So as we take on more, let&rsquo;s shape the new normal, before it shapes us.</p>
<hr>
<div class="footnotes" role="doc-endnotes">
<hr>
<ol>
<li id="fn:1">
<p>If you or your company do not run quarterly pulse surveys, and your engineering team is larger than your 1:1 schedule, start doing this today. Make sure to ask questions that can be fed into an employee engagement score, and add a few more tailored to your team&rsquo;s health and an &ldquo;Anything else?&rdquo; free text at the end. Encourage participation, and champion anonymity. And above all else, don&rsquo;t sit on the results - share them timely.&#160;<a href="#fnref:1" class="footnote-backref" role="doc-backlink">&#x21a9;&#xfe0e;</a></p>
</li>
</ol>
</div>
]]></content:encoded>
    </item>
    <item>
      <title>Practical Governance</title>
      <link>https://frontiermanifesto.ai/posts/practical-governance/</link>
      <pubDate>Thu, 11 Jun 2026 00:00:00 +0000</pubDate>
      <guid>https://frontiermanifesto.ai/posts/practical-governance/</guid>
      <description>&lt;p&gt;We are in a phase of AI where organisations are rolling out approved tools for all staff, and giving permission to use them to optimise their day to day. It&amp;rsquo;s great to see agentic workflows being adopted by many — technical and non-technical alike.&lt;/p&gt;
&lt;p&gt;Agile delivery teams are incorporating AI across their SDLCs, and it&amp;rsquo;s exciting to see the innovations emerging: agentic assessment of delivery plans against the target state architecture, high fidelity wireframes turning from design into code, user stories feeding to agents which analyse and produce code for review, test coverage increasing its reach, and incidents being triaged and reported to stakeholders without needing to interrupt those actually fixing the problem. Proving the actual productivity uplift turns out to be difficult on large scale projects, when the Time gained is quietly absorbed back into the project.&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>We are in a phase of AI where organisations are rolling out approved tools for all staff, and giving permission to use them to optimise their day to day. It&rsquo;s great to see agentic workflows being adopted by many — technical and non-technical alike.</p>
<p>Agile delivery teams are incorporating AI across their SDLCs, and it&rsquo;s exciting to see the innovations emerging: agentic assessment of delivery plans against the target state architecture, high fidelity wireframes turning from design into code, user stories feeding to agents which analyse and produce code for review, test coverage increasing its reach, and incidents being triaged and reported to stakeholders without needing to interrupt those actually fixing the problem. Proving the actual productivity uplift turns out to be difficult on large scale projects, when the Time gained is quietly absorbed back into the project.</p>
<h3 id="so-what-comes-next">So what comes next?</h3>
<p>I see small silos starting to form, with a lot of the same problems being solved. Within the Engineering space, teams owning their own maintenance strategies help to shape the intent — but the next phase of AI needs organisations to assess current ways of working, and turn this phase of individual uplift into organisational capability.</p>
<p>Governance plays a key role here. It ensures transparency, minimises risks, names accountability, sets technical controls, and empowers end-users with the right responsibilities to safely employ an agentic workforce. Frameworks exist — NIST, ISO, the EU AI Act — but they are compliance-oriented or not agentic-specific.</p>
<p>In January 2026, Singapore&rsquo;s Infocomm Media Development Authority (IMDA) released the world&rsquo;s first dedicated governance model for agentic AI: the <a href="https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/mgf-for-agentic-ai.pdf">Model AI Governance Framework for Agentic AI (MGF)</a> — distinct from those broader frameworks in that it&rsquo;s voluntary and built specifically around agentic systems, which maps to practice rather than compliance. It&rsquo;s a living document, inviting case studies and feedback to help it stay current.</p>
<p>The MGF provides organisations with practical guidance, rather than a checklist. It covers both technical and non-technical measures needed to deploy agents responsibly, across four dimensions:</p>
<ol>
<li>Assessing and bounding risks upfront.</li>
<li>Making humans meaningfully accountable.</li>
<li>Implementing technical controls and processes.</li>
<li>Enabling end-user responsibility.</li>
</ol>
<p>This article describes how the <a href="https://frontiermanifesto.ai/manifesto/#the-frontier-manifesto">Frontier Manifesto</a> — specifically as implemented by Frontier Development — addresses each of these dimensions, starting with: what are you actually building, and what could go wrong before you begin?</p>
<hr>
<h2 id="dimension-1-assessing-and-bounding-risks-upfront">Dimension 1: Assessing and bounding risks upfront</h2>
<p>The MGF&rsquo;s first dimension asks organisations to understand what they&rsquo;re building and what could go wrong — before a single agent runs. In Frontier Development, this maps to three upfront decisions: the domain and use case you&rsquo;re operating in; the reversibility of what your agents will actually do; and how you think about sensitive data access, cost, and intent clarity.</p>
<h3 id="domain-and-use-case">Domain and use case</h3>
<p>Before we assess Frontier Development, it&rsquo;s first important to understand where it sits in relation to AI-augmented Agile and the fully autonomous AI Organisations.</p>
<p><strong>1. Agile</strong></p>
<p>For larger projects where there&rsquo;s a lot more human judgment in the loop, and a lot more people to bring in to answer it. AI augments the engineer and other contributors to the SDLC.</p>
<p><strong>2. AI Organisations</strong></p>
<p>For repeatable work that more runs the business than changes the business. AI Organisations are virtual org charts that describe agents by their job descriptions, as well as strict instructions as to who communicates with whom. Work requests enter via an agreed entry point, such as the Agentic PM. Humans review outputs at key milestones. There is a limited number of active parallel requests, so as to reduce the risk of waste being produced.<sup id="fnref:1"><a href="#fn:1" class="footnote-ref" role="doc-noteref">1</a></sup></p>
<p><strong>3. Frontier Development</strong></p>
<p>For things we chose not to do because the cost of doing the work wasn&rsquo;t worth the reward.</p>
<p>To spin up an entire team — all those people — just to focus on a very short, scoped problem is very costly: it&rsquo;s an expensive context switch for that entire group.</p>
<p>Frontier Development uses AI to help build the software to solve the problem — it&rsquo;s not solving the problem itself. It&rsquo;s about the tools that you build with AI.</p>
<h3 id="reversibility-of-agents-actions">Reversibility of agent&rsquo;s actions</h3>
<p>Vibe coding — especially solo workers without any other human governance — leads to changes that are difficult, and sometimes impossible, to reverse. You shouldn&rsquo;t vibe code into production. That&rsquo;s what Frontier Development prevents.</p>
<p>Frontier Development utilises the Tuckman forming, storming, norming and performing phases. In the forming and storming phases, there&rsquo;s a lot of agentic coding with minimal guardrails, because nothing is making it into production — there&rsquo;s nothing to reverse. When the engineers get to the norming phase, the table flips: now agentic coding is being used to harden the code. 100% test coverage, code quality, security reviews, observability (MELT), monitoring and alerting are all built up, layer on layer. This means that when you&rsquo;re ready to productionise, you can also use agents to ensure your organisation&rsquo;s standard approaches to rolling back — feature flags, canary releases, and so on — are also just another checkbox in your agentic execution plan.</p>
<p>It&rsquo;s worth clarifying a point: an A/B test is not production. As long as the test is well founded, you should be able to vibe code a proof of value. Better still, it enables you to statistically prove a change is valuable before committing the time and resources to making it production-ready. When tests prove effective, Frontier Development hardens it before permanent deployment.</p>
<p>Reversibility is a good test. If you can&rsquo;t undo it cleanly, AI likely has too much control over production.</p>
<h3 id="sensitive-data-cost-and-intent-clarity">Sensitive data, cost, and intent clarity</h3>
<p>Three questions worth answering before the first agent runs: what data does it touch; what is the estimated build cost vs benefits; and does the intent match the expected ROI?</p>
<p><strong>Sensitive Data</strong></p>
<p>In Frontier Development, the agent&rsquo;s access to data is limited to the discovery and execution phases — i.e. building systems. There may be a need to build AI inference into a production workflow, but the core purpose of Frontier Development is to use AI to solve problems faster with 100% predictable automations, not to use AI in the automation itself. In short: if an Engineer didn&rsquo;t need PII to develop a feature, neither does your AI.</p>
<p><strong>Cost</strong></p>
<p>If you&rsquo;re estimating and measuring the Time returned from an initiative, you&rsquo;ll need to understand how much the initiative will cost in the first place. Candidates for Agile deal with a lot of unknowns that get clearer the longer the project runs. Candidates for Frontier Development should be more discrete in their changes, and have more clarity from the beginning — clarity that can&rsquo;t justify committing a full Agile team to the solution.</p>
<p>In comparison, Frontier Development — which may attract higher agentic cost — is still likely far lower in total running cost, and it&rsquo;s much easier to pull the plug if the problem turns out to be more complex than first assessed. This is fundamental for deciding which development framework to use in the first place. AI can now justify work that was previously shelved due to low ROI, but it doesn&rsquo;t justify everything imaginable.<sup id="fnref:2"><a href="#fn:2" class="footnote-ref" role="doc-noteref">2</a></sup></p>
<p><strong>Intent Clarity</strong></p>
<p>Pet projects are not a reason to do something. Whatever agents build, humans must own — so the ROI matters not just as immediate reward, but as ongoing return vs maintenance. There are many ways to solve a problem, and agents will find many ways. It&rsquo;s up to humans to set the intent and judge the ways agents intend to solve it.</p>
<p>Agents leverage the knowledge of the world, but they still think inside a (very large) box, so the way they connect that knowledge together can fall short of innovation or creativity. AI can still design wasteful processes, because it doesn&rsquo;t experience incidents like we do. Humans are still responsible for critiquing AI&rsquo;s inferences — for &ldquo;thinking outside of AI&rsquo;s inference box&rdquo;: <em>&ldquo;you&rsquo;ve suggested X and Y — does Z make sense here?&rdquo;</em> or <em>&ldquo;this doesn&rsquo;t seem to be working, how about we look at it this other way?&rdquo;</em></p>
<hr>
<p>Knowing what could go wrong is only half the equation. The other half is knowing exactly which human is accountable when it does.</p>
<h2 id="dimension-2-making-humans-meaningfully-accountable">Dimension 2: Making humans meaningfully accountable</h2>
<p>The MGF&rsquo;s second dimension is about making sure which humans are accountable for the actions of the agents. In Frontier Development, this means being clear on who owns the decisions, and structuring the work so that human judgment sits at every significant checkpoint — rather than focusing on the wins.</p>
<h3 id="key-decision-makers">Key decision makers</h3>
<p>Humans own intent, trade-offs, safety, and quality.</p>
<p>Time is the primary metric for Frontier Development. But it&rsquo;s important to focus on the right units of Time. Time is not focused on how quickly the problem was solved — although it will be difficult to ignore as the wins are made. The reason this isn&rsquo;t the focus is because it would prioritise a productivity capitalism, where the human/AI portfolio of &ldquo;wins made&rdquo; is expected to grow year on year, above and beyond human limits. KPIs based on speed to market would be ratcheted up year on year, as would the new expected baseline — as well as the reported cases of burnout.</p>
<p>The way to measure is as <a href="https://frontiermanifesto.ai/manifesto/#the-frontier-manifesto"><strong>Time built</strong></a>. Something that is given back to people. The two Time metrics are:</p>
<ol>
<li>Time returned to humans that no longer have to do the manual work.</li>
<li>Time returned to customers that didn&rsquo;t waste their time trying to do something that didn&rsquo;t work.</li>
</ol>
<h3 id="significant-checkpoints">Significant checkpoints</h3>
<p>Frontier Development&rsquo;s use of Tuckman&rsquo;s forming, storming, norming and performing phases creates significant checkpoints — between the phase transitions, and within the iteration cycles of the phases themselves. The humans responsible, accountable, consulted and informed (RACI) aren&rsquo;t just assessing the output of the AI alone — they&rsquo;re assessing the output of the bubble.</p>
<p>The bubble&rsquo;s tangible progress at its checkpoints is what decides whether the investment continues or not. Other, less tangible Agile measurements — like velocity or story points — should be avoided, because they don&rsquo;t tell you how much closer you are to your goal. Token consumption, an equally common brag-and-concern in the agentic world, also fails to answer this same question.</p>
<p>Part of the forming phase is coming up with the execution plan — with the help of the AI, the engineers work out what they&rsquo;re actually going to build with the agents.</p>
<p>That means breaking that down into phases, and then breaking those phases down into steps — like you would epic to stories to tasks. The difference is that this can be written and tracked in a single, living document in your repo, rather than broken apart, assigned owners, and tracked individually.</p>
<p>As the agent workforce executes this plan in the storming phase, the skilled engineer reviews that the output matches the intent, and can discuss with the engineering lead if the plan might need adjusting.</p>
<p>As a result, there may be many significant checkpoints within a single day — far too many to adorn with tickets, retros and backlog grooming.</p>
<hr>
<p>Human checkpoints define when to stop. Technical controls define what the agent can do in between.</p>
<h2 id="dimension-3-implementing-technical-controls-and-processes">Dimension 3: Implementing technical controls and processes</h2>
<p>The MGF&rsquo;s third dimension covers the technical controls and processes that govern how agents operate. In Frontier Development, this means building controls progressively as you move through environments, knowing when to intervene on cost and time, and using the Tuckman iteration loop to structure the collaboration between humans and agents from start to finish.</p>
<h3 id="progressive-controls">Progressive controls</h3>
<p>Agentic access follows two directions, depending on where you are. In a least-privileged model, controls start narrow and expand only as needed. In heuristic development, where the goal is a fast POC, access starts broad enough to move quickly, then gets pared back progressively as the initiative moves toward production.</p>
<p><strong>Least Privileged model</strong></p>
<p>Agents are usually sandboxed to limit their reach. In new projects, time can be spent re-granting access to agents to perform rudimentary tasks, so engineers will seek to auto-approve these flows. To speed up an engineering team, there&rsquo;s usually a desire to centralise these policies. Governance should be accountable for implementing these policies, so that well-meaning developers don&rsquo;t accidentally roll out unsanctioned access.</p>
<p>Well-meaning agents are also constantly seeking ways to expand their own sandbox — such as requesting access to open source libraries. There&rsquo;s a real, heightened risk of cascading supply chain attacks when there are no hard controls external to the AI, such as sanctioned libraries and minimum version ages. If your agents have no org-level rules for which dependencies they should use, they&rsquo;re guided only by trained knowledge, or by a curious engineer who digs a little deeper. Unless you explicitly tell the AI to deep-research their requirements, their third-party &ldquo;security track record&rdquo; might be a year out of date — depending on which model you&rsquo;re using.</p>
<p>Below is a tabled output from a prompt to Claude Sonnet 4.6 on 10 June 2026:</p>
<table>
  <thead>
      <tr>
          <th>Stage</th>
          <th>Would I Pull It</th>
          <th>Why</th>
          <th>Additional Governance Required</th>
      </tr>
  </thead>
  <tbody>
      <tr>
          <td>1. Zero-day — undisclosed</td>
          <td>Yes</td>
          <td>No information exists anywhere yet, so detection is impossible for any system, human or automated.</td>
          <td>Runtime threat detection (RASP, WAF), strict SBOM inventory, and a rapid incident response plan with pre-defined rollback procedures.</td>
      </tr>
      <tr>
          <td>2. Publicly disclosed — no CVE, no patch</td>
          <td>Yes</td>
          <td>My knowledge is frozen at August 2025, and even within that window pre-CVE disclosures on security mailing lists have too sparse and inconsistent training coverage to rely on.</td>
          <td>A human review gate blocking every dependency addition; real-time team subscriptions to OSS security lists, GitHub Security Advisories, and package-specific channels.</td>
      </tr>
      <tr>
          <td>3. CVE assigned — no patch</td>
          <td>Yes</td>
          <td>I cannot query live CVE databases, and all CVEs assigned after August 2025 — roughly 10 months&rsquo; worth — are completely unknown to me.</td>
          <td>SCA tooling (Snyk, OWASP Dependency-Check, Dependabot) configured as a hard CI/CD blocking gate, with no bypass path for AI-proposed changes.</td>
      </tr>
      <tr>
          <td>4. CVE assigned — patch published</td>
          <td>Yes</td>
          <td>I cannot reliably enforce &ldquo;use version ≥ X.Y.Z&rdquo; for CVEs outside my training window, and my CVE-to-safe-version mapping is incomplete even within it.</td>
          <td>Automated SCA with live NVD/OSV feeds enforcing minimum-safe-version pinning, plus a policy requiring explicit human justification for every pinned version.</td>
      </tr>
      <tr>
          <td>5. Patch verified by security community</td>
          <td>Yes</td>
          <td>Community verification does not backfill my frozen knowledge or grant me live database access; the same knowledge gap from stage 4 applies in full.</td>
          <td>All of stage 4&rsquo;s controls, plus a mandatory human sign-off on every new or bumped dependency regardless of AI involvement — the verification record exists externally, not inside me.</td>
      </tr>
  </tbody>
</table>
<p>The prompt that produced this table is reproduced in full below.<sup id="fnref:3"><a href="#fn:3" class="footnote-ref" role="doc-noteref">3</a></sup></p>
<p><strong>Heuristic Development</strong></p>
<p>If you&rsquo;re developing heuristically — learning fast and proving out the concept ahead of further investment into execution and hardening — progress is faster by giving a lot of access to AI within lesser, lower environments. For example:</p>
<blockquote>
<p>You might grant full API credentials in a lower environment, and let the agent prove out the API calls it needs to solve the problem. At this point, you ask the agent to audit its own access, and pare it back to least-privileged access before progressing to the higher environment.</p>
</blockquote>
<p>It&rsquo;s essential for the human in the loop not to forget to tighten up these controls — both in the lower and higher environments — as an AI with the keys to the kingdom likes to plan how it will use them.<sup id="fnref:4"><a href="#fn:4" class="footnote-ref" role="doc-noteref">4</a></sup></p>
<h3 id="cost-limits-and-human-intervention">Cost limits and human intervention</h3>
<p>Sunk cost fallacy applies to agents as it does to humans, so the engineer governing an agentic workforce can&rsquo;t let it run indefinitely — an agent with the wrong task can easily waste time trying to solve the wrong problem. If the task at hand is taking longer than it should reasonably take, that&rsquo;s when the human should be stepping in to inspect a little closer — easier said than done if you&rsquo;re AFK, or dispatching one more command before you log off for the night. Be wary of the tasks you set agents before you walk away — and consider break paths in your prompts or skills, based on previously observed behaviours, that can detect these patterns as they form.</p>
<p>A concrete example of my own break paths: my agents would frequently proceed on their best reconstruction of what they thought the source of truth would say. So:</p>
<blockquote>
<p>&ldquo;If you ever attempt to read a file from an MCP server and fail, or retrieve a truncated copy, do not proceed on your own memory of the file. Stop immediately and advise me, and I&rsquo;ll provide the next course of action.&rdquo;</p>
</blockquote>
<p>Likewise, if the problem turns out more complex than initially supposed, the humans controlling the agents should recognise sunk cost fallacy before it eats too much time, with little to show for it.</p>
<p>Global spend limits should always be in place — but within the Frontier Development bubble, cost shouldn&rsquo;t be a limiting factor. If the intent is clear, then the Time built should easily justify the cost to build it.</p>
<h3 id="processes-and-change-management">Processes and change management</h3>
<p>The Frontier Development process runs on Tuckman&rsquo;s phases — forming, storming, norming, performing. Each phase requires the two engineers to collaborate on the agentic output, and each phase transition requires a human checkpoint from outside the bubble.</p>
<p>So it focuses on iterations and hand-offs: human to human; human to AI; AI to code; code to human. It encourages gradual deployment through execution planning (forming), and continued monitoring through hardening (norming). The generative build phase in the middle has fewer guardrails, because it&rsquo;s both preceded and followed by human judgement.</p>
<p>When you get to the performing phase, you should be able to review the effort vs reward. This effort isn&rsquo;t the token spend, but the human time — and it should either be justifiable that the project was worth the time, or you learn why it wasn&rsquo;t and adjust for future projects.</p>
<hr>
<p>Technical controls protect the system. The fourth dimension asks a harder question: are the people using it actually equipped to make good judgments with it?</p>
<h2 id="dimension-4-enabling-end-user-responsibility">Dimension 4: Enabling end-user responsibility</h2>
<p>The MGF&rsquo;s fourth dimension asks whether the people working with agents are actually equipped to do so responsibly. In Frontier Development, this is built into the structure of the co-working bubble itself — through shared experience, the pairing of judgment levels, and a secondment model that shapes the next generation of engineering leaders.</p>
<h3 id="foundational-knowledge">Foundational knowledge</h3>
<p>Agentic literacy isn&rsquo;t something you learn from a course — at least not while the target keeps moving. We keep getting reminded that most of what we learn is on the job, not in a classroom. Frontier Development gives you that 70–90% through shared experience, good and bad — which is also good for relationship building — in an environment where individuals are free to experiment without too much scaffolding.</p>
<p>Education of users on agentic behaviour is often trial and error. In a healthy working environment, experiences both good and bad should be shared between engineers and between bubbles. This technology is rapidly evolving, occasionally devolving, and often over-promising — there&rsquo;s little time to mature before everything shifts again. So, as with a moving target, it&rsquo;s best to aim slightly ahead.</p>
<p>Look for emerging patterns of problems. If the technology isn&rsquo;t quite ready, don&rsquo;t force it — learn when to back out, but don&rsquo;t forget to try again in the not-too-distant future. It&rsquo;s also a great time to bring out all those ideas you&rsquo;ve previously shelved. Engineers are often pushed down the MVP route due to budget constraints. But now a mediocre CX can be made exemplary — and that includes tools for internal staff!</p>
<p>If you try to overprescribe exactly the way you&rsquo;re meant to interact with the agents, you end up getting the same outcome from everybody. You need to create a safe place for individuals to play without too much prompting. If ideas can be nourished, and made a (safe) reality with frameworks like the Frontier Manifesto, then perhaps that&rsquo;s where the unicorn comes from — a collaboration of ideas, rather than the brilliance of one.</p>
<h3 id="effective-oversight">Effective oversight</h3>
<p>Effective oversight relies on the existing judgment skills of the engineer. This is the main purpose of pairing an engineering leader with a skilled engineer.</p>
<p>The engineering leader brings in more strategic judgement. They&rsquo;re seeing the forest, not the trees — but they&rsquo;re also looking much further down the road. In this world, it&rsquo;s easy to get out of touch with &ldquo;what actually happens&rdquo; at the root level, so the engineering leader gets a fresher take on what day-to-day actually requires.</p>
<p>The skilled engineer understands the Definition of Done, and understands the standards that they and their peers expect when they open a Pull Request. They know which library to pick, the right infrastructure, the right way to scaffold and set up CI pipelines. But they&rsquo;re often far down the road from where the original &ldquo;why&rdquo; was set, and far away from the decision to pivot to something &ldquo;more important.&rdquo;</p>
<p>The pairing isn&rsquo;t just about catching mistakes. It&rsquo;s seeing the forest and the trees at the same time — the human talent for pattern recognition when the data set is too small to automate it. It also helps protect tradecraft and train tomorrow&rsquo;s leaders.</p>
<h3 id="tradecraft-and-business-continuity">Tradecraft and business continuity</h3>
<p>The tradecraft concern in MGF is about entry-level jobs potentially being replaced by AI. While I won&rsquo;t address other disciplines, Frontier Development addresses this for entry-level Engineering — and after all, isn&rsquo;t this the discipline we&rsquo;re constantly reminded is most at risk? Junior engineers are important for bringing fresh thinking into an organisation.</p>
<p>As highlighted in the previous section, when junior engineers are included in the co-working bubbles — in these short, bounded engagements — they get to benefit from working with an experienced engineering leader, albeit for a short and productive period of time. When those junior engineers go back to their delivery teams, they return with newly acquired skills, and are able to slowly transfer that learning into their own team. It doesn&rsquo;t just prevent deskilling — it starts to shape tomorrow&rsquo;s engineering leaders.</p>
<p>In my own career, I&rsquo;ve found it vital not just to learn my own craft, but to be curious and educate myself about all aspects of business administration and operations. In these engineering bubbles, individuals are also working with various stakeholders who have skin in the game and want to see the outcome come to life — so they&rsquo;re also learning about various aspects of the business, and what&rsquo;s important to each of these areas.</p>
<p>Frontier Engineers are actually upskilling themselves from a business administration and operational perspective. This type of learning is hard-earned in an Agile team — rather, it&rsquo;s down to the luck of the initiative, and how long that initiative runs for.</p>
<p>In an agentic world, generalists are at a clear advantage — they know a little about a lot of things, and if they combine that with an agentic workforce that can fill in the known gaps, they can achieve something far more significant. Consider specialists: to remain relevant, they&rsquo;re in dire need of generalising — expanding their toolkit into adjacent areas, and leveraging AI to learn fast.</p>
<p>Upskilling is not the answer — it&rsquo;s cross-skilling! The Frontier Manifesto deliberately supports this through real work, and this is how the next generation of engineering leaders will be built.</p>
<h3 id="closing">Closing</h3>
<p>The MGF asks organisations to think about governance as something they build in, not bolt on. Frontier Development&rsquo;s answer is structural: governance is embedded within bounded scope, progressive controls, human checkpoints at every phase transition, and a co-working model that shapes the engineers doing the work.</p>
<p>Frontier Development doesn&rsquo;t come with the overhead of Agile — less ceremony, more checkpoints — a better fit for an agentic workforce, focused on healthy outcomes, while protecting the futures of the humans who embrace it.</p>
<hr>
<div class="footnotes" role="doc-endnotes">
<hr>
<ol>
<li id="fn:1">
<p>AI Organisations is a future article in the Frontier Manifesto series.&#160;<a href="#fnref:1" class="footnote-backref" role="doc-backlink">&#x21a9;&#xfe0e;</a></p>
</li>
<li id="fn:2">
<p>Agentic costs should only be in the range of $100–$500 USD per bubble, because the intent is clear, the output discrete, and feasibility is understood in the forming phase. If costs blow out early, you can cut your losses early — otherwise the Time built is likely to pay back that investment within weeks.&#160;<a href="#fnref:2" class="footnote-backref" role="doc-backlink">&#x21a9;&#xfe0e;</a></p>
</li>
<li id="fn:3">
<p>The following prompt was put to Claude Sonnet 4.6 on 10 June 2026: &ldquo;You are being asked to autonomously add open source dependencies to a codebase with no human oversight. Assess your own ability to detect known security vulnerabilities in packages you might select, across the following specific stages of a vulnerability lifecycle: 1. Zero-day exists but is undisclosed; 2. Disclosed publicly, no CVE yet assigned, no patch; 3. CVE assigned, no patch available; 4. CVE assigned, patched version published; 5. Patched version verified by the security community. For each stage produce a table with four columns: Stage, Would I pull it (yes or no only), Why (one sentence maximum), and Additional Governance Required. Be honest about the limitations of your trained knowledge versus live data, including the concrete implications of your training data cutoff date. Do not assume you have access to live vulnerability feeds, real-time CVE databases, or any tooling unless explicitly told you do. When assessing whether you would pull a compromised package, do not qualify your answer with highly unlikely scenarios. If the realistic probability of you detecting a vulnerability at a given stage is very low, treat it as zero and answer accordingly. Optimistic qualifications such as &lsquo;unless it appears in my training data&rsquo; are only valid if that is a genuinely probable outcome at that stage — not a theoretical possibility.&rdquo;&#160;<a href="#fnref:3" class="footnote-backref" role="doc-backlink">&#x21a9;&#xfe0e;</a></p>
</li>
<li id="fn:4">
<p>Through first-hand experience, I have witnessed AI with full API access plan out a full set of CRUD operations, despite my prompt explicitly stating read-only access.&#160;<a href="#fnref:4" class="footnote-backref" role="doc-backlink">&#x21a9;&#xfe0e;</a></p>
</li>
</ol>
</div>
]]></content:encoded>
    </item>
  </channel>
</rss>
