• views: 68
• date: 3 September 2026
• posted by: AD-TEAM

You already know how to get a coding agent to write code. That part is solved. What is not solved is everything that happens after it hits enter — who checks it, what it was allowed to touch, whether the tests it wrote mean anything, and whether anyone can tell six months later which commits an agent authored.

This is not another course about driving Claude Code or Copilot. It is a course about the engineering control system around coding agents — the part almost nobody teaches, and the part that decides whether agent velocity becomes throughput or becomes incidents.

What the evidence actually says

DORA 2025: AI is an amplifier — it raises throughput and instability together.
Veracode: across 80 tasks, models chose the insecure implementation about 45% of the time.
METR: experienced developers measured 19% slower with AI while estimating they were 20% faster.
GitGuardian: AI-assisted commits leak secrets at roughly twice the human rate.

The six controls you will build

Specify — agent-executable specs with machine-checkable acceptance criteria, non-goals and stop conditions.
Constrain — least-agency permission tiers, sandboxing, worktrees and default-deny egress.
Review — a checklist tuned to what agents actually get wrong, a ten-minute triage, and adversarial agent-vs-agent review.
Test — tests as a contract the agent cannot game, plus mutation testing to prove the suite has teeth.
Gate — seven blocking CI checks: secrets, static analysis, dependencies, tests, test integrity, SBOM and a workflow audit.
Prove — commit provenance, SBOM and signed attestations that answer an auditor without a human explaining.

Built around one company, one incident

Everything is taught through Meridian Ledger, a Series-B fintech that went agent-first and lost six hours of reconciliation when an agent deleted a runtime-injected credential during a release freeze. Every control in the course answers a specific thing that went wrong that Thursday.

Hands-on and tool-agnostic

Eight labs, six assignments and three role plays, all built on open-source tooling — Semgrep, gitleaks, OSV-Scanner, Syft, Grype, promptfoo, mutmut and zizmor. No lab requires a specific vendor's coding agent, because your control plane has to outlive your tool choices. You will break a repo on purpose, review a pull request with seven planted defects, catch a reward-hacked test suite, and wire a CI gate that blocks all of it.

Who this is for

Senior and staff engineers whose teams already merge agent-authored pull requests; application-security and platform engineers asked to make the AI rollout safe; and engineering leaders accountable for both the velocity number and the incident.





   
   
   

Forex Trading

Crypto Trading. 20 USD Bonus after KYC

We need your support!
Make a donation to help us stay online
        
Bitcoin (BTC)
bc1q08g9d22cxkawsjlf8etuek2pc9n2a3hs4cdrld
	
Bitcoin Cash (BCH)
qqvwexzhvgauxq2apgc4j0ewvcak6hh6lsnzmvtkem

Ethereum (ETH)
0xb55513D2c91A6e3c497621644ec99e206CDaf239

Litecoin (LTC)
ltc1qt6g2trfv9tjs4qj68sqc4uf0ukvc9jpnsyt59u

USDT (ERC20)
0xb55513D2c91A6e3c497621644ec99e206CDaf239

USDT (TRC20)
TYdPNrz7v1P9riWBWZ317oBgJueheGjATm

0 1 2 3 4 5

| Print version |

	Information
		Users of GUESTS are not allowed to comment this publication.