In software we all know the test that can't fail. It asserts that a function returning int returned an int, it goes green on every run, and it tells you nothing about whether the logic is right. I wrote a short research paper about the same trap show...

Developers move research artifacts through archives, pipelines, and handoffs every day. A SHA-256 digest is an attractive checkpoint because it is cheap and exact. It is also easy to over-read. Byte equality with a declared digest is not authorship, ...

A pull request can compile, pass a check, and still leave its reviewer guessing. What problem does it solve? Which files deserve special attention? What was actually tested? What would make a rollback necessary? I want to separate two questions: Is ...

A continuous-integration job can produce a useful report and still ask for more permission than the report itself needs. The moment that report becomes a pull-request comment, the workflow is no longer only reading repository state. It is writing int...

Revoking an AI Agent Is Not the Same as Stopping Its Authority When a user revokes an AI agent’s authorization, what happens to the tasks, delegated credentials, and queued operations the agent already created? This question is central to my resear...