All episodes
Conversations with the founders and engineers building with AI: what they use, what works, and what breaks.
Death by small bugs: securing code in the Vulnpocalypse, with Patrick Collins and Simon Harloff
November 5, 2026 · 48m
The frontier models that refuse to help you hack your own software are, paradoxically, making you less safe—while open weights models like DeepSeek Flash V4.1 will comply, cost a tenth as much as GPT-6, and find more vulnerabilities in the process. Patrick Collins and Simon Harloff from Dam Secure join Yaniv to explain why agent-built code needs typed languages, why PR gating has flipped from taboo to essential, and how compliance frameworks like SOC 2 are lagging years behind actual threats. They name specific red teaming tools, model providers, and infrastructure choices, and lay out a three-stage security factory that slots into automated software pipelines without slowing human engineers down.
Where humans still matter when agents write the code
October 29, 2026 · 50m
The traditional GitHub-style pull request review is a waste of opportunity cost for most code changes in the agentic era. Yet simply removing it without a replacement invites complexity death spirals and unbounded product behaviour that agents cannot unwind. James McGill and Haziq Nordin join Yaniv to argue that engineers should stop reading diffs line-by-line and instead scan for architectural complexity, shift accountability to spec quality, and build new verification patchworks of end-to-end tests, fuzzing, and product review. The conversation is for any engineer or founder trying to extract real leverage from AI coding tools rather than bottlenecking them with cargo-cult process.