Skip to content

The long answers.

What we have written about AI software factories, governance, and putting AI-built software into production.

Fig. 01

What is an AI software factory?

An AI software factory turns business intent into governed, production-grade software: code, infrastructure, tests, and an audit trail. What it is and how it works.

Read the article
Fig. 02

AI coding assistants vs. an AI software factory

AI coding assistants make individual developers faster. An AI software factory delivers a governed production system. How they differ, and why they work together.

Read the article
Fig. 03

AI coding incidents: the file

Deleted production databases, a leaked source tree, 6.3 million lost orders. Eight incidents, dated and sourced, and the control that was missing in each.

Read the article
Fig. 04

Is AI-generated code secure? What the research says

No credible study finds AI-generated code secure by default. The vulnerability rates, the flaws that are getting deeper, and the policy layer no benchmark measures.

Read the article
Fig. 05

HÄLYTIN: the weekend build of an app the state scheduled for 2027

Finland's drone-alert app is scheduled for 2027. The factory built a reference implementation in a weekend. What compressed was upstream of code.

Read the article
Fig. 06

The Henry Ford moment for software

Ford did not invent the car. He invented the assembly line. AI writes code at machine speed; the scarce thing now is the production system around it.

Read the article
Fig. 07

Governance debt: what the EU AI Act delay actually bought you

The high-risk deadline moved to 2 December 2027. If a calendar date was the only reason you were building audit trails, the sixteen months are interest, not runway.

Read the article
Fig. 08

The off switch is not governance

Microsoft ordered engineers off the tool they chose. Uber spent its 2026 AI budget in four months. Cost is the only ungoverned AI risk that reports itself.

Read the article
Fig. 09

The condor Steve Jobs remembered

The famous bicycle for the mind chart has no condor on it. What the 1973 data really shows, and why the rider is the point for AI.

Read the article
Fig. 10

Why Taiga is called Taiga

The boreal forest that survives minus forty, the Kalevala's machine that produced on its own, and the word the Finns never needed. The name, explained.

Read the article
Fig. 11

One spec in. Six systems out.

We gave two coding agents the same frozen spec, three times each. Every system worked. No two matched. They diverged on authentication, dependencies, and how they stored data.

Read the article
Fig. 12

Better AI models haven't written safer code

Two years of flagship model releases barely moved the security pass rate for AI-generated code. Why waiting for a better model is not a security plan.

Read the article
Fig. 13

Ten questions to ask an AI development vendor

Vendor security questionnaires audit the organization. These ten questions audit the delivery itself: provenance, variance, the bar, and the model chain. Built to be pasted into an RFP.

Read the article
Self-test

Would your last AI project pass the gate?

Six questions over 22 checks
For your security team

A detailed system description is available on request.

How to request it
Sample pack

A redacted document set from a real factory run.

Specification, threat model, DPIA, redacted from a real factory run. Requested by email, sent by a person.

Bring the project this article made you think about.

Book a demo