Shift-Left on Revelara

Fewer moving goal posts for more reliable commits

Sun, 16 Aug 2026 09:00:00 -0700

The moment I understood what we had built was not during a benchmark or eval. It was during a commit that took three tries.

I asked an agent to make a change. It finished, staged the work, and tried to commit. The pre-commit hook ran a scan and blocked it on a reliability finding. The agent read the finding, understood it, and fixed it. It tried to commit again, and this time its own fix had introduced a second blocking finding. It read that one, fixed it too, and ran again. This time it passed, and committed the whole change set.

Code Review Is a Memory Problem

Sun, 02 Aug 2026 08:00:00 -0700

I have been building Revelara for a while, and there’s one aspect I’ve had a hard time explaining to people. The easy version is “this is a reliability gate: it catches risky changes before they ship.” It’s easy for people to understand the value, but it’s too small for what it really does. The bigger version kept coming out vague, something about knowledge, memory, and the importance of having it in the developers coding context. Every time I said it out loud it sounded like a vague promise in the worst case, and unconvincing and easily dismissed in the best case. So I usually stick with the things that are easy for me to explain and for people to grok.

Security Shifted Left. Reliability Can Too.

Tue, 28 Jul 2026 08:00:00 -0700

For about a decade, security had the same shape as a punishment. You wrote your code, you opened your pull request, you felt good about your week, and then a scanner you didn’t run and couldn’t see filed a report against you. The findings landed after the fact, in a different tool, owned by a different team, and by the time they reached you the context that produced the code was gone. You were being asked to remember why you wrote a line you’d already forgotten writing.

AI Writes More of Your Code Now. It Also Ships More Reliability Risk.

Sun, 26 Jul 2026 08:00:00 -0700

A 2025 study of 470 pull requests found that AI-generated code shipped roughly 1.7x more issues and about 1.4x more critical defects than human-written code. Nobody serious reads that as “AI code is bad,” and I’m not arguing it either; much of what an agent writes is clean, idiomatic, and correct. The trouble starts when you sit a real workflow on top of that number: volume times defect rate, pointed at the part of the system that hurts most when it breaks.