Skip to content

root / tags / gates-humains

#gates humains

2 fiches

Quality & Security Auto-verified translation

Code review dans le SDLC augmenté : l'anneau de contraintes autour des agents

Episode « Phase 5 · Review » of SFEIR's series on the augmented SDLC, published **the same day** as Addy Osmani's LinkedIn post, which it translates into a phase specification. Thesis: **quality has changed address** — it is no longer read in the code (agents produce more of it than anyone can review) but in **the ring of constraints surrounding the agent**. Osmani's ring (seven dimensions — correctness, security, performance, accessibility, maintainability, **economic efficiency**, **understandability** — linked by the **back-pressure** rule: "a loop is granted only the autonomy one knows how to verify cheaply and reliably, not an inch more") is redrawn, translated, and attached to phase 5 of SFEIR's 11-phase cycle. The structuring corollary: **the bottleneck was never generation, it is verification** — "generation is a wide mouth, verification a narrow neck; speeding up the mouth thickens the pile at the neck." **The most interesting design decision is a cycle-architecture choice**: Review is deliberately **outside the three human gates** (Define, Plan, Ship), because putting the gate on Review would amount to placing human attention — a finite resource — as the checkpoint of a generation capacity that, itself, scales: "you would have built a pipeline whose maximum throughput is the number of diffs a senior can read before the end of the day." Hence the split: **Review instruments, Ship decides** — Review delivers an *opposable body of evidence*, Ship decides on the evidence, not on the full diff. A position taken against Monperrus (whose diagnosis SFEIR keeps — human inspection of every diff does not withstand agentic speed — but whose conclusion it rejects: acceptance cannot be delegated). The named trap is **circular validation** (the agent that writes the code writes the tests that validate it: "you have built a mirror, not a ring"), with five countermeasures borrowed from Anthropic (independent gates in separate context windows, deterministic + agentic never substituting for one another, shadow mode, risk-based tiering, logging to the SIEM) and Compare the Market's warning (**AST graph ~70% vs vector RAG ~58%**, RAG performing *worse than no context at all*). The firm's own extension is **the ratchet**: "every escape becomes a constraint" — a defect that has crossed the ring is closed back up *inside the ring* (test, lint rule, rubric, harness guardrail) at Compound-1, "the only asset in the chain that appreciates while models depreciate" (an internal, unauditable measure: **− 30% fewer correction iterations after ten cycles**). It closes by reformulating the question: "is this code good?" has become unanswerable; what remains is **"what does my system refuse to let through?"**

#ring of constraints#constraints around agents#Review phase

SFEIR (voix éditoriale du cabinet, article non signé individuellement) — construit sur Addy Osmani (Google) ; cite Martin Monperrus · Paula Hingel (Augment Code) · DORA/Google Cloud · Jason Clinton (Anthropic) · l'équipe Engineering de Compare the Market

Quality & Security Auto-verified translation

Anthropic sécurise un SDLC où l'IA écrit 80 % du code : le cycle redevient le socle

SFEIR decryption (firm voice) of Jason Clinton's (Deputy CISO, Anthropic) after-action report published five days earlier — already logged in [[clinton-anthropic-secure-ai-native-sdlc-2026-07-21]]. **The added value is not in the facts, it is in the thesis that rereads them**: if Anthropic's controls hold, it is because there exists **a cycle with named stages to hang them on** — "the SDLC is the foundation, not the formality." Demonstration through a rereading of the mapping (**PSR at Plan, CLAUDE.md + egress allowlist at Code, review agents at Test, continuous DAST at Deploy, triage + SIEM routing at Monitor**) followed by a **four-part anaphora**: (1) *without an SDLC, productivity gains do not arrive* — Clinton cites **Amdahl**: multiplying code volume by 8 multiplies nothing if review stays sequential and human, and Anthropic did not gain by distributing agents but by **identifying the stage that was blocking (Test) and rebuilding it** — "you do not optimize a bottleneck you have not mapped" (a callback to the **mirror effect** from DORA 2025); (2) *without an SDLC, security has no anchor point* — a **gate is by definition a control placed between two stages**, and Clinton's three threats are addressed at distinct moments; (3) *without an SDLC, no **FinOps token** policy can be formulated* — agentic scanning is billed on consumption and grows with code throughput, so **risk-based tiering IS the FinOps policy** (it decides where three agent passes are paid for and where a SAST suffices), otherwise "token spend is not steered, it is observed at month-end"; (4) *without an SDLC, there is nothing to measure* — the indicators (16% → 54% of PRs commented on, one third of past incidents intercepted) exist only because there are stages where a counter can be placed, absent which one produces only **usage figures** (licenses, tokens) silent on quality and risk. Two strong points outside the thesis: the reading of the **incident agent-à-agent** ("a security perimeter that rests on an instruction in a prompt is not a perimeter"; **an agent's access to other agents is part of its attack surface**) and an **explicit methodological caveat** — Anthropic figures about Anthropic, unaudited, published by the vendor of the model described, in the context of a young codebase with no mainframe: **what transposes is the method, not the figures**.

#SDLC#AI-native SDLC#development cycle

SFEIR (voix éditoriale du cabinet, article non signé individuellement) — commentaire de Jason Clinton (Deputy CISO, Anthropic)