Chapter 9 - Ownership, security and new ways of working
Module 9: Ownership, security and new ways of working Closing section. Reflection and discussion. No hands-on needed. Leaves attendees with the right mindset to take this back to their team. Cognitive debt of using agents (TODO: write this up) Security is part of ownership — what agents get wrong, what you are responsible for Scope your environments properly — credentials, prod vs dev, worst-case thinking Team guardrails — what to put in place before rolling this out to a team (TODO: write this up) More upfront design — how agentic dev revives the value of thorough specs When not to use agents — learning through doing; knowing when to keep your hands on the keyboard Your own knowledge is the limiting factor — why deep expertise matters more now, not less Common questions — cost, context windows, efficiency, automation ceiling, are engineers obsolete testing again Security is part of ownership Agents are not security-aware by default. They will produce code that looks right and works, but may not be secure. I have seen agents happily suggest long-lived tokens for third-party authentication on public CI/CD pipelines. They will use overly broad IAM permissions, hardcode credentials, or accidentally include .env files in a commit. If you are not paying attention, these things get through. ...