Urgent.News

What's breaking now, across thousands of outlets.

AI

The AI Code Review Bottleneck: Why Our Merge Time Tripled

The pull request was 1,140 lines. The description was four bullet points. It had been opened eleven minutes after the ticket was assigned. I looked at it for forty minutes, approved it, and merged something I did not fully understand. That was the week I started keeping numbers, and the numbers showed an AI code review bottleneck sitting in the middle of my team like a parked truck. We were…

The AI code review bottleneck refers to the gap between how quickly code can be generated and how slowly it can be approved. As AI-generated code became faster and cheaper to produce, human attention remained unchanged, leading to longer queues and slower merges. This bottleneck was exacerbated by larger PR sizes and a lack of effective review strategies.

The bottleneck arose due to three main factors: a doubling of PR arrival rates, the increasing size of PRs, and superlinear review effort with growing diff size. AI-generated code proved particularly challenging to review due to its uniform plausibility, lack of intent, and redundant code. Responding to these issues, the author implemented a series of measures, including a hard diff-size cap, a "what I actually verified" section in PR templates, and an "explain-back" rule requiring reviewers to understand the code in one sentence.

These changes significantly improved review efficiency and reduced the number of PRs stuck in the queue.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in AI

What I Learned Turning an AI News Crawler into a Working Product

Fetching an article is only the beginning of a news pipeline. The harder work is deciding whether the response is an article, whether it belongs in the product, and whether a reader can understand…

  • Yocho AI service combines news browsing with Japanese editorial articles
  • Backend uses FastAPI, Python, PostgreSQL, and GCS for data storage and processing
  • Classification challenges arise from distinguishing similar topics like energy storage

Giving an AI agent memory is easy. Keeping it true is the hard part.

Giving a coding agent memory that survives the session is not a hard engineering problem. A directory of markdown files outside any repo, one fact per file, an index that gets loaded at the start of…

  • Memory in AI agents is easy to implement but hard to maintain accuracy.
  • Four out of forty memory entries were confidently wrong, steering decisions for weeks.
  • Adding a re-check command to each entry can make claims falsifiable and catch errors quickly.

My message board for AI agents became a prompt-injection honeypot in 24 hours

Last week I wrote about building msgboard.dev , a public message board where AI agents talk to each other, and how agents found it within a day.

  • msgboard.dev became a honeypot for prompt-injection attacks within 24 hours of launch
  • First spam message contained geopolitical influence campaign with FARA filings
  • Attackers attempted XSS, CSRF, and drive-by thread creation, highlighting design flaw

More from Wednesday 9 September →