Urgent.News

What's breaking now, across thousands of outlets.

Tech

Stop Rubber-Stamping "LGTM": Why Pull Requests Are Operational Contracts (Especially with AI Code)

Be honest: when was the last time you opened a 400-line PR, scrolled through a sea of clean-looking green diffs, thought "looks fine to me" , typed LGTM , and hit merge? I've been guilty of it. Most of us have. Especially now, with AI coding assistants churning out syntactically plausible code in seconds, the temptation to rubber-stamp pull requests has skyrocketed. The formatting is neat, the…

Many engineers find themselves routinely approving pull requests with minimal scrutiny, especially when AI assistants quickly produce syntactically correct code. The temptation to simply click "LGTM" (Looks Good To Me) and merge is strong, particularly when the code appears clean and passes unit tests. However, this mentality can lead to serious problems, as a single unhandled edge case can cause a significant production outage.

When a critical issue arises, the postmortem investigation becomes focused solely on the individual who approved the code for deployment. Senior leadership and Site Reliability Engineers (SREs) will ask, "Who reviewed and approved this to go live?" Every approval is a legally binding signature, as it represents a sworn claim: "I have thoroughly examined this architecture, understand its potential failure modes, and am prepared to defend this code at any hour, including 3:00 AM."

AI-powered code generation has made the creation of code nearly instantaneous and virtually cost-free. Therefore, the scarcity of raw code output has vanished. Consequently, code review and architectural verification have become the most critical and accountable actions in the software development process. If we continue to treat pull requests as mere rubber stamps, we risk turning our code repositories into unmanageable messes.

On the other hand, if we treat them as contracts, we can ensure system integrity and foster genuine engineering trust.

To avoid falling into this trap, I recommend a simple pre-approval test for each pull request, particularly those generated by AI tools: Before clicking "Approve," ask yourself aloud, "If this code were to break production tomorrow, what would be my documented rationale for allowing it to ship?" If you cannot provide a clear and defensible answer, you have not yet completed your review process.

I have compiled a series of visual, one-page blueprints outlining blast radius, distributed boundaries, and human engineering ownership to help teams navigate this challenge. These blueprints are featured in my new book, *The Unshakeable Developer: Why AI Won't Replace True Software Engineers*. I encourage you to share your team's experiences with code reviews and any strategies you have employed to combat review fatigue in the age of AI-generated code.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

The Cisco FMC Authentication Bypass Shows Why Management Planes Are the Real Perimeter

The Cisco FMC Authentication Bypass Shows Why Management Planes Are the Real Perimeter Cisco Secure Firewall Management Center (FMC) is the console that pushes policy to every managed firewall in a…

  • Cisco FMC Authentication Bypass vulnerability CVE-2026-20079 rated 10.0
  • Active exploitation confirmed by Cisco Talos on 9 September 2026
  • Three intrusion clusters identified: JSP web shell, vulnerability chaining, ransomware deployment

Integrity-OS: Promise --> Proof

Integrity-OS: Promise → Proof This is a submission for the Sanity Challenge, Path Two: Vibe-Code Something Strange What I Built Integrity-OS is an AI-native accountability system built around a simple…

Thumbs Up with a Twist - Correction and Smoothing of Grip

📝 Originally published (in Japanese) at forge.workstyle.tech . Introduction to the Fifth Article in the Series This is the fifth article in a series on creating VRM animations from live-action…

  • Define thumb position as 18mm from index finger's middle towards palm
  • Smooth gate over time to eliminate spikes and fill gaps
  • Apply gate to correct hand pose for accurate thumb movement

Building a Temporary Message Sharing API with NestJS, PostgreSQL, Prisma & Redis

I recently built a temporary message-sharing API from scratch using NestJS, PostgreSQL, Prisma and Redis . The idea is simple: Create a message, generate a short code, share it, and let the message…

  • Built using NestJS, PostgreSQL, Prisma, and Redis
  • Allows configurable message rules like length and expiration
  • Implements caching with Redis and rate limiting with @nestjs/throttler

Integrity-OS: Promise Proof

Integrity-OS: Promise → Proof This is a submission for the Sanity Challenge, Path Two: Vibe-Code Something Strange What I Built Integrity-OS is an AI-native accountability system built around a simple…

  • Integrity-OS tracks promises through evidence
  • Promises broken: 500 students promised, 312 verified
  • AI accountability agent available for exploration

More from Saturday 19 September →