Notes on code review & security

AI assistants made writing code cheap. They did not make reviewing it cheap. What changes about application security when most of your diff was generated — and what a team should actually do about it.

For teams deploying several times a day, most escaped defects don't come from moving fast — they come from checks that quietly became optional. Five practices that hold up under deadline pressure.

We ran Patchlight through Martian's open-source Code Review Bench — 50 real PRs, 137 human-verified findings, one judge for every tool. Here are the numbers, the methodology, and where we're strong.