AI Red Team Engineering notes, research references, and field notes on AI systems, responsible AI, governance, and compliance.
Global search

Search AI Red Team

Search across the complete knowledge base.

Enter at least two characters to begin.
↑↓ select Enter open Browse the full research archive
AI Engineer · July 24, 2025

Don’t get one-shotted: Use AI to test, review, merge, and deploy code — Tomas Reimers, Graphite

video AI Engineering
Don’t get one-shotted: Use AI to test, review, merge, and deploy code — Tomas Reimers, Graphite video thumbnail
Why it matters

AI Engineer session on Don’t get one-shotted: Use AI to test, review, merge, and deploy code, presented by Tomas Reimers, Graphite. It adds practical context for how teams are building and operating AI systems in production.

My takeaway: Don’t get one-shotted: Use AI to test, review, merge, and deploy code — Tomas Reimers, Graphite is an enterprise-adoption signal. The practical read is to watch how deployment scale, data boundaries, operational ownership, and platform controls change as AI moves out of experiments.
Keep exploring

More curated notes connected through AI Engineering.

Google Cloud Security Blog · tool

Now in preview: Find and fix software vulnerabilities with CodeMender

Google opened a preview of CodeMender, an AI code-security agent delivered through Gemini Enterprise Agent Platform and AI Threat Defense. It is designed to inspect code, identify and validate potentially exploitable defects, and produce targeted fixes, with Google’s specialized Gemini 3.5 Flash Cyber model initially restricted to governments and trusted partners.

AWS Security Blog · guide

Transforming Bedrock Guardrails events into OCSF with CloudWatch

AWS provides an implementation guide for a Lambda pipeline that converts Bedrock Guardrails intervention logs into OCSF Detection Findings in the CloudWatch unified data store. It includes field mapping and queries that correlate guardrail events with identity and network activity.

Trail of Bits Blog · analysis

Auditing in the age of (good enough) AI

Trail of Bits describes an audit methodology using agents to build a decompiler, static analysis and Lean models before reviewing the Miden VM. Public code and regression checks support security findings and 95 machine-checked proofs, with people reviewing what the theorems establish.