Nobody is reviewing this code. Including me.

Since March, I've stopped reading the code my agents write for my side projects. Not skimming it faster, not reviewing it differently. Stopped. I don't read the diff and think "looks good." I check whether the thing works.

That happens through a verification stack, not a pair of eyes: Playwright driving the browser, PHPUnit on the units, PHPStan catching what the types would catch, a security scanner watching for injection, leaked secrets, and auth holes. Then, at the end, a human actually clicking through the app.

The old job was reading code and saying LGTM. The new job is building a system that catches the agent when it lies to you.

Here's the part that should worry you. The pull requests will be too large, the pace too fast, and the human in the loop will have quietly turned into a rubber stamp. Nobody decides to stop reviewing. It just gets away from you, one "this one's simple, I'll just approve it" at a time, until the approval means nothing.

And when it breaks, the agent doesn't answer for it. You do. The liability sits with whoever clicked approve, not whoever generated the diff.

Build the verification stack now. Lead from where you are. Nobody is coming to build it for you.


Originally posted on LinkedIn: "Nobody Is Reviewing This Code"