> Ditto for stuff that's simple. A JSON endpoint that runs a SQL query and returns some JSON? If it works and a glance at the tests looks OK then I trust my agents wrote it properly.

That is *exactly* the sort of area I *wouldn’t* blindly trust AI, there’s a huge security boundary there. What if the AI is doing string concatenation with user-provided data???

Once you've seen the AI not make mistakes like that a few dozen times you start to trust it not to mess that up in the future.

We're pretty far past this if you're using anything close to the sota models.

But you could be defensive with a security checklist in agents.md and have adversarial review, if you wanted.