▮ agenticcli /blog
From the team building ShipGuard.
Security patterns, release discipline, and hard-won lessons from shipping software with AI coding agents.
- shipguard · secrets8 min · jun 2026
Claude Code hardcoded a Stripe key. Here’s how it happens.
AI coding agents hardcode secrets because the literal value is the shortest path to a passing test. Here is the exact pattern and how to gate it.
read article → - shipguard · auth6 min · jun 2026coming soon
The admin route your agent forgot to protect.
When an agent scaffolds a new route it knows nothing about your existing auth middleware. These are the five patterns we catch before they ship.
- agenticcli5 min · may 2026coming soon
Why release gates belong in the terminal, not the cloud.
A cloud scanner that uploads your code to run checks defeats the point. Local-first, exit-code-driven gates work with agents, not against them.