I finally understood why anti-AI luddites so fiercely deny generated code. The reason is exactly the one that made them deny automated tests a generation ago.<\/p>\n
I understood this not from an article about AI, but from my own memory of people who, twenty years ago, used the exact same intonation to explain why you cannot trust automation but can trust your eyes.<\/p>\n
<\/p>\n
You have an application. It does not matter who wrote it: you, your colleagues, a model, or somebody who downloaded it from the internet. A healthy engineer takes it and covers it with tests.<\/p>\n
Emphasis: you cover the application, not the code. With functional and non-functional end-to-end tests. You simulate the conditions in which the application will run in production: under the corresponding load, with realistic data volumes, and you pull its levers with real operational tasks.<\/p>\n
Non-functional tests are a separate class: load, resilience, security, data volumes, and other non-functional requirements from the customer and desired operating conditions. Not "does the form open," but "what happens to the system under real pressure."<\/p>\n
If the application withstands all of this, it is fit for operation. The logic is simple: if you simulated operation on a staging environment faithfully enough, the application will perform the same functions no worse in real operation. This is not faith. This is what the entire discipline of testing has stood on for decades.<\/p>\n
"Pfft, nonsense, neuroslop, this guarantees nothing. You have to read the code with your eyes."<\/p>\n
Let us break this position down on its merits, because it deserves the breakdown \u2014 as any claim that looks sound but falls apart at first touch deserves.<\/p>\n
You took a vibe-coded application and put it in an environment that is a copy of production. You loaded it with data that is a copy of production. You applied load that is a copy of production. You exercised every function exactly the way real users exercise it: with synthetic traffic or replayed recordings from real production logs.<\/p>\n
And you saw: everything works. Memory does not leak. Keys do not leak to third parties. The database does not deadlock. Disk space does not run out. The network does not collapse. Vulnerability scanners show zero.<\/p>\n
After all that, they tell you none of this guarantees anything, and you absolutely must read every line with your eyes.<\/p>\n
One question: what exactly will reading lines with your eyes add to a staging environment that has already reproduced production in full? A human reading a diff will not see a memory leak under load \u2014 the profiler on the staging environment sees it. Will not see a deadlock on realistic data volumes \u2014 the load test catches it. Will not find a vulnerability faster than a scanner. The engineer's eye checks the author's intent for a line. The staging environment checks the system's behavior. In production, behavior works, not intent.<\/p>\n
I started recalling where I had seen this way of arguing before. And I remembered. Wherever automated tests were being introduced.<\/p>\n
The argument "for" was then word-for-word the same as the argument "for AI" now: you can write without staring at every line, and verify the result end-to-end instead of reading code by eye. Trust verified behavior, not manual inspection.<\/p>\n
The argument "against" is mirror-identical, with the sign flipped: "the machine does not understand meaning," "this guarantees nothing," "a real engineer must walk the code by hand." Swap the word "automated test" for "AI" and you cannot tell a 2008 speech from a 2026 one.<\/p>\n
Modern anti-AI luddites are exactly the same people who once resisted automated tests in favor of massive time sinks in manual review. Same role, same logic, same arguments that lost twenty years ago. History has already issued a verdict in this dispute \u2014 there is just different stage dressing now.<\/p>\n
From this follows a practical conclusion that will outlive the entire debate.<\/p>\n
If you provide AI coding with a normal QA process \u2014 the staging environment described above \u2014 a vibe-coded application works identically to one written by hand. Not "almost," not "with caveats." Identically in observable behavior, because what is being checked is exactly behavior under production conditions.<\/p>\n
There is a live illustration of this thesis. A founder single-handedly rewrote a decade-old codebase on AI infrastructure: about six months without production incidents, 10\u201315 deploys a day. This is someone else's case, not my personal experience \u2014 but it shows exactly what is at stake: AI code plus a process equals reliability. Reliability comes from the process, not from the origin of the lines.<\/p>\n
Manual line-by-line review of AI code is isomorphic to the old resistance to automated tests: a control ritual that feels like safety but does not produce it. Safety is produced by a behavior-checking loop. An eye over a diff does not produce it.<\/p>\n
The entire catch is that "just provide normal QA" is itself the work. A staging copy of production, synthetic load based on real logs, non-functional tests, quality gates, unified acceptance rules \u2014 this is not something that boots itself just because you are against luddites.<\/p>\n
I built this loop with my own hands. At Korus \u2014 scaling automated tests on PHPUnit and Cypress, growing release reliability, formalizing quality control processes and quality gates at the department level. At UMI, the tracker had several thousand bugs hanging open at the start, with 5\u201310 new ones arriving daily; after introducing QA practices, systematic bug tracking, unified acceptance rules, and CI\/CD, release quality and stability improved concretely.<\/p>\n
That is the skill that turns vibe-coded into production-grade: not reading lines, but building an acceptance loop you can trust.<\/p>\n
So the dispute over "reading code with your eyes" has been closed for a long time \u2014 it was closed back on automated tests. All that remains is to build the loop, and if you need someone who can assemble this loop in practice \u2014 you know where to find me.<\/p>\n","protected":false},"excerpt":{"rendered":"
The argument that AI-generated code is unsafe without manual review is the same argument that lost to automated testing twenty years ago.<\/p>\n","protected":false},"author":0,"featured_media":217,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-218","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t