AI Coding

As we dug deeper, however, a different problem emerged. No one on the team could explain why certain design decisions had been made, or how different parts of the system were supposed to work together. The code might have been messy, but the deeper issue was that the team’s shared understanding, the theory of the system, had quietly fragmented. They had also failed to write down or communicate the rationale behind decisions. They had accumulated cognitive and intent debt faster than technical debt, and it had paralyzed them.

Technical debt lives in your code. Cognitive debt lives in your head. Intent debt lives in the artifacts you never wrote - the goals, constraints and rationale that explain why the system is the way it is. It’s the one kind of debt your agents can’t pay down for you, and the one agentic engineering makes most expensive.

SymJack is a new attack technique targeting AI coding agents: a booby-trapped repository to trick your AI coding assistant into overwriting its own configuration through a disguised file copy, then run attacker code on the next restart. This is one technique that works against the whole category, don’t treat it as six separate bugs.

The era of fixed-fee AI spending just ended. If you’re a CTO or engineering leader and you haven’t noticed yet, you will very soon — probably around September 2026 when some budget alerts start firing.