The answer to AI is engineering

In a talk at AI DevCon New York, Geoffrey Huntley argues that responding to the recent wave of security incidents calls for engineering rather than more AI, using Nix overlays to patch software such as git and OpenSSL from a single source of truth. He describes using devenv to generate developer laptops, CI/CD, agent sandboxes and production Docker images, and an AGENTS.md reminder trick to back out temporary patches. A bonus section covers running agent loops as root only in throwaway Nix sandboxes, back pressure through hooks and static analysis, and property-based testing with Bombadil and Hegel.