CodeWithLeo

The pipeline + checkpointing framing resonates. The "ask me" tab needing love is a real pain point — human-in-the-loop approval gates work best when they're surfaced proactively, not buried.

The interesting lesson here isn't really “AI generated insecure code.” We've had insecure code for decades. The bigger issue is that AI makes it much cheaper to introduce changes, while the cost of reviewing those changes hasn't gone down nearly as much.

The bottleneck is moving from code generation to code verification.

We run asyncpg directly against Neon Postgres without PgBouncer — works well for low-to-medium concurrency. Neon's serverless connection pooling handles a lot of what PgBouncer would, so the overhead didn't seem worth it for our use case.