<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>v-code.ai, Blog</title><description>Field notes on vibe coding: how the tools actually behave, where they help, where they bite, and what to check before you ship.</description><link>https://vcode.q-code.ai/</link><language>en-GB</language><item><title>How to review AI-generated pull requests as a team</title><link>https://vcode.q-code.ai/blog/review-ai-generated-pull-requests-as-a-team/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/review-ai-generated-pull-requests-as-a-team/</guid><description>AI coding for business moves the bottleneck to review. How to structure a team review of AI-generated pull requests, and what to read first.</description><pubDate>Sun, 01 Nov 2026 00:00:00 GMT</pubDate><category>business</category></item><item><title>AI code security and the versions a model invents</title><link>https://vcode.q-code.ai/blog/ai-code-security-versions-a-model-invents/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/ai-code-security-versions-a-model-invents/</guid><description>AI code security fails when a model invents a version number. Why it happens, the measured rates, and how to check versions before you install.</description><pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate><category>risks</category></item><item><title>How AI coding tools handle context window limits</title><link>https://vcode.q-code.ai/blog/ai-coding-tools-handle-context-window-limits/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/ai-coding-tools-handle-context-window-limits/</guid><description>AI coding tools cannot read your whole repo. How selection, compaction and indexing work in Cursor, Claude Code and Copilot, and what it costs you.</description><pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate><category>news</category></item><item><title>How to evaluate AI coding tools for your team</title><link>https://vcode.q-code.ai/blog/evaluate-ai-coding-tools-for-your-team/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/evaluate-ai-coding-tools-for-your-team/</guid><description>How to evaluate AI coding tools for your team: what to test, how to score the output, what to measure afterwards, and how long a trial should run.</description><pubDate>Wed, 30 Sep 2026 00:00:00 GMT</pubDate><category>news</category></item><item><title>What AI slop is, and how to keep it out of your code</title><link>https://vcode.q-code.ai/blog/ai-slop-keep-it-out-of-your-codebase/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/ai-slop-keep-it-out-of-your-codebase/</guid><description>AI slop is low-quality AI output that looks fine and is not. What it is, how it shows up in code, and the checks that keep it out of your repo.</description><pubDate>Mon, 28 Sep 2026 00:00:00 GMT</pubDate><category>risks</category></item><item><title>Who really owns the code an AI writes for you?</title><link>https://vcode.q-code.ai/blog/who-really-owns-code-ai-writes-for-you/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/who-really-owns-code-ai-writes-for-you/</guid><description>Vendors assign you the output, but AI-written code may not be copyrightable. What the terms say, what the US Copyright Office says, and what follows.</description><pubDate>Sat, 26 Sep 2026 00:00:00 GMT</pubDate><category>business</category></item><item><title>Security risks of vibe-coded apps and how to fix them</title><link>https://vcode.q-code.ai/blog/security-risks-vibe-coded-apps-how-to-fix-them/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/security-risks-vibe-coded-apps-how-to-fix-them/</guid><description>Vibe-coded apps fail on access control, exposed secrets and missing baseline defences. The measured evidence, and the controls that reduce the risk.</description><pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate><category>risks</category></item><item><title>When to stop vibe coding and take the wheel yourself</title><link>https://vcode.q-code.ai/blog/stop-vibe-coding-take-the-wheel-yourself/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/stop-vibe-coding-take-the-wheel-yourself/</guid><description>Stop vibe coding when the code holds real users or real data. The five signals, the security evidence behind them, and how to take over.</description><pubDate>Tue, 22 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Testing AI-generated code without writing every test</title><link>https://vcode.q-code.ai/blog/testing-ai-generated-code-without-writing-every-test/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/testing-ai-generated-code-without-writing-every-test/</guid><description>Testing AI-generated code needs checks from outside the model. Spec-first prompts, property-based tests and mutation testing, with the data behind each.</description><pubDate>Sun, 20 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Guardrails that stop an AI agent breaking your app</title><link>https://vcode.q-code.ai/blog/guardrails-stop-ai-agent-breaking-your-app/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/guardrails-stop-ai-agent-breaking-your-app/</guid><description>AI agent guardrails only work in the runtime, not the prompt. Permissions, approvals, environment separation and the limits that actually hold.</description><pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Small iterations beat big rewrites in vibe coding</title><link>https://vcode.q-code.ai/blog/small-iterations-beat-big-rewrites-vibe-coding/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/small-iterations-beat-big-rewrites-vibe-coding/</guid><description>Small iterations beat big rewrites in vibe coding. What agentic pull request data and context rot show, and when a rewrite is still right.</description><pubDate>Wed, 16 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Why AI coding tools invent APIs that do not exist</title><link>https://vcode.q-code.ai/blog/ai-coding-tools-invent-apis-that-do-not-exist/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/ai-coding-tools-invent-apis-that-do-not-exist/</guid><description>AI coding tools invent APIs because they predict tokens rather than look them up. The evidence on how often, and the checks that catch it.</description><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><category>risks</category></item><item><title>When to use an agentic coding tool, not autocomplete</title><link>https://vcode.q-code.ai/blog/agentic-coding-tool-not-autocomplete/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/agentic-coding-tool-not-autocomplete/</guid><description>Use an agentic coding tool for multi-file work you can verify by running it, and an inline assistant when you already know the code you want.</description><pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate><category>tools</category></item><item><title>Is vibe coding the same as no-code? Short answer, no</title><link>https://vcode.q-code.ai/blog/vibe-coding-same-as-no-code/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/vibe-coding-same-as-no-code/</guid><description>No. No-code gives you visual logic you can edit; vibe coding gives you generated source code. What the split means for maintenance and choice.</description><pubDate>Tue, 08 Sep 2026 00:00:00 GMT</pubDate><category>guides</category></item><item><title>What your AI code policy must say on security and IP</title><link>https://vcode.q-code.ai/blog/ai-code-policy-security-and-ip/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/ai-code-policy-security-and-ip/</guid><description>AI code security and ownership in one policy: approved tools, human-authorship records, review thresholds and the checks that belong in CI.</description><pubDate>Sun, 06 Sep 2026 00:00:00 GMT</pubDate><category>business</category></item><item><title>Reading the diff is the review vibe coding lacks</title><link>https://vcode.q-code.ai/blog/reading-diff-review-vibe-coding-lacks/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/reading-diff-review-vibe-coding-lacks/</guid><description>Vibe coding drops the diff read by definition. What the generation-review asymmetry shows, and how to put oversight back without reading every line.</description><pubDate>Sun, 06 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Reading the diff is the habit vibe coding needs</title><link>https://vcode.q-code.ai/blog/reading-the-diff-habit-vibe-coding-needs/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/reading-the-diff-habit-vibe-coding-needs/</guid><description>Vibe coding skips the diff. Why reading every change matters, what code quality data shows, and how to review AI output quickly without waste.</description><pubDate>Sun, 06 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item><item><title>Vibe coding is not no-code, and the gap matters</title><link>https://vcode.q-code.ai/blog/vibe-coding-is-not-no-code-gap-matters/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/vibe-coding-is-not-no-code-gap-matters/</guid><description>Vibe coding and no-code both avoid hand-written code, but only one leaves you with source files. Where the two split, and how to choose.</description><pubDate>Sun, 06 Sep 2026 00:00:00 GMT</pubDate><category>guides</category></item><item><title>How to write a clear prompt for an AI coding tool</title><link>https://vcode.q-code.ai/blog/write-clear-prompt-ai-coding-tool/</link><guid isPermaLink="true">https://vcode.q-code.ai/blog/write-clear-prompt-ai-coding-tool/</guid><description>A clear prompt states the goal, the context, the constraints and one example. How to write prompts for AI coding tools that produce mergeable code.</description><pubDate>Sun, 06 Sep 2026 00:00:00 GMT</pubDate><category>best-practices</category></item></channel></rss>