One line in Codecov's CI uploader sent every environment variable to a host that was not
there before, for sixty-five days, and review never saw it — the whole change was an authority
change. What it takes to make that part of a review mechanical, and why a sandbox's refusal
arrives too late to help.
A type checker only watches code written in its own language. lex-os assumes nobody is
watching at all — so the same trust grant is enforced twice: once by the compiler, once by a
kernel-level wall that doesn't care what produced the command.
Every agent that executes code is implicitly trusted with everything that code can reach. Lex
makes that trust explicit — declared upfront, checked before execution, refused if it exceeds the
grant.
Trial and error in public, at a pace that wasn't possible before. Focus was the price of
expensive engineering — agentic development lets us spread the bets, run ideas almost in
parallel, and let the evidence decide where the focus goes.
A case for tools designed for AI, not adapted from humans. The founding essay behind Lex:
replace comprehension with verification, human-readable artifacts with machine-checkable
specifications. Comprehension was a strategy — it is not the only one.