Poisoning the Safety Net: Attacking AI Code Review Pipelines

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Four months after writing about defense in depth for LLM-assisted development, I went back and tried to attack every layer of my own stack. The obvious attacks are caught by 2026 models. The class isn't closed; the cover stories got better.

Read on brooksmcmillin.com ↗