Field notes on AI coding agents: the failure modes they introduce, and the disciplines that keep them out of your repo.
Your coding agent did not choose a risky dependency. It invented one.