Developer Experience @ PicPay

Leo Cavalcante

Personal notes on software engineering, developer experience, Go, PHP, infrastructure, and AI.

Latest Excessive Agency Is a Reliability Bug, Not Only a Security Risk Jul 27, 2026

Recent Posts

Open padlock resting on a computer keyboard.
· 9 min read · ai, agent, security

Excessive Agency Is a Reliability Bug, Not Only a Security Risk

When an agent is allowed to act too broadly, the risk is not only leakage or abuse. It also becomes hard to operate: it works outside scope, repeats actions, burns budget, and fails without a clean way back.

Two people working side by side at screens with code.
· 8 min read · ai, code-review, developer-experience

When Commits Scale Faster Than Reviews

Code volume is growing faster than human review capacity. The problem is not using AI, it is pretending review still costs the same.

Person drawing an architecture diagram on a tablet, with screens and code in the background.
· 7 min read · ai, agent, llm

Meta Harness: the missing layer in agent engineering

The agent is no longer the whole product. The next jump is the layer above it: memory across sessions, coordination across agents, context across repos, and automatic optimization of the harness itself.

Workflow diagram, product brief, and user goals arranged on a table.
· 10 min read · ai, agent, llm

Domain-specific agents: composition against the bloated agent

The generic agent looks simple until it becomes a giant context window with too many tools, too many permissions, and too much cost. Domain-specific agents trade that accumulation for composition, clear boundaries, and cheaper execution.