INNOQ Technology Lunch: Agentic Software & Security 👉 01 Apr 12:15

Focus

Agentic Software Engineering

AI is changing the way we build software. Agentic Software Engineering takes it further. Instead of applying AI to isolated steps, specialized agents handle distinct parts of the software lifecycle, such as planning, implementation, testing or documentation. These agents follow defined roles and are coordinated within structured workflows. Engineers set goals and constraints, manage agent interactions and review results. This creates a new kind of collaboration between humans and machines, shifting the focus toward quality, speed and scalability.

KI-Agenten einsperren

Sandboxen und Prompt Injection

REST Beats MCP

Instead of using dedicated APIs, agents can operate existing web applications directly. Like humans, they rely on the most consistent implementation of hypermedia and benefit from existing context, validation, and access controls. Using an expense report as an example, I show how agents can automate complex, context-dependent tasks—without having to implement new APIs.

Spec-Driven Development is Domain-Driven Design’s Impatient Cousin

Why BMAD won’t save you

AI News

Wachstum bis zum Blackout. Das große Stühlerücken. Die Agents.md auf dem Prüfstand.

Agents good in the end?

Software development consists of a constant chain of trade-offs. As long as I’ve been building systems, there have always been things you don’t do despite wanting to do them. But now, with agents, we can fulfill all our dreams and finally build everything we always wanted and had the feeling we were missing. Spoiler alert: we shouldn’t do that.

Understanding AI Coding Patterns Through Cognitive Load Theory

Developing with AI through the cognitive Lens

Neuland reloaded

When Angela Merkel said in 2013 that the internet is ‘Neuland’ (uncharted territory) for all of us, the amusement online was considerable. Viewed from some temporal and substantive distance, one can now recognize a perspective from which she was indeed correct.

I sandboxed my coding agents. Now I control their network.

I want my AI coding agents to work independently, but I don’t want them to have unrestricted access to the internet. In this post, I describe how I routed all network traffic from my development sandbox through a strict proxy allowlist, allowing only a small set of explicitly approved domains. This setup finally gave me enough confidence to loosen the guardrails without constantly staying in the loop.

From Vibe Coder to Code Owner

Spec-Driven Architecture: When Agents Build, Architecture Must Speak

Spec-Driven Development gives agents a clear foundation for implementation. What it doesn’t solve is how a portfolio of systems stays coherent. Spec-Driven Architecture applies the same principle at the architecture level, using contracts as versioned boundaries and guarantees—enforceable in agentic workflows and in the CI/CD pipeline.

Ein Überblick der AI-assistierten Softwareentwicklung in 2026

Birgitta Boeckeler (ThoughtWorks), Heinrich Hartmann (Zalando) und Sven Johann haben sich über den aktuellen Status der AI-assisted Software Entwicklung unterhalten: was ist wirklich Wichtiges in 2025 passiert? Welche stabilen Muster können wir ableiten? Was gibt Orientierung und Einordnung? Und natürlich ein paar Einblicke in den Future of Software Engineering Retreat in Utah an dem Birgitta teilgenommen hat. Die Unterhaltung gibt es natürlich auch als Podcast. Dieser Artikel ist aber eine menschlich kuratierte Zusammenfassung.

Über AI-Einsatz in verschiedenen Coding-Situationen

Meine Interpretationen zur Developer Productivity Study der Stanford University

Let’s Not Normalize Insecure AI Assistants

AI assistants like OpenClaw promise convenience, autonomy, and increasingly personalized help. But beneath that promise lies an architecture that quietly combines private data, internet access, and exposure to untrusted content—the lethal trifecta of security risk. Sandboxing and physical isolation help, but they don’t address the core problem. As we add more capabilities, the potential blast radius only grows. This post is a case for slowing down, questioning defaults, and refusing to normalize insecure architectures.

What to Do While the AI Is Thinking

AI can write code while we wait — but that doesn’t mean we suddenly have free time. Whether we should think, multitask, review, or rest depends on what kind of work we are doing.

AI and Elaboration: Which Coding Patterns Build Understanding?

Developing with AI through the cognitive Lens

Fetch-Tools vs. Browser-Rendering in Agenten-Setups

„Eine URL abrufen“ klingt trivial, kann aber innerhalb eines Agenten schnell chaotisch werden. Ein Teil der Verwirrung entsteht durch Dokumentation, die nicht sauber trennt, was die einzelnen Web-Tools eigentlich leisten.

I sandboxed my coding agents. You should too.

LLM coding agents are extremely powerful because they can run programs on our computers using our permissions. However, this same power also makes us very vulnerable. It only takes one mistake or one prompt injection to compromise the whole system.

Speed vs. Skill

Developing with AI through the cognitive Lens

Context Engineering: Managing AI-Generated Code Complexity

AI tools make developers more productive at writing code, but can overwhelm code reviewers with massive changes. Learn practical strategies for managing context in AI-assisted development to keep your code comprehensible, your reviews manageable, and your team’s productivity genuinely improved. Small scope was always good practice—with AI, it’s essential.

Swiss Army Knife for Salesforce: LLM with In-Memory Database

Large Language Models (LLMs) struggle with transforming large datasets, particularly when performing aggregations that require calculations - essentially anything where you’d normally use GROUP BY or ORDER BY in SQL. But what if we need to retrieve extensive data from a system and process it with an LLM, but only have an API with limited functionality available? In this blog post, I present a solution I’ve implemented and tested.

AI — Behind the Buzzword Garbage

First Agile, Then Agentic

Agentic AI is supposed to accelerate software development. But new technologies can only reach their full potential when organizations adapt their structure, processes, and culture. Most organizations today are not yet able to truly benefit from faster software development. The prerequisite for this are the capabilities shaped by the agile and DevOps movements.

Das Versprechen der Agenten

Mit agentischen KI-Systemen wird uns eine völlig neue Welt versprochen. Was ist eigentlich die Natur dieser Systeme und was bedeutet das für die Art und Weise, wie wir mit ihnen umgehen werden? Wir gehen der Frage nach, ob wir das alles geschenkt bekommen, oder ob wir uns dafür noch anstrengen müssen.

Agenten - Kreise - Firmen

Wie der Kreislauf mit agentischen Systemen die Firmen der Zukunft formen wird

Wertschöpfung in Zeiten agentischer KI-Systeme

Wer nicht unter einem Felsen haust, beobachtet derzeit, wie die Vision der agentischen KI-Systeme von allen großen KI-Herstellern verfolgt und propagiert wird. Noch ist es nicht so weit. Wenn wir den Trend der letzten drei Jahre in die Zukunft fortschreiben, scheint das Versprechen Realität werden zu können. Das macht ein komisches Gefühl in der Magengrube. In diesem Blogpost stelle ich Ihnen ein Schema vor, in das ich die Entwicklungen einordne, um Struktur in die überwältigende Flut zu bekommen.

Agentic Software Modernization: Back to the Roots

iSAQB® Software Architecture Forum 2026 / 14:45 - 15:45

Code wird billig, Architektur entscheidend.

iSAQB® Software Architecture Forum 2026 / 09:15 - 10:00

Slop oder Top: Von Vibe Coding zu AI Aided Software Engineering

bettercode() GenAI Summit / 11:15 - 12:00

Agentic Coding in the Wild: Wie schlägt sich Agentic Coding in der Praxis?

Java User Group CH – Luzern / 18:15 - 19:15

Agentic Coding in the Wild: Wie schlägt sich Agentic Coding in der Praxis?

Java User Group CH – Basel / 18:15 - 19:15

From Vibe Coder to Code Owner

Agentic Software Engineering Night Berlin / 18:30 - 21:30

No Constrain, No Gain: Structure for the Agent, Clarity for the Human, Flexibility for the Business

Agentic Software Engineering Night Berlin / 20:00 - 20:45

KI- und MCP-Security

Agentic Software Engineering Night Hamburg / 19:00 - 19:45

Der Job verändert sich. Ich auch. Und das ist okay.

Agentic Software Engineering Night Hamburg / 20:00 - 20:45

Agentic Software & Security: Wer kontrolliert eigentlich wen?

INNOQ Technology Lunch (April) / 12:15 - 13:00

IT-Security bei INNOQ: Sichere Software beginnt mit durchdachter Architektur

Neu: Agentic Engineering Accelerator Programm

Jetzt anmelden: INNOQ Technology Day 2025

Neues Training: Agentic Software Engineering

Agentic Software Engineering

Designing software architectures for AI and ML systems

iSAQB® Training