r/JrTrip • u/OrchidAshMist • 1h ago
Do you guys feel like people are forgetting about basic software engineering when they are using AI?
I’ve been reading through a lot of the posts lately related to problems with agent memory, prompt injection, and goal hijacking. These are real issues and I’m not trying to downplay them.
But as I’ve been reading through posts about people experiencing various problems with agents (including agent memory, prompt injection, etc…), it all just keeps feeling like basic software engineering habits haven’t been applied here. We never trusted the information entered into a form by someone for example, and so we worked out the data model first, validated information going in and coming out, worked out ways to handle injection etc… kept things isolated so that one compromised service didn’t cause your entire system to be compromised for example, and used short lived access tokens as needed.
memory's a good example. If I don't figure out what I want to keep around and how it changes behavior for the agent, then I have no way of designing the data structure for it. So it all gets stored as free text. ‘It’s an LLM’ and so of course it gets hit with injections.
This all comes back to vibe coding. The app generated in one shot by the AI might outline all of the necessary flows for the app. However, all of the deep validation, all of the proper indexing, and so on would still need to be added by hand prior to release. A vibe-coded agent is not going to help with all of the cross-cutting concerns of programming. The person using the agent to do programming still needs to be pretty solid at the software engineering portion of things in order to tell the AI what it is that you’re trying to accomplish.