Git blame can’t see your AI
Why the missing layer in version control isn’t who committed a line — it’s which model wrote it, from what prompt, and whether anyone reviewed it.
Thoughts & Tutorials
Notes on AI code provenance, the EU AI Act, and building a self-hosted governance tool in the open.
Why the missing layer in version control isn’t who committed a line — it’s which model wrote it, from what prompt, and whether anyone reviewed it.
Capture layer, request-UUID correlation, time correlation, content similarity, and tool fingerprint — how we score every record 0.0–1.0.
Anthropic tool_use, OpenAI’s apply_patch DSL, and Gemini functionCall — and how the proxy resolves whether an edit actually landed.
Articles 11, 12, and 14 in plain language, and the audit trail you can generate automatically at the point of generation.
Self-hosted isn’t a tier — it’s the product. The argument for keeping prompts and code on infrastructure you control.
Classifying requests as simple / standard / complex, downgrading the easy ones, and recording the dollar saved on every record.