The latest articles on DEV Community by Gabriel Rubens (@gabrielrumiranda). https://dev.to/gabrielrumiranda https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F515720%2F44cf1d28-5fad-421f-8f44-f9fef757d324.jpeg https://dev.to/gabrielrumiranda en Gabriel Rubens Tue, 19 May 2026 22:25:42 +0000 https://dev.to/gabrielrumiranda/harness-engineering-the-new-software-in-the-ai-era-568n https://dev.to/gabrielrumiranda/harness-engineering-the-new-software-in-the-ai-era-568n <p>With the massive AI boom we are experiencing, I started writing an article about testing. In the midst of my research, I began studying <strong>Harness Engineering</strong>, which sparked a fundamental question: <em>could the Harness be the "new software" in the age of AI?</em></p> <h2> But What Exactly <em>Is</em> Software? </h2> <p>First, we need to align on what software actually means. For giants of Software Engineering like Pressman and Sommerville, software is far more than just code or executables. Software is a comprehensive suite of programs, data, procedures, and—crucially—all the logic and documentation that allow a system to evolve over time without collapsing under its own weight.</p> <p>In Extreme Programming (XP), Kent Beck pushed this concept even further through TDD (Test-Driven Development). Under this paradigm, testing ceased to be just "another tedious step" in the delivery pipeline and became design and software in its purest form. It contains logic, requires maintenance, and drives the entire development process. In other words, it demands the exact same attention and quality standards as the application's production code.</p> <h2> Harness Engineering </h2> <p>Now, we are witnessing the rise of <strong>Harness Engineering</strong>, a discipline that goes way beyond traditional testing. It represents a comprehensive control environment explicitly architected for AI agents. If an AI model is a high-powered engine, the Harness is the engineering that steers it. </p> <p>It is built upon three main pillars:</p> <ul> <li> <strong>Architectural Controls (Feedforward):</strong> Design principles, guardrails, and contextual constraints injected <em>before</em> code generation.</li> <li> <strong>Validation Sensors (Feedback):</strong> Unit tests, static analyzers, and security scanners that validate generated code within milliseconds.</li> <li> <strong>Domain Invariants:</strong> System rules and constraints that make structural errors impossible <em>by design</em>.</li> </ul> <h2> Harness <em>is</em> Software </h2> <p>Developers must realize that the Harness is just as much "software" as the final application itself. Building a robust Harness is not about "asking an AI to do something and hoping it doesn't mess up." It is about engineering an architecture that:</p> <ol> <li> <strong>Detects Failures:</strong> Much like a traditional unit test in XP.</li> <li> <strong>Enforces Boundaries:</strong> Similar to how an operating system manages system resources.</li> <li> <strong>Evolves:</strong> The Harness itself must be continuously refactored and improved as the core system scales.</li> </ol> <p>Given this reality, shouldn't maintaining the quality and evolution of a Harness architecture be a fundamental priority for engineering teams? After all, we are essentially developing and maintaining the very software that creates, maintains, and evolves our end product.</p> harnessengineering architecture aiagents tdd Gabriel Rubens Mon, 18 Jan 2021 15:19:41 +0000 https://dev.to/gabrielrumiranda/nodejs-dependency-based-attacks-56k9 https://dev.to/gabrielrumiranda/nodejs-dependency-based-attacks-56k9 <p>I recently wrote a GitBook explaining how dependency-based attacks work and how we can prevent these attacks when we are developing on NodeJs</p> <p><a href="https://gabrielrumiranda.gitbook.io/nodejs-dependency-based-attacks/" rel="noopener noreferrer">NodeJs: Dependency-based attacks</a></p> <p>I am open to suggestions and criticisms</p> security node javascript npm