Accelerate your build with AI & coding agents - Build to Learn
Not everyone is a chef — but a great one can come from anywhere.
The shift
A runway-sized bet just to find out if the thing was worth building.
You find out by Monday — for the price of an afternoon.
Who's talking
{
"name": "Vagmi Mudumbai",
"coding_since": 2002,
"role": "CTO for 14 years",
"track_record": "24 years building enterprise software",
"scaled": "$2M → $18M ARR",
"built": ["retailtech", "musictech", "logistics", "developer tools"]
}
The real unlock
The person who knows the problem can finally build the solution.
The honest catch
Leverage cuts both ways. The rest of this talk is how to hold it by the handle.
The part of building software that people keep missing — and the discipline that fixes it.
The mental model to kill
“The agent writes
the code.” → Done.
Every stalled AI build starts here.
The agent is fastest at the part that was never the bottleneck.
The bottleneck moved
Deciding what's right, and proving it's correct and safe, is the work now.
How agents build, by default
You cannot course correct the software as it is being built.
UI-first.
Architecture-led.
Validate every step
make it easy to adapt and evolve.
With the right guidance, an agent can grow software too.
We've solved this before
Kent Beck, late ’90s. Thoughtworks made it how good teams ship — a handful of practices for shipping reliably, under pressure, in small teams.
Everything old is the unlock again.
XP Practice · 01
XP Practice · 02
XP Practice · 03
XP Practice · 04
XP Practice · 05
The synthesis
Agents are infinitely fast,
infinitely junior pairs.
XP is the operating system for working with junior pairs at speed. Discipline is what turns speed into trust.
The part builders miss most — because it's invisible until it isn't.
Why builders are exposed
API keys and tokens committed “just to make it work.”
Checks that look right but miss a path.
One org reads another's data. The #1 SaaS killer.
SQL, shell — and prompt injection in your AI features.
Whatever package made the error go away.
All of it looks plausible.
That's exactly the danger.
My day job
I build secure sandboxes with microVM isolation. So I think about two problems, not one — securing what the agent builds, and securing the agent itself.
Guardrail 01
Every row scoped to the organization. Never trust a client-supplied identity — derive it from the session.
select … where org_id = session.orgId — the starter you'll build on today does this on every query.
Guardrail 02
Secrets live in the platform, never in a commit. Give the agent — and the app — the access they need, and nothing more.
Guardrail 03
Treat agent output like a confident junior's PR: review it, test it, run automated security review before you ship.
And sandbox the agent's own execution — it runs code too.
The reframe
Security isn't a phase.
It's how you set up the work.
The template, the tests, the review loop — that's where safety lives. Slower is faster.
Where a builder's app should actually run — from zero users to a million.
The startup infra trap
No bill before you have users.
No servers to babysit at 2am.
Survive the day it actually works.
Most stacks make you choose. A builder shouldn't have to.
Serverless at the edge
No servers to babysit. Global by default. You pay for success, not for waiting.
Relational, on the edge.
Files & images — no egress fees.
Fast key–value reads, everywhere.
Coordination, sockets, presence.
Background jobs off the request path.
Run models next to your data.
One platform. One deploy.
Why it fits this moment
Today's stack
Auth, a typed multi-tenant database, billing — wired and tested. The principles from this talk, made concrete.
It already has a name. →
Meet your starting capital
முதல் = the first · the capital
What you start with — and what you build on.
What you'll build today
The loop you'll practice
In an afternoon.
You need leverage, discipline, and a substrate that scales with you.