Tag
This article argues that POSIX is a specification, not a program, and that shell implementations such as bash and dash behave differently even for basic commands like echo. It calls for testing across multiple shells rather than relying on the notion of 'POSIX compliance' for portability.
Dropbox describes how they built a system using Model Context Protocol, foundational LLMs, and their Dash AI to automatically retrieve threat models during code reviews and verify security requirements are met, closing the design-to-code security gap.