Unvetted AI code generation in your software pipeline is like handing a construction apprentice the keys to a wrecking crane—it might get the job done, but it could just as easily knock down the entire building. In this episode of Agents of Dev, Mitch Ashley and Brad Shimmin sit down with open source pioneer Tracy Ragan (CEO of DeployHub and Ortilius community leader) to dissect the state of the modern software supply chain. Tracy breaks down why hardcoded scripts continue to paralyze DevOps evolution, how global vulnerability collection laws are reshaping cybersecurity risk, and why "reachability" matters more than static SBOM scans. Together, the team explores the inevitable shift from bloated frontier models to lean, domain-specific small language models, proving why human collaboration still forms the ultimate zero-trust defense. This and more on Agents of Dev, part of The Futurum Group Podcast Network.