[kcdc 2025] Vibe Coding Revolution: How AI Assisted Development Tools are Transforming Velocity

Speaker: Tony Galati

For more see the table of contents


Intro

  • A Product Owner (Alex) at NAIC (National Association of Insurance Commissioners) gave the background of their project.
  • Origin: Gave a prompt for the backend/infrastructure and have Cursor generate the draw.io. Included Okta, Docker, etc. Showed the prompt. It’s about 20 lines and pretty detailed
  • Used prompts to make a front end prototype. PO iterated on it.
  • Then Tony spent about 2 days connecting them.
  • After that, they did a two day hackathon because knew could get something up quickly
  • At hackathon 1, learned need to have business problem, implementation plan and business support. Did two business days (9-4 each day)
  • Doing second hackathon next week.
  • Did daily standup at hackathon
  • Made sure had everything needed like Okta in advance of hackathon

Business benefits

  • Can generate use cases
  • If want specific format say it
  • AI rewrote his one sentence prompt to include depth needed
  • Got Next.jS front end prototype.
  • Business can iterate with prototype independently
  • Showed user stories generated
  • Even if don’t download code, will speed up time for business analyst
  • Figma.AI doesn’t let you change with prompts after initial generation. V0 lets iterate.

Back end

  • Switched speaker to Tony – Enterprise Architect
  • Absolutely not production ready, but could show working
  • Can specify to AI tool what coding standards to follow, needs to work on all devices, etc
  • Used Amazon Q first. Then started using Cursor
  • V0 is good for live changes in front of customer.

Before Hackathon

  • Engaged security and legal. AI acts on behalf of user so has user permissions.
  • Went through what the models were trained on: https://trust.cursor.com
  • Elaborated on AI policy. He did a show of hands and about 2/3 of the audience has an AI policy at work
  • Defined intellectual property allowed to be used in Hackathon. Could have called it a POC.
  • No PII data
  • Once commit code to Git, normal software development lifecycle.
  • Security engineer paired with developers to understand what Cursor can do
  • Setup Cursor IDE Project Rules – written in plain English. Had AI write it and human proofread. Can be context specific so can say some rules only apply when you say “commit” or other scenarios
  • Setup memory bank – includes extra info/tasks
  • Setup pipelines and quality gates
  • Wrote team prep instructions. Keep it short
  • Wrote down the tech stack. Team implementing used Angular so agreed to let Cursor translate.

Future

  • Roll out Cursor
  • Second hackathon
  • Smaller consumable guide/instructions
  • Mandatory walkthru sessions including BFF (backend for front end) pattern
  • Three days instead of two. This time using a language they aren’t familiar with instead of Angular.
  • AI first behavior – AI does a lot – ex: write tasks for AI consumption but human readable, our job will change towards steering AI. Have AI do one step at a time
  • No training because changes so fast. Instead pick champions and three day immersion
  • Buy things a year at a time since change so fast

Further future

  • AI code reviews.
  • Have multiple agents fix a defect and primary recommend what best
  • Future problem – new people won’t know codebase. Already have that problem and have to figure it out but won’t be worse. Will be catastrophic failures.

Key takeaways

  • Encourage staff to use AI – even at home. You need to fix the toilet, use AI
  • Start POCs
  • Visuals sell
  • AI is coming. Need to figure out how our jobs will change

My take

The speaker on stage was wearing a suit which made me nervous this wasn’t going to be technical. But he quickly said he was going to give an overview and turn it to Tony. Tony is wearing sneakers and jeans which is in keeping with what the hands on folks wear to conferences like this. The speaker in the suit asked how many people from the business side were in the audience. He made a joke that was that he expected when their were crickets. The information in both halves of the presentation was great. Excellent end oot the day. I’m glad the conference organizers gave them a big room! I also like that it was a realistic description and not “see AI is magic and does everything by itself”

[kcdc 2025] AI Vulnerabilities in 2025 – Some of the darker sides of AI

Speaker: Andreas Erben

For more see the table of contents


From the news

What drives model behavior?

  • Initial training
  • Fine puning
  • Potential customer fine tuning
  • System prompt – how the model should behave.
  • Data/prompt
  • Filters on data, prompts, output

Other links

My take

After the first example, there was a bunch of content on how LLMs work. I tuned out a little during that section probably because familar. Then it got interesting again.

PASSED! Jeanne’s Experience Taking the Oracle Cloud Infrastructure Generative AI Professional

Today I took the Oracle Cloud Infrastructure 2025 Generative AI Professional certification and passed with a score of 86%. Passing is 68%. This roughly the score I got on the Foundations exam. Which isn’t surprising. I tend to make the same amount of “careless mistakes” on exams in general with this sort of thing. Even in elementary school. I’d know the material, and write down the wrong answer. Or misread a question.

It’s a 90 minute exam with 50 questions. This is 30 minutes and 10 questions more than the foundations exam. It took me 22 minutes for this exam (and about 10 minutes for the foundation). For both each question was pick one of four multiple choice questions. In many questions one or two were clear distractors. Why did this take twice as long? More questions was part of it. And another was this one had you reading code for some of the questions. Not a lot of code; just 2-6 lines or so. But that takes longer than reading words. Which is probably why the Java 21 cert was a problem with time. That was reading A LOT of code.

Why I took this certification

Oracle is doing a race to certification, where you can take a number of free certifications between now and Halloween. Unlike the Vector cert, which I took solely because it was free, this one I took both because it was free and to learn something. (same for foundations) And I did. Some was new to me and some I used to know and forgot. I especially appreciated learning/reviewing vocabulary and concepts.

What I did:

  • Watched videos and did skills checks from the free course. This was interesting. The skills check questions cover a good amount of the exam materials. I watched it on 2x speed. I also skipped most of the lab videos. I skipped the demos and focused on the concepts because I wasn’t interested in the Oracle Cloud specifics. I did this over two days. There is some repetition in the videos. For example, in context and k shot prompting was in modules 2 and 3. Same slides; different instructor.
  • Watched the video about preparing for the exam. It came with 4 practice questions which were similar to the exam.
  • Did practice exam. This was 50 questions. matching the real exam. The first time thru I got a 68%, which is exactly passing. (I didn’t review my notes at all) It was useful for knowing what I needed to remember. I reviewed 15 answers and then took it again getting an 84%. (I didn’t review them all because I accidentally closed the browser tab.

The exam

All the questions were single answer multiple choice. Like the Vector exam, you had to sign up for a slot in advance. Scheduling wasn’t bad though. I had a choice of any time during the 24 hours of Monday. (and a few 10:30pm or later Sunday night but I am a morning person)

Also, like the Vector exam, i took a picture and showed the computer my id. Then started.

I wrote a separate blog post about the exam engine. I had a few differences form that time though:

  • I had to download software to my machine for Proctorio (“Secure Companion App” and not just the browser plugin this time. I was sure to delete it right after.
  • I had to close my Terminal and Slack this time. While I certainly didn’t use them last time, I didn’t close them. (I don’t have alerts on Slack so it didn’t affect e)
  • Two of the questions had a multiline sentence as answer options that was behind the floating menu bar on the right. The first time, I dragged it was fine. The second time, I accidentally clicked the picture of me (my video) instead of the grab bar. This turned off my video. I clicked to turn it back on immediately and the proctor didn’t comment. There was nowhere good to put the bar though where it didn’t cover something on one question so I moved it a few times.

After the exam

You get a score report on the screen right after submitting and an email right away with the same score. It took a little under an hour to get the second email saying my certview was updated. While Oacle products were used as examples a lot, you only had to actually know about them for a few questions.

What I found most interesting

I like that the questions were a mix on this exam. Some were pure definitions. Some were scenarios where you had to identify a term or algorithm from the description. Some were code where you had to answer a question about it. (luckily the Python code was clear because remember I didn’t watch any of the demos or do the lab).

I also found it interesting how the exams are related. Some of the concepts from other exams were on this one.

How to Study

The learning path is sufficient to take the exam if you go through it carefully. And just like the other AI certs, pay lots of attention ot the sample questions and practice exams! There are only so many ways you can ask certain topics.