Simon Willison
Creator, Datasette. On 2 shows, 2 appearances. The Shows tab opens the full record on each.
engineerscientistfounderauthor@simonw ↗simonwillison.net ↗Wikipedia ↗YouTube ↗
Simon Willison is a co-creator of the Django web framework and the creator of Datasette. He previously co-founded Lanyrd and is renowned for coining the term prompt injection.
2shows
2appearances
44statements
6resolved
4supported
0contradicted
67%fully supported
21said about them ↓ Everything Simon Willison said on any show that made the record, most notable first. Each card names its show and opens the statement there.
Willison: GPT-5.1 and Claude Opus 4.5 marked an inflection point for coding agents
“In November, we had what I call the inflection point where GPT, 5.1 and Claude Opus 4.5 came along and they were both just, they were incrementally better than the previous models, but in a way that crossed a threshold where previously, if you had these coding…”
Willison: Code is easier for AI agents because it is verifiably right or wrong
“Like code is easier than almost every other problem that you pose these agents because code is obviously right or wrong. Like it produces code. You run the code. Either it works or it doesn't work. There might be a few subtle hidden hidden bugs, but generally …”
Willison: Large-scale agentic engineering will always require deep developer expertise
“The art of having them help you build software, you could deploy to a million people. That's not, that's never going to be easy. That's never going to be trivial. That's always going to require a great deal of depth of experience in what software and how softw…”
Willison: StrongDM implemented a policy where engineers never read code
“The next rule though is nobody reads the code and this is the thing which StrongDM started doing back in, I think it was August last year. They said, okay, we're not going to read the code.”
Willison: AI agents have become credible security researchers in recent months
“At the same time, the agents are getting really good at security penetration testing now. And this is a new thing. I think in the past, again, in the past sort of three to six months, they've started being credible as security researchers, which is sending sho…”
Willison: Mid-career software engineers face the greatest AI displacement risk
“The problem is the people in the middle. Like if you're mid career, if you haven't made it to sort of super senior engineer yet, but you're not sort of new either. That's the group, which ThoughtWorks resolved work probably in the most trouble right now.”
Willison: AI can never have true agency without human motivations
“I think agents have no agency at all. Like I would argue that the one thing AI can never have is agency because it doesn't have human motivations. Sure. You can tell it make more money or whatever, but it's never going to be able to decide on its, like what ma…”
Willison: AI broke tests and documentation as quality signals
“Like it used to be, if you looked at software and it had high quality tests and documentation and everything, it meant it was good. And now that signal is gone.”
Willison: AI-written code will become common for engineers by end of 2026
“I expect by the end of this year, it will not be uncommon to have an engineer say that almost all of that code is written by AI.”
Willison: Coding agents become truly productive only in permissionless 'unsafe' mode
“I think a lot of people who haven't got on board with coding agents yet, haven't tried them in the unsafe mode. They're using coding agent where it's like, oh, can I run this piece of code? Can I edit this file? And that means you have to pay complete attentio…”
Willison: Pelican SVG quality strongly correlates with general LLM capability
“There appears to be a very strong correlation between how good their drawing of a pelican riding a bicycle is and how good they are at everything else. And nobody can explain to me why that is. But as I started looking at these things, I realized, wow, The bet…”
Willison: AI coding agents make verbose, extensive test suites economical
“If you look at a repo and there's huge amounts of tests that aren't really doing anything interesting, that's really expensive because now when you change the code, you've got to update a thousand lines of tests and all of that.
It turns out I don't care anymo…”
Willison: LLMs fundamentally cannot separate trusted instructions from untrusted user text
“Agents fundamentally, like LLMs, can't tell the difference between texts that you give them and texts that you copy and paste in from other people. They're all the same thing. So instructions in that input text can always override the earlier instructions.”
Willison: AI will eventually suffer a catastrophic Challenger-style security disaster
“So my prediction is that we're going to see a challenging disaster. Like at some point, this is going to catch up with us and it's going to be Very, very, very bad, and that will hopefully help us start trying to figure out how not to do this. At the same time…”
Willison: OpenAI and Anthropic didn't build OpenClaw due to security risks
“The reason OpenClaw took off is Anthropic and OpenAI could have built this and they didn't because they didn't know how to build it securely. If you're an independent third party, you don't have that restriction. You can just Build something and put it out the…”
Willison: Vibe coding without reviewing code is irresponsible for multi-user software
“If you're vibe coding something for yourself, where the only person who gets hurt, if it has bugs, is you go wild. That's completely fine. The moment you did your vibe coding code for other people to use where your bugs might actually harm somebody else. That'…”
Willison: StrongDM spent $10K daily on tokens simulating software testers
“Like they were spending 10,000 dollars a day on tokens, I think, simulating all of these end users. I believe so. But it meant that their software was being very robustly tested in all of these different ways.”
Willison: StrongDM used coding agents to simulate Slack, Jira, and Okta APIs
“So what they did is they built their own simulation of Slack and Jira and Okta and all of this software they were integrating with. And the way they did that is they basically took the API documentation for the public APIs for Slack and the client libraries, t…”
Willison: OpenAI and Anthropic maintain private, restricted security models
“Both OpenAI and Anthropic have specialist security models That they will not release to the general public because they can be used to break into websites. So they have like invite only, like registered security researchers can apply for access and they've bee…”
Willison: Simulated AI user testing cannot match real human usability feedback
“I don't think that's credible. I don't think you're going to get as good results from ChatGPT pretending to click around on your prototype than you would from an actual human being.”
Willison: Agentic coding removes developers' need for multi-hour focus blocks
“People talk about how important it is not to interrupt your coders, right? Your coders needs to have Like solid two to four hour blocks of uninterrupted work so they can spin up their mental model and tune out the code. It's some, that that's changed completel…”
Willison: Coding agents search local repositories to synthesize relevant code
“Coding agents can do searches. So you can give them access to an entire hard drive full of stuff and tell them what you need to solve, and they will run search tools to find just the examples that they need to piece things together.”
Willison: Abandoning automated tests with AI coding agents is a huge mistake
“I think it's a huge mistake if you drop tests in exchange for speed of development, because
Very quickly when you're working the test, you find your development speed goes up.
The existence of the test lets you move faster because you don't have to constantly …”
Willison: Minimal code skeletons guide AI agents better than long Claude.md instructions
“So sometimes, some people will tell you should have a Claude.md with like paragraphs of text describing how you like to work. I don't tend to do that because instead I start with a very thin skeleton that just gives it enough hints on how I like to work that i…”
The other half of the tape: Simon Willison's own voice is left out of every number here. Other people bring the name up 19 times in 10 episodes across the shows. 2 statements on the record name them. every mention, with the transcript →
Who brings them up most Shawn Wang 5Sander Schulhoff 5Alex Duffy 3Lance Martin 2Zico Kolter 1Jeremy Howard 1Ben Firshman 1Alessio Fanelli 1
Statements about Simon Willison, by other people (2)
Duffy: AI benchmarks follow a lifecycle from initial idea to saturation
“Essentially there's, I think, a life cycle of a benchmark, right? It starts with an idea, then it gets adopted, and then it gets saturated.”
Every mention by year
tap a year for its mentions
Latent Space 19
2026 1 mention in 1 episode
2025 7 mentions in 4 episodes 2 per episode
2024 8 mentions in 4 episodes 2 per episode
- The Ultimate Guide to Prompting - with Sander Schulhoff from LearnPrompting.org
- The new Claude 3.5 Sonnet, Computer Use, and Building SOTA Agents — with Erik Schluntz, Anthropic
- Answer.ai & AI Magic with Jeremy Howard
- A Brief History of the Open Source AI Hacker - with Ben Firshman of Replicate
- every mention in 2024, scene by scene →
2023 3 mentions in 1 episode
One line per show, most statements first. The link opens Simon's full record on that show: the calibration, argument clarity, speaking style and every statement made there.
| Show | Role there | Eps | Statements | Record | |
|---|---|---|---|---|---|
 LENNY'S PODCASTLEDGER | Creator, Datasette | 1 | 44 | 67% 4/6 | full record on Lenny's Podcast → |
| LATENT SPACELEDGER | Creator, Datasette | 1 | 0 | — | full record on Latent Space → |