Willison: StrongDM used coding agents to simulate Slack, Jira, and Okta APIs
Simon Willison · An AI state of the union: We’ve passed the inflection point & dark factories are coming · Apr 2, 2026 · at 17:17
Software developer Simon Willison describes StrongDM's automated testing architecture for autonomous agent swarms.
0:00 / 0:21exact quote · 21.3s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“So what they did is they built their own simulation of Slack and Jira and Okta and all of this software they were integrating with. And the way they did that is they basically took the API documentation for the public APIs for Slack and the client libraries, the open source client libraries, and they told their coding agents, build this, build, build me a simulation of this API. And they did.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Simon Willison
Willison: GPT-5.1 and Claude Opus 4.5 marked an inflection point for coding agents
“In November, we had what I call the inflection point where GPT, 5.1 and Claude Opus 4.5 came along and they were both just, they were incrementally better than the previous models, but in a way that crossed a threshold where previously, if you had these coding…”
Willison: Code is easier for AI agents because it is verifiably right or wrong
“Like code is easier than almost every other problem that you pose these agents because code is obviously right or wrong. Like it produces code. You run the code. Either it works or it doesn't work. There might be a few subtle hidden hidden bugs, but generally …”
Willison: Large-scale agentic engineering will always require deep developer expertise
“The art of having them help you build software, you could deploy to a million people. That's not, that's never going to be easy. That's never going to be trivial. That's always going to require a great deal of depth of experience in what software and how softw…”
Willison: StrongDM implemented a policy where engineers never read code
“The next rule though is nobody reads the code and this is the thing which StrongDM started doing back in, I think it was August last year. They said, okay, we're not going to read the code.”
Willison: AI agents have become credible security researchers in recent months
“At the same time, the agents are getting really good at security penetration testing now. And this is a new thing. I think in the past, again, in the past sort of three to six months, they've started being credible as security researchers, which is sending sho…”
Willison: Mid-career software engineers face the greatest AI displacement risk
“The problem is the people in the middle. Like if you're mid career, if you haven't made it to sort of super senior engineer yet, but you're not sort of new either. That's the group, which ThoughtWorks resolved work probably in the most trouble right now.”