We stopped letting the AI write code. We let it write an AST instead.

Every AI coding tool has the same security model, and the model is "a human will read it." The model...