Two Cycles, One Codebase (Paperback)
Language: English
Published by Independently Published, 2026
- Softcover
- New
Seller: Grand Eagle Retail, Bensenville, IL, U.S.A.Grand Eagle Retail
AbeBooks seller since October 12, 2005
Condition: New
£ 19.46
Quantity: 1 available
Add to basketItem description from seller
Paperback. The vulnerability count on every CISO's dashboard keeps climbing. AI-assisted development shipped more code last quarter than the quarter before, and much of it needs fixing faster than any human team can manage. The math stopped working, and the industry's usual response, more dashboards, more scanners, more gates, only added weight to a system already buckling. TWO CYCLES, ONE CODEBASE makes the case that application security is undergoing its most significant operating-model shift since the introduction of source control. The authors call it the dual cycle: two continuous processes running in parallel against the same codebase, one building features, one reducing risk, both increasingly powered by AI on the generation side and human judgment on the validation side. The two cycles meet at a single, bounded transaction the authors call the validation handshake, where every AI-generated fix earns its way into the codebase through human approval. This book traces that model from first principles through its first public proof: OASIS, now an official OWASP project, where a global community of validators reviews AI-generated security fixes for open source software at a scale no single vendor or maintainer could reach alone. It closes with the enterprise playbook: how a CISO introduces the model, what changes operationally, which metrics survive the transition, and what AppSec looks like once remediation becomes continuous rather than episodic. Written by three practitioners who arrived at the same conclusion from different directions, an enterprise security executive, a fix-automation founder, and a bug-bounty and open-source community leader, this is not a vendor pitch or a product comparison. It is an operating model, built to outlast whichever tools implement it, for CISOs, AppSec leaders, engineering executives, and every practitioner who has quietly recognized that the old model no longer scales. Each chapter closes with an Operating Question to apply to your own environment and a This Week's Move to turn the idea into action before the next chapter starts. This book is meant to be operational, not theoretical, short enough to read on a flight, and useful enough to keep on the shelf as reference material long after. The fight application security has been losing for years is winnable now. This book shows you how. This item is printed on demand. Shipping may be from multiple locations in the US or from the UK, depending on stock availability.…
Seller Inventory # 9798190467666
- Title
- Two Cycles, One Codebase (Paperback)
- Author
- Michael Cartsonis
- Publisher
- Independently Published
- Publication year
- 2026
- Condition
- new
- Binding
- Paperback
- Language
- English
- ISBN 13
- 9798190467666
TWO CYCLES, ONE CODEBASE makes the case that application security is undergoing its most significant operating-model shift since the introduction of source control. The authors call it the dual cycle: two continuous processes running in parallel against the same codebase, one building features, one reducing risk, both increasingly powered by AI on the generation side and human judgment on the validation side. The two cycles meet at a single, bounded transaction the authors call the validation handshake, where every AI-generated fix earns its way into the codebase through human approval.
This book traces that model from first principles through its first public proof: OASIS, now an official OWASP project, where a global community of validators reviews AI-generated security fixes for open source software at a scale no single vendor or maintainer could reach alone. It closes with the enterprise playbook: how a CISO introduces the model, what changes operationally, which metrics survive the transition, and what AppSec looks like once remediation becomes continuous rather than episodic.
Written by three practitioners who arrived at the same conclusion from different directions, an enterprise security executive, a fix-automation founder, and a bug-bounty and open-source community leader, this is not a vendor pitch or a product comparison. It is an operating model, built to outlast whichever tools implement it, for CISOs, AppSec leaders, engineering executives, and every practitioner who has quietly recognized that the old model no longer scales.
Each chapter closes with an Operating Question to apply to your own environment and a This Week's Move to turn the idea into action before the next chapter starts. This book is meant to be operational, not theoretical, short enough to read on a flight, and useful enough to keep on the shelf as reference material long after.
The fight application security has been losing for years is winnable now. This book shows you how.
"Synopsis" may belong to another edition of this title.
Grand Eagle Retail
Bensenville, IL, U.S.A.
AbeBooks seller since October 12, 2005
Shipping rates within U.S.A.
| Item | 6 to 14 business days | 6 to 16 business days |
|---|---|---|
| First item | £ 0.00 | £ 0.00 |
Payment methods
Seller's business information
APOLLO ONLINE CORP.
605 Geddes Street
Wilmington, DE U.S.A. 19805
Terms of sale
We guarantee the condition of every book as it¿s described on the Abebooks web sites. If you¿ve changed
your mind about a book that you¿ve ordered, please use the Ask bookseller a question link to contact us
and we¿ll respond within 2 business days.
Books ship from California and Michigan.
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to Grand Eagle Retail, Bensenville, Illinois, U.S.A., without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.
Shipping terms
Orders usually ship within 2 business days. All books within the US ship free of charge. Delivery is 4-14 business days anywhere in the United States.
Books ship from California and Michigan.
If your book order is heavy or oversized, we may contact you to let you know extra shipping is required.