Editorial Portal

AI-native QA insights for modern teams.

Release discipline, test strategy, and AI workflow design — opinionated writing for teams that want stronger quality systems, not more noise.

How to Measure Test Coverage That Actually Means Something: Requirement Coverage vs. Code Coverage

Test coverage comes in several flavors, and reporting the wrong one as a quality proxy creates a false sense of security. This piece untangles code coverage vs. requirement coverage, common misuses, and how to read them together.

2026-07-20

How to Keep Test Cases Up to Date When Your Product Changes Weekly

Weekly shipping means a constant trickle of small requirement changes, and almost no team's process keeps pace. Here are 4 practices that actually keep test cases current when the ground underneath them never stops moving.

2026-07-20

A 30-Day Roadmap for QA Teams Adopting a Test Management Tool

The most common failure when adopting a test management tool isn't picking the wrong one — it's having no rhythm. This 30-day roadmap breaks adoption into four weeks: inventory, pilot migration, a real test cycle, and full rollout with a maintenance rhythm.

2026-07-19

Are AI-Generated Test Cases Reliable? Why Human Review Can't Be Skipped

AI can generate a batch of test cases from a requirement doc in seconds, but you can't tell if a case is reliable just by looking at it. This piece covers AI's strengths and blind spots, and why human review stays essential.

2026-07-18

How Do Test Cases Keep Up After a Requirement Changes? Managing Test Asset Freshness

Most tools solve where to store test cases, few address whether those cases still match the product. This post covers freshness management for test assets — why static traceability isn't enough, and how to turn it into an active signal.

2026-07-17

What Is Given-When-Then? Writing BDD Test Cases in Practice

Given-When-Then is a fixed sentence structure from BDD that splits test cases into precondition, action, and outcome — keeping cases consistent no matter who writes them. This guide covers the format, practical tips, and common anti-patterns.

2026-07-15

Still Managing Test Cases in Excel? 5 Hidden Costs You're Already Paying

Managing test cases in Excel never shows up on a purchase order — it's a cost quietly deducted from your team's time every week. This piece breaks down 5 hidden costs: version reconciliation, stale cases, onboarding, manual reporting, and trust.

2026-07-15

What Is Test Case Management? From Spreadsheets to Purpose-Built Tools

Test case management is the process of systematically creating, organizing, executing, and tracking test cases. This guide covers the fields a good test case needs, why spreadsheets eventually break down, and 5 steps to adopt a dedicated tool.

2026-07-15
Release Discipline

How we kept a red-team feature from being security theater

The hardest part of shipping a red-team feature isn't writing attacks — it's not faking them. Our merge gate: every attack bank must make a vulnerable agent go red and a hardened agent go green, or it fails the build. A probe that can't tell a broken agent from a fixed one is theater. This is the gate, and the three real bugs it caught by going red first.

#release-discipline#eval-studio#red-team#llm-security#testing-discipline
2026-06-18
Release Discipline

Red-teaming an agent, without writing a single attack: a walkthrough

We added promptfoo's red-team thinking to Eval Studio by fusing it into the eval spine instead of bolting it on — our leak-veto was already an attack grade. This post is the concrete walkthrough: pick attack plugins from a library, run them against your agent, and read a matrix that says 'held against this probe' — never 'safe'. Built and merged, not yet deployed.

#release-discipline#eval-studio#agent-testing#red-team#llm-security
2026-06-18
Release Discipline

An access-control eval that actually arrives as the user

An access-control test is worthless unless the request arrives as the role being tested. So in Eval Studio each role carries a real credential — a pasted revocable token, or one minted against your own endpoint — and a cross-role leak-veto runs as an engine default, not an opt-in. This post walks through setting one up. Built and merged, not yet deployed.

#release-discipline#eval-studio#agent-testing#access-control#rbac
2026-06-18
Release Discipline

One run, many axes — and no winner we can't defend

A Sweep varies model, prompt, language, and tenant over one suite and lays them out in a single matrix. The hard part isn't the cartesian — it's refusing the green 'winner' that's really just noise. This post walks through running a Sweep: pick your axes, read the cost gate, and read a matrix that calls a tie a tie. Built and merged, not yet deployed.

#release-discipline#eval-studio#llm-evaluation#agent-testing#model-comparison
2026-06-18