NIST and AI-Written Code: The SSDF Gap and the New AI Agent Standards

Originally published on the Dromeas blog. In short: NIST's SSDF (SP 800-218) still holds up on outcomes, but it assumes people write and review the code. With AI at 42% of committed code, the gaps are