Sources and Further Reading
Researched 18 Oct 2026. Standards change; re-check versions each cohort.
Core standards used in this syllabus
- OWASP Top 10:2025: https://top10.owasp.org/2025/
- OWASP Top 10 for Agentic Applications 2026: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/
- OWASP Top 10 for LLM Applications: https://genai.owasp.org/llm-top-10/
- Summary of the agentic list and the "least agency / strong observability" principles: https://lineation.ai/owasp-top-10-agentic/
- DORA software delivery performance metrics (five metrics): https://dora.dev/guides/dora-metrics/
- DORA 2025 State of AI-assisted Software Development: https://dora.dev/research/2025/dora-report/
- DORA AI Capabilities Model: https://dora.dev/ai/capabilities-model/
- IMDA Model AI Governance Framework for Agentic AI (press release, 22 Jan 2026): https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2026/new-model-ai-governance-framework-for-agentic-ai
Evidence and case studies
- Veracode 2026 GenAI Code Security Report: veracode.com (blog, 28 Jul 2026)
- CVE-2025-48757 (Lovable RLS): https://nvd.nist.gov/vuln/detail/CVE-2025-48757
- Replit agent production database deletion (Fortune, July 2025): fortune.com (23 Jul 2025); SaaStr founder Jason Lemkin's own account on saastr.com
Recommended reading (stable classics)
- Google, Site Reliability Engineering and The Site Reliability Workbook (free at sre.google)
- Martin Kleppmann, Designing Data-Intensive Applications
- Michael Nygard, Release It! (resilience patterns)
- Forsgren, Humble, Kim, Accelerate (DORA research foundations)
- The Twelve-Factor App (12factor.net)
- OWASP Cheat Sheet Series, OWASP ASVS, OWASP API Security Top 10
- SLSA supply chain framework (slsa.dev)
- AWS Well-Architected Framework (six pillars: operational excellence, security, reliability, performance efficiency, cost optimisation, sustainability)
- PDPC guides on the PDPA and data breach management (pdpc.gov.sg)
- MAS Technology Risk Management Guidelines (mas.gov.sg)
- NIST AI RMF; ISO/IEC 42001; ISO/IEC 27001:2022