Why ADR v/s Shift-left is the wrong way to think about AppSec
boringappsec.substack.com