SecOps

Shipping no client-side script is usually sold as a speed optimisation. The speed is the smallest thing you get. What actually changes is the set of failures your site is capable of having.

Your direct dependencies are a decision. Everything underneath them is a consequence — and on a typical install, the consequences outnumber the decisions by two orders of magnitude.

Autonomous agents are good at proposing changes and bad at being trusted with them. The whole design problem is putting a reviewable boundary between the two, and most setups skip it because the boundary is inconvenient.