What Technical Due Diligence Finds When the Deck Says “70% Automated” — Soukaïna Abelhad

AI Engineer · 2026-10-13

This video, aimed at senior software engineers, outlines a three-step diligence framework for evaluating claims of AI automation. It emphasizes moving beyond simple metrics like "% faster" to scrutinize the underlying arithmetic, precise definition of "automation," and the robustness of evaluation. The framework helps determine the true economic value of AI solutions by focusing on workload volume versus human labor, the level of human intervention in automated processes, and the reliability of quality assessments.

read more

The speaker, an AI tech lead, presents a diligence framework for senior software engineers to critically assess claims related to AI automation, particularly those presented as impressive percentage gains. She highlights that a "true number" (e.g., 55.8% faster) can still answer the wrong question, leading to misguided conclusions.

She identifies the core problem as a disconnect between the "fund side" (those building AI for investment teams) and the "build side" (those owning AI evaluation in production). Drawing on Shawn Chan's "build for the memo, not the demo" philosophy, she extends this to operational metrics.

Check 1: The Arithmetic - Volume vs. Labor The first check focuses on understanding the actual workload entering the system and the associated human labor. Citing observational data from Faros, high AI adoption teams saw a 98% increase in merged pull requests (PRs), a 91% increase in PR review time, and a 154% increase in average PR size. This data, covering over 10,000 developers across 1,255 teams, suggests that AI adoption led to more work entering the system and a growing downstream review burden, rather than a reduction in human labor. Therefore, for diligence, it's crucial to request 18 months of workload volume data alongside fully loaded human labor (reviewers, trainers, escalations, rework). If human labor tracks workload volume, the AI is providing assistance, not labor removal.

Check 2: The Definition - Which Rung? Even if the arithmetic survives scrutiny, the definition of "automation" can be misleading. Uber's claim that '>70% of Uber pull requests are AI-attributed' is used as an example. "AI-attributed" does not necessarily mean fully autonomous. The speaker proposes a ladder of automation: 1) AI drafted (human remains in the loop), 2) Human edited (assisted work), 3) Human approved (controlled automation), and 4) No human intervention (Straight-Through Processing, STP). Financial services already use STP for end-to-end processes without human intervention within a defined boundary. Engineers should ask where the automation boundary lies (e.g., code drafted, PR approved, or change in production) and request the STP rate within that named boundary.

Check 3: The Tell - Who Defines Quality? Assuming a precise definition, the next challenge is trusting the measurement of quality. Data from METR (Mar. 10, 2026) showed a 24.2 percentage-point gap where an automated grader scored higher than maintainer merge decisions (average difference across 5 models). This study involved 95 unique issues and 296 AI pull requests, reviewed by 4 maintainers from 3 repositories, who were blind to whether the patch was AI or human-generated. The automated grader was significantly more optimistic than human experts. This highlights the importance of evaluating evaluation maturity. Key questions to ask are: Who labels ground truth? Do experts agree (and is this agreement measured)? What was the automated judge validated against? What bad outputs escaped? The speaker notes that often, automated validation passes many outputs, but when experts are involved, few survive.

The P&L Bridge: Translating to Finance Finally, the speaker advocates for translating these technical checks into financial terms using a P&L bridge. Captured value should be calculated by starting with eligible workflow value, multiplying by adoption rate, straight-through success (STP), and accepted quality. From this, subtract the cost of AI, human review, and rework cost (a task that fails, escalates, or needs rework belongs in the cost). The critical metric to request is cost per accepted autonomous task. This comprehensive approach ensures that the economic impact of AI is accurately assessed, considering all associated costs and the true level of autonomy and quality.

The Diligence Card The presentation concludes with a summary card for practical application: ARITHMETIC: Volume vs. labor – Over 18 months, count every human touch. DEFINITION: Which rung? – Assisted, approved, or straight-through. * THE TELL: Who defines quality? – Ground truth, agreement, judge, escapes.

The overarching principle is to "Ask what must be true for the number to matter" – believe it, test it, or walk away. Diligence's job is not to ask if a number is impressive, but what conditions must hold for it to be meaningful.

OpenAI's AI Wrote 700 Math Papers. Engineers Still Won't Trust AI With Their Code.

Nate B Jones · 2026-10-13

OpenAI's recent release of over 700 math research papers, derived from a single prompt to an unreleased model, exemplifies narrow superintelligence. While this highlights AI's superhuman capabilities in specific, formally verifiable domains like pure math, it also starkly contrasts with its current limitations in fields like engineering and business. The core insight is that AI excels where problems have clearly defined correct answers and immediate feedback loops, making it a powerful tool, but not an autonomous decision-maker or an intuitive problem-solver in messy, real-world contexts that require human judgment and experience.

read more

OpenAI recently published over 700 new math research papers, a remarkable achievement as they were generated by a single prompt given to an unreleased internal AI model. This event showcases what is being termed narrow superintelligence: AI excelling beyond human capability in a specific, well-defined domain. The author notes that the most striking aspect isn't just the sheer volume of papers but the methodology, emphasizing the distinction between exam problems (where the answer is known) and research problems (where nobody knows the answer yet). AI's success in math research falls into the latter, demonstrating its ability to advance theoretical boundaries, such as improving the theoretical bound on matrix multiplication and proving the unique determination of a material's interior from surface measurements. These proofs, while theoretical, lay the groundwork for future engineering and product development, potentially accelerating innovation significantly faster than human-only efforts. This means AI can reduce the time from abstract theory to practical product application.

However, this mathematical prowess doesn't necessarily translate directly to other complex domains. The author contrasts AI's performance in math with its current state in coding and engineering. While AI can generate code, and there's immense commercial demand for better coding AI, senior engineers still operate with zero trust for AI-generated code in production. This is because engineering, unlike pure math, involves navigating complex, ambiguous, and evolving environments. Coding agents often require extensive guardrails and human oversight. The challenge isn't merely generating correct code but also understanding broader system architecture, anticipating future maintainability issues, and making subjective judgments. AI might generate features faster, but without human engineers asking the right questions about system interactions, broken assumptions, or long-term maintainability, it can lead to more work for a small number of engineers responsible for checking and maintaining the entire system.

Similarly, in business, the challenge shifts from technical correctness to understanding customer needs, resolving conflicting information, and making strategic decisions. While AI can facilitate information retrieval, it often exposes existing discrepancies without possessing the business intuition or judgment required to prioritize or resolve these conflicts. The author argues that discovering the right questions to ask is often more valuable than quickly finding answers to existing questions. This requires a deep understanding of context, human behavior, and unspoken needs—areas where AI currently struggles.

The core takeaway is that AI's intelligence is spiky and uneven. It can be superhuman in one narrow area but lack basic understanding or judgment in others. The "IQ points" don't transfer universally across different kinds of work. This implies that the future of work with AI will not be about humans being replaced entirely, but rather about changing roles. Humans will focus more on defining problems, providing context, exercising judgment, and overseeing AI's outputs, acting as "fire in the belly" drivers who provide the critical human desire to make an impact. The skill of knowing when to trust the tool and when to put it down becomes paramount. We are effectively making AI conform to the human condition—integrating it into the messy, complex reality of human work, rather than expecting it to seamlessly take over. The unexpected challenge for AI labs, paradoxically, might be running out of problems that AI can solve autonomously and verifiably, highlighting the enduring value of uniquely human capabilities like strategic thinking, empathy, and intuitive judgment in navigating the world's truly difficult problems.

Are Harnesses Worth the Cost?

Martin Fowler · 2026-10-13 · 20 min read

TLDR: A behavioral harness adds no value for frontier models (GPT-6 Sol succeeded 10/10 either way), but dramatically stabilizes cheaper models — harnessed GPT-6 Luna hit 10/10 reliability versus 3/10 unassisted, while still costing 33% less per run than the unharnessed frontier model. The practical takeaway: pairing a cost-optimized model with executable contracts and deterministic test feedback is a cheaper path to consistent results than just throwing a more capable model at the problem.

Does stronger #AI makes #software safer or less safe? #agenticengineering #security #anthropic

Agentic Engineering · 2026-10-13

This video argues that stronger AI, while enabling cheaper and more capable attacks, also provides equivalent leverage to defenders. The core idea is that the race isn't about AI capability versus AI safety, but whether defensive engineering can evolve faster than offensive capabilities become cheaper. Each new exploit and failure mode, when analyzed, contributes to improved security measures, making AI safety more of an engineering execution problem than an abstract prediction problem, akin to how aviation safety dramatically improved over time.

How I Review AI Code: Self-Healing Code Agents | Google Engineer | AI-DLC

Derick Chen - BuildWithDC · 2026-10-13

The BuildWithDC Agentic Development Starter Kit is an open-source, vendor-neutral, portable Agentic Development Environment designed to make local IDE agents more dependable and keep developers in control. It streamlines the development process by offloading operational, security, and verification complexity into automated harnesses, preventing code quality issues before they reach the Git log. The kit focuses on minimal friction, adaptive customization of developer preferences, and automated safety nets with self-healing capabilities, ultimately accelerating software development and improving code quality through a "shift down" approach.

read more

The Agentic Development Starter Kit aims to reduce the AI verification tax, where developers spend significant time reviewing AI-generated code. It provides a minimal friction developer harness that can be installed in under 10 minutes, making local IDE agents more dependable and keeping developers in control.

Key features of the kit include:

1. Multi-Tier Rules Governance Hierarchy: Rules are partitioned into three distinct lifecycles to prevent cross-contamination, rule drift, and VCS merge conflicts. These tiers—Organization, Team, and Personal—have decreasing precedence, ensuring that personal preferences don't weaken higher-tier organizational or team rules.

2. 24-Hour Non-Blocking Org Rule Sync: A background script (`sync_org_rules.py`) automatically checks and updates enterprise rules from a central repository. This ensures developers' local environments are always compliant without delaying pre-commit workflows. Users only need to point to the remote organizational rules repository in their environment file (`.env.example`).

3. Dynamic Multi-Assistant Tooling & Skills: The kit offers a dynamic assistant tooling and hook generator (`install_tooling.py`) that sets up coding agent-specific artifacts according to unique conventions for various LLMs (Google Antigravity, Anthropic Claude Code, Cursor, and IDE tooling). This avoids repository clutter and allows for on-demand command execution.

4. VCS-Isolated Personal Preference Persistence: A dedicated Personal Preferences & Workflow Rules Skill (`personal-preferences/SKILL.md`) and a corresponding manager script (`preference_manager.py`) capture user engineering preferences, workflow conventions, and pair-programming guidelines. These preferences are stored in a local Tier 3 `personal-01-preferences.md` file, untracked in VCS, ensuring they never pollute team Git history or cause merge conflicts. The skill automatically detects workflow feedback, corrections, or behavioral preferences and proposes persisting them, after explicit user confirmation, to ensure future sessions automatically adhere to them. It also includes semantic collision detection to prevent personal preferences from weakening or overriding higher-tier rules.

5. Universal Pre-Commit Review Engine: The kit integrates a pre-commit review engine (`pre_commit_reviewer.py`) that acts as an automated quality gate. This engine leverages Gemini 3.8 Flash (with Google Application Default Credentials or Google AI Studio) for `diff` evaluation. It automatically checks AI-generated code against machine-readable best practices and markdown specifications before it hits the Git log. This "shift left" approach identifies and remediates issues early, significantly reducing manual review fatigue. The `pre_commit_reviewer` includes an SHA-256 diff caching mechanism to instantly skip duplicated `diff` reviews, accelerating the inner loop. It also features graceful degradation, falling back to local deterministic tools like `ruff` if the LLM API fails, preventing local commits from being blocked.

6. Authoritative CI Gatekeeper: A server-side compliance gate (`.github/workflows/ai_rules_audit.yml`) ensures mandatory remote CI compliance. This "Two-Grip" governance model provides local pre-commit assistance paired with mandatory remote CI compliance.

7. Portable Standalone Distribution: The entire tooling can be packaged as a single command (`package_tooling.py`) for extraction into any target repository. This ensures zero NPM or PIP dependencies, running entirely on the Python standard library, making it highly portable.

Architecture & Governance Workflow: The kit implements a Multi-Tier Governance Architecture with distinct rule lifecycles for Organization (Tier 1), Team (Tier 2), and Personal (Tier 3) rules. Tier 1 rules are managed in a dedicated central governance repository (e.g., by InfoSec or Platform Engineering) and mirrored into downstream developer repositories. Tier 2 rules (e.g., service architecture, code quality) are live in version control within each service repository and require Pull Requests with automated CI checks to prevent weakening of Tier 1 constraints. Tier 3 personal preferences are local and untracked. This hierarchical structure, coupled with the Non-Weakening Rule of Precedence, ensures that lower-tier constraints cannot weaken or silence constraints defined in a higher tier.

The overall Agentic Development Local Loop integrates AI-driven development with the local Git lifecycle. The `sync rules` hook updates governed rules from remote repositories during `git add`. The `review diff` with agent hook triggers the Pre-Commit Review Engine during `git commit`, which uses Personal, Org, and Team rules for evaluation. If violations are detected, the coding agent can self-heal, re-commit, and resolve the loop without manual intervention. This reactive verification in the inner loop, with a fresh agent context and a different LLM as a judge, ensures robust rule enforcement.

OpenAI’s New AI Is Doing Things We Barely Understand

Two Minute Papers · 2026-10-13

OpenAI recently released 722 AI-generated mathematical results, including claims that were previously considered impossible. This raises important questions about the future of mathematics, with some viewing AI as a tool for accelerated discovery and others concerned about the lack of human-interpretable proofs and the limited accessibility of these advanced AI models. While these AI achievements are impressive, the debate centers on whether the goal of mathematics is solely to find answers or to also gain understanding, and the need for open-source AI models to democratize access to these powerful tools.

read more

OpenAI's recent release of 722 AI-generated mathematical results marks a significant shift in the fields of mathematics and science. These results include claims that were previously deemed impossible to prove, highlighting the rapid advancements in AI capabilities.

The video focuses on two examples of these mathematical breakthroughs: irrational triangular billiards and conformal transformations with oddly shaped holes. In the irrational triangular billiards problem, a laser fired into a triangular mirror room with at least one irrational angle (relative to pi) will visit almost every spot and direction equally. Proving this is extremely challenging because irrational angles do not settle into repeating patterns, rendering traditional methods ineffective. OpenAI claims to have proven this for every triangle of this kind.

For the conformal transformations problem, a planar region with weirdly shaped holes undergoes a stretch that preserves angles (a conformal transformation). The holes morph into perfect circles or points while angles remain intact. This is incredibly difficult to prove because the holes can become infinitely tiny and even tangled, making the final shape very hard to control. Previously, this was only known to work in simpler cases, but OpenAI claims it always works.

The nature of these proofs is a point of contention. The presenter describes some of them as a "big ball of barf" rather than elegant proofs. This leads to a discussion on the fundamental goal of mathematics. Some argue that the primary objective is simply to find the correct answer, regardless of the elegance or interpretability of the proof. For them, AI serves as a powerful tool to accelerate problem-solving. They liken it to fluid and smoke simulations where neural networks can perform simulations much faster than traditional methods, even if the underlying mechanisms are activations within the neural network rather than elegant algorithms. DeepMind's AlphaStar, an AI that plays StarCraft II, offers another analogy: it makes decisions based on complex neural network activations, not human-understandable strategies.

Conversely, many mathematicians value the process of understanding and deriving elegant proofs. They believe that each proof offers a new lesson and illuminates the mind differently. For them, a hundred proofs of the Pythagorean theorem are not merely redundant but offer diverse insights. This group is less enthusiastic about a "firehose of data" from AI that delivers answers without clear, human-comprehensible reasoning.

A significant concern raised is the accessibility of these advanced AI models. The presenter notes that they do not have early access to OpenAI's cutting-edge models, unlike many others in the field. This highlights a potential issue of democratization in AI research. If such powerful technology, capable of solving Millennium Problems (like the Navier-Stokes equation, which AI very likely solved just a month ago), is only available to a select few in "frontier labs," it creates an exclusive club. The presenter argues that such technology, with its potential to profoundly advance mathematics and science, needs to be openly shared with everyone. This would allow a broader community of researchers to run, own, and contribute to these models, fostering collective human advancement. This open-source approach, by encouraging more people to write code, conduct experiments, and share knowledge, is seen as the "way of the scholar." The video concludes with a call to action for broader collaboration and open access to AI models, rather than keeping them exclusive to a few organizations.

The Craft of Practitioner Voice

Martin Fowler · 2026-10-13 · 43 min read

TLDR: "Thought leadership" and academic writing both suppress the author's actual judgment — one behind polish, the other behind rigor — and AI now makes this problem critical by adding a third voiceless option. Fowler and Highsmith argue for a distinct category called "Practitioner Voice," where authority comes from lived experience, tensions are named rather than resolved, and the author's reasoning stays visible throughout. The core idea: write from what only you have lived, start with your conclusion, and trust readers who recognize the pattern from their own experience.

Quoting Geoffrey Huntley

Simon Willison · 2026-10-13 · 1 min read

Geoffrey Huntley's technique uses pre-commit hooks to enforce that AI coding agents follow architectural constraints — specifically, failing commits where the agent bypasses a required diagnostics module and injecting corrective prompts directly into the workflow. This matters because it shows a concrete, practical pattern for keeping AI agents aligned with codebase conventions without relying on fragile prompt engineering or documentation that drifts out of sync.

Decompose Run-On Tests

Kent Beck · 2026-10-13 · 5 min read

TLDR: A "run-on test" chains multiple operations and assertions in sequence, making failures hard to diagnose because you can't tell which operation caused the problem. The fix is mechanical: split the run-on into separate tests, one per assertion, each named descriptively after what could go wrong. The resulting suite has identical coverage because you trust the tests collectively — later tests don't need to repeat earlier assertions since a regression will break an earlier test anyway.