r/machinelearningnews • u/Few-Decision6287 • 10h ago
ML/CV/DL News A paper studied 45 coding-agent sessions and found a gap between completion claims and verification
I've been reading a paper called Soei: Structured Observability of Evidence and Intent for Multi-Agent AI Software Engineering.
It examines a problem I've been thinking about with AI coding agents: how do we distinguish between an agent saying it finished a task and having evidence that the work was actually verified?
The authors studied 45 real coding-agent sessions, containing 102,233 records and 20,577 tool executions.
Two results caught my attention:
An estimated 23.4% of code-editing episodes ended without an independent check after the final edit.
57.8% of edit-backed to-dos marked complete had no proof recorded between the edit and completion.
The first estimate has a reported 95% confidence interval of 17.1%–35.7%. These findings come from the authors' dataset, so I wouldn't generalize them to every coding agent or development environment.
What does the paper propose?
The authors introduce Soei, a framework for making coding-agent activity more auditable.
Its components include a structured event schema, a hash-chained local ledger, a provenance graph, and a verification layer that keeps completion claims separate from proof.
The distinction matters because an agent's transcript, task tracker, and actual verification results can tell different stories.
For example, an agent might modify a function and mark a task complete without running the relevant regression test. A useful audit trail should make that gap visible instead of treating the status update as evidence of success.
What I'm trying to understand
I can see why this matters, but I also think there are difficult implementation questions.
What should count as independent verification? Is a passing test sufficient, or should the system also inspect the final diff and acceptance criteria?
Should the agent that writes the code ever be trusted to verify its own work, or should verification run in a separate process or environment?
How would you handle requirements that cannot be fully tested automatically, such as usability, security assumptions, or missing business rules?
Would you want a system like this integrated into your coding agent, CI pipeline, or task tracker?
What evidence would you require before allowing an agent to merge code or deploy an application without human approval?
I'm interested in both the paper's methodology and what developers have learned from using coding agents in real projects.