Beyond Code Generation: Reliability, Verification, and Cost Economics in the Agentic Software Development Lifecycle
Abstract
AI coding systems are moving from autocomplete and chat toward agents that can inspect repositories, edit multiple files, run tools, write tests, open pull requests, and work for long periods with limited supervision. This capability changes the bottleneck in software delivery. Recent field studies show meaningful gains in coding activity, but newer evidence also shows that those gains attenuate sharply between writing code and shipping reliable software. Review, integration, testing, security, deployment, and production operations remain constraining stages, while the economics are shifting from predictable per-seat licensing toward variable token, tool, sandbox, CI, and rework costs. This paper synthesizes peer-reviewed software-engineering research, university studies, benchmark audits, production reports from major technology companies, developer telemetry, and cost-management evidence released primarily from 2024 through September 2026. No new model experiment is claimed; numerical findings remain attributed to their original studies. The synthesis proposes four engineering concepts: the Agentic SDLC Throughput Paradox, Production-Qualified Change (PQC), the Verification Tax, and an Agentic SDLC Control Plane that allocates autonomy subject to cost, reliability, and human-attention budgets. An evidence-based horizon then maps today's supervised agents to future policy-bounded software factories. The central research question shifts from how much code an agent can generate to how much production-qualified value an engineering system can deliver per dollar, per reviewer-hour, and per unit of operational risk.
Figures & tables
| Tier | Evidence type | Representative sources | How claims are used |
| A | Peer-reviewed / major conference research | Management Science developer RCTs; Google ICSE code-review work; Meta FSE TestGen-LLM; Microsoft ASE developer-agent study | Strong basis for findings in the studied setting; not generalized beyond the design. |
| B | Academic preprints / university research | Stanford SWE-chat and CooperBench; SWE-Marathon; MIT/NBER shipping study; Northeastern token-cost study | Frontier evidence; useful for identifying emerging failure modes and hypotheses. |
| C | Benchmark / evaluation research | SWE-bench, SWE-Lancer, benchmark audits, long-horizon benchmarks | Used to measure specific capabilities; benchmark limitations are treated as part of the result. |
| D | Documented industrial telemetry / deployment | Google DORA; GitHub security validation and ROI dashboard; company telemetry and engineering reports | Evidence of practice or observed telemetry, with vendor/self-report boundary stated. |
| E | Cost / market / workforce reports | FinOps Foundation; Gartner forecasts | Used for adoption and planning signals; forecasts are explicitly not treated as measured outcomes. |
| F | This paper’s synthesis | PQC, Verification Tax, Autonomy Budget, Control Plane, horizon map | Proposed engineering constructs to be validated, not empirical results. |
| Problem | Evidence pattern | Operational risk | Control to measure / enforce |
| Code generation outruns delivery | Commit gains attenuate to project/release gains [ 4 ] ; DORA throughput vs stability tension [ 5 ] | Review queues, integration backlog, unstable releases | PQC throughput, review latency, CI queue, change-failure/rollback rate |
| Benchmarks overstate certainty | SWE-bench audit finds task/test issues and contamination [ 17 ] ; benchmark-system conflation [ 18 ] | False confidence in agent capability | Private evals, multiple verifiers, production shadowing, benchmark hygiene |
| Generated tests are weak evidence | Agent test volume may have marginal outcome effect [ 24 ] ; filtered tests work better at Meta [ 22 ] | Green CI with shallow assurance | Mutation/property tests, independent oracles, coverage quality, fault detection |
| Multi-agent coordination fails | CooperBench shows cooperation penalty and communication/commitment failures [ 10 ] | Conflicting changes, false claims, duplicated work | Structured contracts, shared state, ownership, coordinator, merge conflict metrics |
| Long-horizon agents waste budget | SWE-Marathon averages 27.2M tokens; poor self-verification and reward hacking [ 9 ] | Runaway inference, verifier exploitation, low predictability | Token/time caps, progress checkpoints, adversarial verifiers, stop/escalate rules |
| Security burden grows with autonomy | SWE-chat security findings [ 8 ] ; GitHub automated security validation [ 26 ] | Vulnerabilities, secrets, dependency risk | Mandatory static analysis, secret scans, dependency policy, permission sandboxing |
| Metric | Definition / approximation | Why it matters |
| PQC rate | Production-qualified changes / candidate agent changes | Separates generation from changes that actually satisfy delivery gates. |
| PQC per dollar | PQC / total attributable delivery cost | Normalizes AI cost by qualified output rather than tokens or PR count. |
| PQC per reviewer-hour | PQC / human review and escalation time | Measures whether agentic throughput is consuming scarce expert attention. |
| Verification Tax | Assurance + rework cost / generation cost | Makes the downstream cost of unreliable generation visible. |
| First-pass qualification | Candidate changes passing all required pre-deploy gates without agent or human rework | Sensitive to model/harness quality and task selection. |
| Human escalation rate | Tasks requiring clarification, override, or manual completion / agent-started tasks | Measures effective autonomy and where policy boundaries are wrong. |
Software Engineering Agents
Software Engineering Agents are AI systems that use code, tools, and feedback to perform software development tasks.
See all 347 papers