The bottleneck moved.
Datadog's harness-first report argues that agents can produce software faster than teams can verify it. Its two systems projects use several different witnesses: shadow state, deterministic simulation, formal specifications, compatibility suites, and staging telemetry.[1]
The useful lesson is not that every codebase needs TLA+. It is that each claim needs a mechanism that can prove it wrong. A compiler result answers one question. A unit test answers another. Neither tells you how the change behaves under production traffic.
A green check is useful only when you can name the claim it checked.
Do not normalize mystery.
Patrick Xia calls out a worse failure mode: systems produce opaque answers, users hit opaque failures, and the investigation ends with a shrug.[2] The piece is an opinion, not an incident report. Its warning still lands. A confidence score or an agent label does not replace a failure model.
When the software breaks, the handoff needs four facts. What did we expect? What happened? How can another person reproduce it? Who owns the next test? Without those facts, speed at the front of the pipeline becomes waiting at the back.
The environment is not the witness.
VS Code 1.139 can run agent sessions inside Dev Containers on remote SSH, Tunnel, and WSL projects. The release notes say the remote folder needs a supported Dev Container configuration and Docker on the host.[3]
That is a useful execution boundary. It can make the toolchain repeatable. It does not prove the patch is correct. Keep environment placement and verification evidence on separate lines in the receipt.
Build the cheapest falsifier first.
Start with the smallest check that can reject the claim. Add stronger witnesses when the failure cost, timing, concurrency, or state space demands them. Datadog describes this as using the lightest mechanism that can falsify a hypothesis first.[1]
- For a parser, pair examples with malformed input and round-trip properties.
- For a service, compare a shadow implementation against known behavior.
- For concurrent state, control time and inject faults.
- For a deployment, watch the same invariant in staging or production telemetry.
The rack below does not verify software. It fixes the handoff that comes before verification by refusing to generate a clean investigation card until all four facts are present.