Agentic Code Review

Addy Osmani (addyosmani.com) Β· rss Β· 2026-07-06 source β†— Reader πŸ–₯️

Agent SecurityCode Was Never the BottleneckCognitive DebtCognitive SurrenderHuman-in-the-LoopIntent DebtMeasuring AI ImpactOrchestration Tax / Human Review BottleneckPull Requests & Async Code Review
Because agents made writing code nearly free while understanding it stayed exactly as costly as ever, code review has become the binding constraint on shipping software β€” and since review must now reconstruct an intent that never existed in any human mind, the right amount of human review is not a fixed rule but a dial set by each change's blast radius.

practical Β· argumentative practitioner essay, data-driven β€” A prescriptive essay in Osmani's ongoing series on agentic engineering (comprehension debt, cognitive surrender, orchestration tax, intent debt, the verification bottleneck). It is practical β€” it diagnoses a problem and prescribes conduct (tier by risk, require evidence, run heterogeneous AI reviewers, keep a human on the merge) β€” but grounds every prescription in a theoretical account of WHY review became the bottleneck and in named 2026 benchmark datasets.

Structure

PartRole
Opening: review is now the most expensive thing I doStates the thesis β€” writing collapsed toward zero, human reading speed did not, so the 'happy accident of relative speed' that made review keep pace has broken
What the 2026 data actually showsEmpirical grounding: four independent datasets (Faros, CodeRabbit, GitClear, GitHub) converge on 4x more code for ~a tenth more value, with quality and reviewability down
Everyone is solving a different problemIntroduces blast-radius relativism β€” review needs scale with impact-of-failure, code lifespan, and how many must understand it
What review is actually for nowCore reframe: agent code has no author and no reasoning, so review shifted from checking a person's thinking to reconstructing thinking that never existed
The tools are good, but not for the reason they advertiseThe heterogeneity argument β€” AI reviewers rarely flag the same line, so run two built differently rather than picking one best
Should we just let AI review more of it?Repositions the human: the machine already reviews more than we do; keep a human 'on the loop' owning the non-transferable parts; a fully closed model loop is borrowed confidence
What to actually doConcrete tiered prescriptions β€” match effort to cost of being wrong, fast-fail the tail, demand evidence, keep PRs small, read test diffs first, keep CI strict
What this means if you run a teamManagement implication: review capacity is a real resource; cutting the people who supply confidence converts the saving into future incidents
Writing got cheap, understanding didn'tConclusion restating the underlying economics: the durable advantage is a review system you can trust, not the most code

Key terms

Propositions

Arguments

Review, not writing, is now the binding constraint on shipping software. strength: high
Explicit premises:
Implicit premises:
Inferences:
Reviewing agent code is a fundamentally different and slower task than reviewing human code, because it must reconstruct an intent that never existed. strength: high
Explicit premises:
Implicit premises:
Inferences:
A human must remain accountable on the loop; the review loop must not be allowed to close completely on anything that can hurt someone. strength: high
Explicit premises:
Implicit premises:
Inferences:
There is no one-size answer; review depth must be set by blast radius, not by guilt or a universal rule. strength: high
Explicit premises:
Implicit premises:
Inferences:

Narratives

Questions addressed

Gaps

Closes gaps elsewhere

Related documents