← Back to Library

Crosspost: Paolo perrone: AI coding tools: What changed in the last 6 months

Brad DeLong's latest commentary on the rapid evolution of AI coding tools cuts through the industry hype to reveal a startling paradox: as autonomous agents become more capable, the trust in their output has plummeted. While the technology has shifted from simple autocomplete to full-scale autonomy, DeLong argues that the real bottleneck is no longer the speed of the machine, but the capacity of human engineers to verify its work. This piece is essential listening because it exposes the hidden costs of "vibe coding" and the dangerous disconnect between benchmark scores and real-world reliability.

The Illusion of Autonomy

DeLong begins by highlighting a fundamental shift in the software development landscape. He notes that "AI-coding tools stopped competing on autocomplete and started competing on autonomy," marking a move where agents now operate in terminals and cloud sandboxes rather than just suggesting lines of code within an editor. The author paints a vivid picture of the current state of affairs, where vendors have minted their own models and billing has shifted to metered usage, creating a financial pressure cooker for development teams.

Crosspost: Paolo perrone: AI coding tools: What changed in the last 6 months

The core of DeLong's argument is that this technological leap has outpaced our ability to manage the resulting risks. He writes, "Today's autonomous coding agents hallucinate packages, leak secrets on command, and quietly destabilize delivery." This observation is critical because it moves the conversation beyond whether AI can write code to whether that code is safe to deploy. The author draws a sharp parallel to the dangers of using Excel for complex data analysis, suggesting that "we now have all the problems with debugging work done in Excel raised to a higher power by the tireless industry of only half-hinged software coding 'bots'."

This framing is effective because it grounds abstract AI risks in a familiar, tangible problem that every professional has encountered. However, critics might argue that the analogy to Excel understates the potential for AI to eventually self-correct, even if current iterations struggle. DeLong counters this by pointing to the specific failure modes, noting that "the hard part is making sure it hasn't quietly set the building on fire."

"The new rate-limiting step is how much skilled programming time you can pay for to undertake skilled human verification, or how much you are willing to accept the costs of sometimes shipping slop in order to get something out the door."

The Productivity Paradox

Perhaps the most surprising claim in DeLong's analysis is the evidence suggesting that AI is currently slowing down experienced developers. He cites a METR study revealing that "experienced developers were 19% slower with AI on familiar code, even though they felt faster." This disconnect between perceived and actual productivity is a crucial insight for busy leaders who might be pushing for rapid adoption without understanding the hidden drag of verification.

DeLong attributes this slowdown to the nature of "vibe coding," a term he describes as a "pseudo-social experience" that feels natural but often leads to calibrating the model rather than building robust workflows. He explains that while the tangible progress of watching an agent work is satisfying, it often masks the fact that the output requires extensive rework. "Hence you do more, and accomplish less, while vibe-coding," he observes. This argument is bolstered by data on hallucinations, where "19.7% of AI-generated code samples referenced non-existent packages," creating a scenario where developers must spend time debugging code that references libraries that do not exist.

The author also touches on the limitations of current testing harnesses, noting that "to the LLM, a bug that does not make the machine instantly barf when tested is not a bug it catches." This highlights a systemic vulnerability where code can be functionally correct in a test environment but fundamentally flawed in a production context. This echoes the principles of Goodhart's law, where a measure (benchmark score) becomes a target and ceases to be a good measure, as the models optimize for passing tests rather than writing secure, maintainable code.

The End of the Free Lunch

The commentary also addresses the economic reality of this new era. DeLong points out that "flat-rate pricing died" and was replaced by metered billing, forcing organizations to treat AI usage as a variable cost rather than a fixed overhead. This shift means that "every long agent run now carries a marginal cost you can see on the invoice," changing the calculus of when and how these tools are used.

The author argues that the industry is currently "at sea" regarding engineering practices, with no clear consensus on how to safely integrate these autonomous agents. He warns that "engineering practice right now appears to be at sea," leaving teams vulnerable to security breaches and unstable deployments. The reliance on benchmarks like SWE-bench is also questioned, with DeLong noting that "no benchmark score predicts how a coding model does on your codebase." This is a vital warning for organizations that might be making procurement decisions based on leaderboard rankings rather than internal testing.

"The constraint is not that some LLMs are better than others on code-writing benchmarks and tests. The constraints are: how fast can safely review what the agents did? how correctly can you accurately review what the agents did?"

Bottom Line

Brad DeLong's analysis offers a necessary corrective to the prevailing narrative of AI-driven efficiency, revealing that the current generation of coding agents introduces more complexity than it solves for experienced teams. The strongest part of the argument is the evidence linking increased tool usage to decreased developer speed and trust, a counterintuitive finding that demands immediate attention from engineering leadership. The biggest vulnerability, however, is the lack of a clear path forward; while the problems are well-defined, the article leaves readers with the sobering realization that the industry has not yet developed the practices to safely harness this power. Watch for how organizations adapt their verification processes, as that will likely become the primary differentiator in software quality over the next year.

Deep Dives

Explore these related deep dives:

  • Goodhart's law

    The article describes how AI coding benchmarks fail to predict real-world performance because the models optimize for passing tests rather than producing robust code, a classic manifestation of this economic principle.

  • Hallucination (artificial intelligence)

    Understanding the specific mechanism by which LLMs confidently invent non-existent software packages is essential to grasping why 19.7% of generated code samples referenced fake dependencies that could destabilize entire systems.

  • Vibe coding

    This emerging term captures the psychological trap where developers feel productive while merely calibrating AI agents, explaining the paradoxical finding that experienced programmers actually slowed down despite feeling faster.

Sources

Crosspost: Paolo perrone: AI coding tools: What changed in the last 6 months

A report from the coalface itself: Paolo Perrone of <http://theaiengineer.substack.com>: “AI”-agents have escaped the Integrated Software Development Environment, vendors have minted their own models, the bills have gone metered—and nobody trusts the resulting software code. We now have all the problems with debugging work done in Excel raised to a higher power by the tireless industry of only half-hinged software coding ‘bots….

Briefly: use of AI coding agents is high, but trust in them is—rightly—very low.

For one thing, they are not consistent: thus “no benchmark score predicts how a coding model does on your codebase…”

“AI” now writes, tests, and ships your patches; the hard part is making sure it hasn’t quietly set the building on fire. Today’s autonomous coding agents hallucinate packages, leak secrets on command, and quietly destabilize delivery. The new rate-limiting step is how much skilled programming time you can pay for to undertake skilled human verification, or how much you are willing to accept the costs of sometimes shipping slop in order to get something out the door.

And the METR study says that: experienced developers were 19% slower with AI on familiar code, even though they felt faster. And the Package hallucinations study says that: 19.7% of AI‑generated code samples referenced non‑existent packages, with repeated fake names in open models.

I think I understand the first of these. Vibe coding is a pseudo-social experience, which feels much more natural to the East African Plains Ape than is working alone. Plus you are making progress, tangible progress, every minute. That the tangible progress is trying to calibrate the LLM’s performance so that it does something useful, rather than actually writing code that will ultimately go into some repeatable and repeated workflow—that is not something you feel in the moment. Hence you do more, and accomplish less, while vibe-coding.

On the other hand, the hours that you spend trying to decode Stack Overflow threads and thumbing through your ORA animal-cover programming-reference books are now removed from your day.

And I definitely understand the second: to the LLM, a bug that does not make the machine instantly barf when tested is not a bug it catches. So there is no way the code it rights can be better than the harness, because the machine cannot look back at the code and say, “Oh, that! That’s wrong!” If it doesn’t barf, it did not happen.

The constraint is ...