Not reading agent code only works if the agent can't quietly rewrite the checks. Tests it didn't write, sandboxes, policies. Without that, green CI is just a demo that passed. #aicoding #devtools