TL;DR: Agent-written code can now change, test, and ship software in one session, according to Arize. That makes traces, datasets, and experiments the basis for merge decisions instead of a fast code review.
Editorial analysis by NHI Mgmt Group, based on content published by Arize: “Kiro CLI observability: trace and evaluate agent changes with Arize Skills”.
Key questions
Q: Why do coding agents need evaluation beyond code review?
A: Because a single agent session can alter prompts, wrappers, logic, and files at once, making manual review too weak to prove system improvement.
Q: What are the signs that an agentic development workflow is failing?
A: Common signs include slow sessions, rising context usage, unclear tool-call sequences, repeated regressions, and changes that improve one example but fail on the next representative dataset.
Q: How should teams evaluate coding-agent changes before shipping them?
A: Use the agent to make the change, then evaluate that change against a dataset built from real failures.
Practitioner guidance
- Define an evaluation gate for agent-generated changes Require a trace, a representative dataset, and an experiment result before any coding-agent change can merge to production.
- Instrument agent workflows with session-level observability Capture tool calls, turn duration, context usage, model name, and cost so reviewers can see how the agent reached a result.
- Turn production failures into regression datasets Export failed traces, group them by root cause, and use those categories as the baseline for future experiments and prompt revisions.
Bottom line: Coding agents can now make broad changes in a single session, but that speed creates a verification gap if teams cannot prove the result improved the system.
Glossary terms: Coding Agent, Evaluation Loop, Regression Dataset, OpenInference Span
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Evaluation debt is now part of agentic software delivery: the risk is no longer limited to bad code generation. When one session can modify prompts, wrappers, and application logic together, organisations accumulate a gap between implementation speed and evidence quality. That gap is now a governance issue, because the team can ship changes faster than it can prove they are better. Practitioners should treat evaluation as a first-class control, not a post-hoc quality check.
A few things that frame the scale:
- Claude Code-assisted commits leaked secrets at a rate of 3.2%, more than double the human-only baseline of 1.5%, with peaks reaching 31 secrets per 1,000 commits in August 2025, according to the State of Secrets Sprawl 2026.
A question worth separating out:
Q: How should engineering teams govern coding agents and human reviewers together?
A: Assign the agent to generate and test the change, then require a human or approval process to assess the experiment result and decide whether it merges. That preserves human accountability while preventing review from becoming a substitute for evidence.
👉 Read our full editorial: Kiro CLI observability shows why agent code needs evaluation