TL;DR: AI agents can accelerate test authoring dramatically, but Arxan Technologies argues that execution capacity, device fragmentation, and orchestration determine whether that automation actually ships. The strategic risk is execution debt: teams can scale test creation faster than they can scale the runtime layer needed to run, trace, and trust the results.
NHIMG editorial — based on content published by Arxan Technologies: But Where Are You Going to Run All of Those Tests?
By the numbers:
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems, inappropriately sharing sensitive data, and revealing access credentials.
Questions worth separating out
Q: What is execution debt in test automation?
A: Execution debt is the gap between the speed of test creation and the ability of the runtime environment to run those tests reliably at scale.
Q: Why do QA teams hit scaling limits after automation improves?
A: Because faster authoring increases demand on the execution layer faster than most environments can absorb.
Q: How should teams govern shared test execution environments?
A: Treat shared execution as a multi-tenant platform with explicit ownership, least privilege, and auditability.
Practitioner guidance
- Map the execution estate Inventory device pools, browsers, OS versions, orchestration accounts, and CI integrations as a single execution estate so ownership and failure domains are visible.
- Separate authoring from execution governance Track test creation velocity separately from runtime throughput, queue depth, and failure rates so automation gains do not mask capacity debt.
- Apply least-privilege to orchestration accounts Limit test runner and scheduling permissions to the smallest set of devices, environments, and pipelines needed for each workload.
What's in the full article
Arxan Technologies' full blog covers the operational detail this post intentionally leaves for the source:
- The article's full walkthrough of device-lab deployment choices, including when cloud, on-premise, or hybrid execution patterns fit different QA estates.
- The case study detail behind Groupe BPCE's testing setup, including how 700 users, 102 devices, and 32 browser versions were operationalised.
- The practical evaluation questions for accessibility, carrier-dependent, and connected-car test coverage that this post only summarises at a high level.
- The CI pipeline flow details for build, upload, execution, and reporting that implementation teams will need once they move past strategy.
👉 Read Arxan Technologies' analysis of QA execution bottlenecks in AI-assisted test automation →
QA test automation at scale: where will teams run it reliably?
Explore further
Execution debt is becoming the hidden constraint in AI-assisted testing. Faster test authoring shifts the bottleneck from writing automation to operating it. That means the real failure mode is not insufficient test creation, but insufficient runtime governance, where capacity, concurrency, and traceability lag behind AI-generated demand. For identity teams, this mirrors a wider non-human identity pattern: machine activity scales faster than its control plane.
A question worth separating out:
Q: When should teams use real devices instead of emulators?
A: Use real devices whenever the result depends on physical hardware, carrier behaviour, accessibility tooling, audio, battery state, or automotive integration. Emulators are useful for speed and convenience, but they cannot reliably reproduce every production condition that determines whether the application behaves correctly.
👉 Read our full editorial: Execution debt in QA test automation is the real scaling bottleneck