# monperrus-end-of-code-review-agents-supersede-2026-06-11

## Veille

An arXiv paper (cs.SE) by Martin Monperrus arguing a radical thesis for the SDLC: coding agents have crossed a threshold of capability such that **human code review is no longer a necessary component** of a quality pipeline. Two claims: (1) autonomous LLM-based systems achieve all the goals of review (defect detection, quality, compliance) at lower cost and higher throughput; (2) the hybrid model "the agent writes, the human reviews" is untenable — it does not ensure real quality and does not scale with AI velocity, creating a "false sense of security". Monperrus contrasts inspection de Fagan (1976) with a **multi-agent adversarial verification pipeline** (generator agent + independent reviewer agents + tests/formal methods + vote-based consensus). The human refocuses on the spec, architectural trade-offs, approval of critical domains, and edge cases. Recommendations: pilot first on low-risk components, measure agent vs. human, make rejection decisions explicit.

## Titre Article

The End of Code Review: Coding Agents Supersede Human Inspection

## Date

2026-06-11

## URL

https://arxiv.org/abs/2606.13175

## Keywords

code review, code review, inspection de Fagan, coding agents, adversarial verification, multi-agent, vote-based consensus, property-based testing, formal methods, software quality, SDLC, false sense of security, scalability, SWE-bench, DORA, delivery throughput, specification, human approval, QA automation, software engineering

## Authors

Martin Monperrus

## Ton

Profile: an academic research article (arXiv, cs.SE category) with a strong thesis, from the perspective of a recognized software engineering academic (Martin Monperrus, professor at KTH, specialist in automated program repair), argumentative and assertive register in English, high technical level, target audience of software engineering researchers, architects, quality leads, and agentic engineering practitioners. The tone is that of a **provocative but well-substantiated position paper**: a manifesto title ("The End of Code Review"), a thesis that knowingly runs head-on against a founding practice (inspection de Fagan, 1976), and a structured argument (agent capability → human limits → economic case → replacement architecture → objections). Authority rests on the author's scientific legitimacy and on canonical references (Fagan, Bacchelli & Bird on the real-world effectiveness of review) and benchmarks (SWE-bench). The rhetoric combines technological inevitability ("crossed a threshold of capability") with honesty about the objections (hallucinations, prompt injection, loss of domain expertise), which are addressed rather than dodged. Implicit metaphor: human review as a bottleneck and "security theater" in the face of tireless agents.

## Pense-betes

- **Core thesis**: *"coding agents have crossed a threshold of capability at which traditional human code review is no longer a necessary component of a software quality pipeline."*
- **Two key claims**: (1) **capability parity** — agents achieve *all* the goals of review (defects, quality, compliance, knowledge sharing) at **lower cost and higher throughput**; (2) **scaling problem** — the hybrid model "agent writes / human reviews" provides neither real quality assurance nor scalability, and produces a **false sense of security**.
- **Goals of code review** recalled: finding bugs/defects, knowledge sharing, quality improvement, process compliance. Draws on **Bacchelli & Bird**: the bugs actually caught often fall short of developers' expectations.
- **Historical target**: **inspection de Fagan (1976)**, the founding formalism of systematic defect detection — repositioned as outdated.
- **Proposed replacement architecture**: a **multi-agent adversarial verification pipeline** — generator agent + one or more **independent reviewer agents** (defects, security, style) + **verification layer** (automated tests + formal methods where possible) + **consensus mechanism** (several agents vote on acceptance/rejection). Replaces the single human bottleneck with distributed inspection.
- **Remaining human role**: specification and high-level requirements, architectural trade-offs, oversight (especially security-critical domains), edge cases unresolved by agents, **final approval gate** for sensitive systems.
- **Objections addressed** (not dodged): LLM hallucinations / indirect prompt injection (but agents beat the human baseline error rate); automated testing does not guarantee correctness (→ hybrid approach + **property-based testing**); loss of domain expertise (→ ensembles of specialized agents via fine-tuning / RAG).
- **Figures**: agents resolving ~**20-40%** of real issues on **SWE-bench** (depending on the model), rapid progression curves; cost-per-review comparisons (agents vs. senior engineer/hour). *(Empirical detail remains limited — this is first and foremost a position paper.)*
- **SDLC / DORA anchoring**: frames review within DORA metrics (deployment frequency, lead time, MTTR) — improving review throughput speeds up the deployment pipeline.
- **5 recommendations**: (1) pilot agent-based review on low-risk components; (2) initial hybrid workflow (agents flag, humans approve); (3) measure agent vs. human detection rates; (4) make agent rejection decisions explicit; (5) feedback loops to specialize agents.
- **To connect (strong)**: converges directly with **Williams' ADLC-4** ("prosecution, not code review" — multi-lens adversarial refutation, verified findings) and **ADLC-2** (gates); nuances the "human vs. AI" slide of our SDLC doctrine (the human Ship/PR gate becomes debatable); tension with Rafal ("review" as an inviolable gate) — useful as a **counter-thesis to debate**.

## RésuméDe400mots

In this position paper published on arXiv (software engineering category), Martin Monperrus defends a thesis that runs head-on against a founding practice of the SDLC: coding agents have reached a level of capability such that **human code review is no longer a necessary component of a quality pipeline**. The argument rests on two claims. First, a **parity — or even a superiority — of capability**: autonomous LLM-based systems fulfill all the traditional goals of review (finding defects, improving quality, ensuring compliance, sharing knowledge) at lower cost and with higher throughput, without human fatigue or inconsistency. Second, a **scaling problem**: the dominant hybrid model — the agent writes the code, the human reviews it — provides neither real quality assurance nor the ability to keep up with AI-assisted production velocity; above all, it generates a **false sense of security**.

Monperrus situates his target historically, taking aim at inspection de Fagan (1976), and draws on the work of Bacchelli & Bird showing that review catches, in practice, fewer bugs than developers imagine. Benchmarks (SWE-bench, ~20-40% of issues resolved depending on the model, with rapid progression curves) serve as evidence of capability.

In place of human review, he proposes a **multi-agent adversarial verification pipeline**: an agent generates the code; one or more independent reviewer agents inspect it (defects, security, style); a verification layer adds automated tests and formal methods; a consensus mechanism has several agents vote to accept or reject. The bottleneck of a single human reviewer is replaced by distributed, tireless inspection.

The human does not disappear: they refocus on specification and high-level requirements, architectural trade-offs, oversight of critical domains, edge cases, and remain the final approval gate for sensitive systems. The author explicitly addresses the objections — hallucinations and prompt injection, the limits of automated testing (hence property-based testing), loss of domain expertise (offset by fine-tuning and RAG) — without dodging them.

On the SDLC side, he links review to DORA metrics: speeding up review throughput speeds up deployment. His recommendations are pragmatic: pilot first on low-risk components, keep an initial hybrid workflow (agents flag, humans approve), measure agent-versus-human detection rates, make rejection decisions explicit, and build feedback loops. A deliberately provocative text, but a valuable counter-thesis to the dogma of the "inviolable human review gate".

## GrapheDeConnaissance

- Martin Monperrus —publie→ The End of Code Review: Coding Agents Supersede Human Inspection (DOCUMENT, 0.98)
- Martin Monperrus —affirme_que→ la revue de code humaine n'est plus un composant nécessaire du pipeline qualité (AFFIRMATION, 0.95)
- agents de codage —surpasse→ revue de code humaine (METHODOLOGIE, 0.9)
- agents de codage —mesure→ ~20-40 % d'issues réelles résolues sur SWE-bench (MESURE, 0.85)
- Martin Monperrus —s_oppose_à→ le modèle hybride où l'agent écrit et l'humain relit (AFFIRMATION, 0.92)
- Martin Monperrus —affirme_que→ faire relire le code des agents par des humains crée une fausse sécurité (AFFIRMATION, 0.9)
- pipeline de vérification adversariale multi-agents —remplace→ revue de code humaine (METHODOLOGIE, 0.9)
- pipeline de vérification adversariale multi-agents —utilise→ mécanisme de consensus par vote d'agents (CONCEPT, 0.88)
- pipeline de vérification adversariale multi-agents —utilise→ tests automatisés et méthodes formelles (CONCEPT, 0.86)
- The End of Code Review: Coding Agents Supersede Human Inspection —référence→ inspection de Fagan (1976) (DOCUMENT, 0.9)
- revue de code —est_basé_sur→ inspection de Fagan (1976) (DOCUMENT, 0.88)
- humains —s_applique_à→ spécification, arbitrages d'architecture et approbation des systèmes sensibles (CONCEPT, 0.86)
- Martin Monperrus —recommande→ piloter la revue par agents d'abord sur des composants à faible risque (AFFIRMATION, 0.88)
- revue de code agentique —s_applique_à→ métriques DORA (lead time, deployment frequency, MTTR) (CONCEPT, 0.82)

---
Canonical: https://www.thekb.eu/en/fiches/monperrus-end-of-code-review-agents-supersede-2026-06-11/
