Code review as runtime monitoring, proposed in Trustworthy AI Software Engineers, reframes code review in human-AI software engineering teams so that it no longer ends once code is merged. Under this proposal, deployed code is treated as provisional rather than final: AI agents continuously monitor system behaviour in production, evaluating execution traces, resource usage, security signals, and deviations from expected behaviour, so that trustworthiness is established through sustained behavioural validation rather than a single pre-merge inspection.

When It Applies

The paper motivates this shift as a response to code review becoming a bottleneck in human-AI teams: the volume of AI-generated artefacts increases substantially, making exhaustive manual pre-merge inspection impractical, while the opacity of AI-generated outputs makes reasoning about their correctness more difficult. It assumes AI agents and monitoring mechanisms are embedded within the system’s operational lifecycle, tracking execution behaviour after deployment rather than only static code at merge time. The paper presents this as a proposal in a 2026 vision paper — it states that review becomes “temporally distributed, adaptive, and tightly coupled with system operation,” dissolving the boundary between development and deployment — rather than a practice that has been implemented or empirically evaluated.

Trustworthy AI Software Engineers, Evidence-Centric Inspection, Agentic Engineer