Supervision was a schedule — a monitor that varies when it looks beats one that looks often, and omitting oversight became a crime in Italy twelve days ago

Inspection of an agent's trajectory is a schedule, not a checkbox: adapting when you look beats shortening the interval, and Italy already attaches criminal and discoverable-record consequences to an oversight omission that the AI Act's own Article 14 will not reach until December 2027.

Post

A reviewer opens the pull request at the end of a long agent run. That is the first time anyone looked, and for most teams the only inspection point.

A paper posted to arXiv on 8 October makes that moment the variable. Researchers at Singapore Management University and University College London built a runtime monitor that varies when it inspects an agent's trajectory instead of inspecting on a fixed clock.

Flat:

  1. Across 300 SWE-bench Lite tasks: 42.33% resolved on mini-swe-agent against 17.00% unmonitored, and 39.67% on Moatless against 24.00%. The abstract reports these as "+25.33%" and "+15.67%" — percentage points, not relative gains; relative, the first is +149%.

  2. The mechanism is not more supervision. Fixed-interval monitors at every 3, 5 and 7 steps landed 33.33%, 34.00% and 26.33% — not monotone in the interval. The lever is tightening inspection after a severe correction and relaxing it after a mild one. It also cost less: 1.03M tokens per task against 1.42M unmonitored.

  3. Before you read this as settled: on Moatless the strongest baseline reached 35.33% against Cadence's 39.67%, a gap the paper reports as not statistically significant. One agent shows a result; the other a direction.

  4. Now the European part, and it is not Article 14. Article 14's human-oversight duty binds Annex III high-risk systems from 2 December 2027 and Annex I from 2 August 2028 after the Digital Omnibus. What already happened is Italian. D.Lgs. 160/2026 has been in force since 30 September: omitting human-oversight measures on a high-risk system is a criminal offence, with corporate liability attached, and in a civil claim the court can order production of your records while causation is presumed unless you rebut it. D.Lgs. 179/2026 enters into force on 23 October and names who asks: ACN, the cyber agency. In Germany that seat is the Bundesnetzagentur.

Your coding agent is not a high-risk system. The system it helps you build may be, and its trace is then discoverable evidence about how you built it.

My Monday: take ten agent runs from last week. For each, note the step where it went wrong and the step where anyone looked. If the only match is the pull request, your interval is one.

An LLM watching a trajectory is not human oversight — and a monitor you cannot timestamp is not oversight.

When did you last look mid-run?

#AgenticAI #EUAIAct #CodingAgents #AIGovernance #SoftwareEngineering

AI disclosure: the narration voice, the cover art and the brand ident animation in this video are AI-generated. The script, the claims and the source checks are mine.

First comment

Sources, the paper first.

Cadence: Strategic Guidance for Coding Agents — arXiv 2610.12269, v1 submitted 8 October 2026. Every figure above comes from the HTML full text, including the per-monitor tables the abstract does not carry, and the affiliations from the paper's own front matter: https://arxiv.org/abs/2610.12269

D.Lgs. 9 settembre 2026, n. 160, on police use of AI and on civil and criminal liability — the instrument behind Art. 437-bis of the criminal code, the new predicate offence in D.Lgs. 231/2001, and the record-production and presumed-causation provisions. GU n. 214 of 15 September 2026, in force 30 September 2026: https://www.normattiva.it/eli/id/2026/09/15/26G00179/ORIGINAL

D.Lgs. 7 ottobre 2026, n. 179, the second adequation decree, on the national authorities' powers and AI in training. GU Serie Generale n. 234 of 8 October 2026, in force 23 October 2026. Art. 1(2) designates AgID and ACN as the national AI authorities, AgID as notifying authority and ACN among the market surveillance authorities: https://www.normattiva.it/eli/id/2026/10/08/26G00200/ORIGINAL

AI Act Article 14, human oversight — 14(4)(d) and (e) are the override and safe-stop duties, with the application dates at the foot of the page: 2 December 2027 for Annex III, 2 August 2028 for Annex I: https://artificialintelligenceact.eu/article/14/

AI Act Article 99, penalties — the EUR 35,000,000 / 7% ceiling that the Italian coverage quotes is 99(3), for the Article 5 prohibitions. Operator duties and Article 50 transparency sit at 99(4): EUR 15,000,000 or 3%: https://artificialintelligenceact.eu/article/99/

Regulation (EU) 2026/1744, the Digital Omnibus on AI, in force 27 July 2026 — the instrument that moved high-risk to 2 December 2027 and 2 August 2028: https://eur-lex.europa.eu/eli/reg/2026/1744/oj

KI-MIG, the German implementing act, in force since 29 July 2026, with the Bundesnetzagentur as market surveillance authority — the German counterpart to the ACN designation above: https://www.gesetze-im-internet.de/ki-mig/

One point I cut for length: the token cost goes the other way on the second agent — 0.48M per task against 0.32M unmonitored on Moatless, where on mini-swe-agent the monitored run was cheaper than the unmonitored one. Supervision paid for itself on the weaker agent and cost money on the stronger one, which is the more useful finding for anyone deciding where to spend an inspection budget.

AI disclosure: the narration voice, the cover art and the brand ident animation in this video are AI-generated. The script, the claims and the source checks are mine.

Claims

Sources

Corrections

A coverage date is not an event date, and this time the check changed the edition. An English-language trade piece headlined "Italy's AI decree 179/2026 takes effect October 23" and then dated the instrument to 9 September 2026, published 15 September in Gazzetta Ufficiale n. 214, while attributing to it the criminal offence, the 231/2001 predicate and the civil-liability provisions. Those are two different decrees. The Normattiva register shows D.Lgs. 179/2026 dated 7 October 2026, published in GU Serie Generale n. 234 of 8 October 2026, in force 23 October 2026, and titled for the national authorities' powers and AI in training. The September dates and every liability provision belong to D.Lgs. 9 settembre 2026, n. 160, GU n. 214 of 15 September 2026, in force 30 September 2026. Had the conflation stood, the edition would have told readers a criminal liability regime arrives on 23 October when it has been live since 30 September, and would have cited the wrong instrument for all of it. Both decrees are cited separately and each date comes from the register record, not the coverage.

Affiliations taken from the work's own front matter, and available this time. The arXiv abs record for 2610.12269 prints no institutions, so the HTML rendering at arxiv.org/html/2610.12269v1 was tried next and carries them: Minxing Wang and Yintong Huo at Singapore Management University, He Ye and Earl T. Barr at University College London. The post names both institutions on that basis. No institution was taken from an aggregator.

Identifier verified before any figure was used, not the topic. 2610.12269's title matches the story exactly and its YYMM is consistent with an 8 October 2026 submission. Four adjacent October papers returned by the same searches were considered and not used: 2610.10610 (Code Understanding is a Bottleneck for Coding Agents), 2610.09944 (AgentTime), 2610.09264 (Package Hallucination Attacks through rule files, which overlaps the 9 October edition), and 2610.13361 (AgentSWE).

A conflation smell inspected and found real but mislabelled. The abstract's "+25.33%" and "+15.67%" match the headline gaps exactly, which is the smell. Reading the tables, they are percentage-point differences in resolve rate (42.33 - 17.00 and 39.67 - 24.00), not relative gains. Published as percentage points with the relative figure given once, so a reader cannot take the abstract's wording for a 149% improvement.

A metric dropped rather than published, because two sources disagree. The prison-term ranges in Art. 437-bis are reported as 1-5 years for danger to life or safety and 2-8 where State security is engaged by one English-language source, and as 2-8 years for concrete demonstrable danger, 2-6 for alteration by an outsider and 3-10 in national-security cases by the Italian legal press. No term appears in the post or the video; the edition states that the omission is a criminal offence and leaves the sentencing out.

A limit stated rather than smoothed over. On Moatless the strongest baseline reaches 35.33% against Cadence's 39.67% and the paper calls that gap not statistically significant. The post carries it as item three rather than leaving the reader with two clean wins.

A ceiling corrected against the Article it actually sits in. Coverage of the Italian decrees quotes EUR 35,000,000 or 7%. That is Article 99(3), for the Article 5 prohibitions. Operator duties and Article 50 transparency are Article 99(4): EUR 15,000,000 or 3%. The first comment says which is which rather than repeating the larger number.

Cite keys reconciled against the published vault before the archive ran, not after. Four keys were regenerated for documents the vault already holds - euaiactexpl2026human, euaiactexpl2026penalties, eurlex2026regulatio and bundesamtfu2026kimig - by matching publisher and title strings to the earlier spelling, and three were created after checking all 390 existing keys: arxiv2026cadence, normattiva2026reati and normattiva2026adeguamen. The two Italian decrees were titled from their subject rather than their number, because citekey() derives its tail from the title's first token and "D.Lgs." in both would have collided on "dlgs".

AI disclosure

The video for this edition contains AI-generated media: the narration is a synthetic voice, the cover art and any background imagery are generated, and the brand ident animation is generated. The script, the claims and the source verification are human-authored and human-checked. Assets carry IPTC DigitalSourceType and C2PA Content Credentials.