Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Agentic engineering patterns that survive contact with production

The interesting question about coding agents in 2026 is not whether they work. It is which patterns hold up once you point them at code that has consequences. After roughly eighteen months of running Claude, Codex, and a rotating cast of…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

The interesting question about coding agents in 2026 is not whether they work. It is which patterns hold up once you point them at code that has consequences. After roughly eighteen months of running Claude, Codex, and a rotating cast of free-tier models against a real equity research stack at Leviathan, a small set of patterns keep paying for themselves. The rest get pruned within a week.



This note is a field log, not a tutorial. The frame is engineering, not capability. The question I keep asking is: what survives contact with production?






Context is the budget, not the prompt



The mental model that broke first was treating context as a free resource. A 1M token window does not mean you can stream 1M tokens of garbage into the model. It means you have a budget. Every token of tool output, every diff, every retrieved chunk is a withdrawal from a fund that determines how much reasoning the model can do downstream.



The pattern that holds up is structured compression at the tool boundary. When a tool returns 50KB of JSON, do not pass 50KB into the model. Pass a deterministic summary built from the JSON: counts, top-K items, the specific fields the downstream step needs. Keep the raw blob on disk under a handle. If the model needs more, it can ask.



On Leviathan this looks concrete: every read-heavy bash command goes through RTK, a Rust filter that compresses git status, test output, grep results, and file reads by 60-90 percent before they ever touch the model's context window.



Token discipline matters more than model size. A 200K window with disciplined compression outperforms a 1M window with raw tool dumps. We measured this on real Claude Code sessions. The 1M model with raw output ran out of useful reasoning before completing the same task the 200K model finished cleanly.



The deeper principle: the model is a function of its inputs. Garbage in, garbage out applies with embarrassing literalness to LLMs. Engineering an agent is mostly engineering the inputs.






Tools are an interface design problem



The second pattern that survived is treating tool definitions like an API design exercise, not an afterthought.



Bad tool design dominates failure modes. The classic symptoms:




  • Tools that return too much (the 50KB JSON problem above).

  • Tools that take ambiguous parameters and require the model to guess.

  • Tools that silently truncate, so the model thinks it has the whole picture when it does not.

  • Tools that overlap, so the model has to choose between three roughly equivalent ways to do the same thing.



The fix is to design tools the way you would design a CLI for a sleepy junior engineer at 3am. One job each. Clear parameter names. Honest error messages. Pre-validated inputs. Output capped at a sensible size with explicit pagination if more is needed.




# Bad: overloaded, ambiguous, dumps raw API response
def search(query: str, options: dict = None) -> dict: ...

# Good: one job, explicit shape, capped output
def search_filings(
ticker: str,
form_type: Literal["10-K", "10-Q", "8-K"],
since: date,
limit: int = 10,
) -> list[FilingRef]: ...






The second form is roughly three times more reliable in agent loops in my testing. The reason is not subtle. The model has fewer ways to be wrong.



A useful gut check from Anthropic's own writeup: if you cannot describe what a tool does in one sentence, the tool is too broad. Split it.






Planner and executor: the simplest split that works



For any task that takes more than a handful of tool calls, the pattern that holds up is planner-executor separation. One model (or one model call) plans. A separate call (or pool of calls) executes the plan step by step.



Concretely, on Leviathan's research pipeline:





  1. Planner reads the goal ("explain the moat dynamics in $TICKER") and writes a sequenced list of subtasks, each with the tool it expects to use.


  2. Executor(s) run each subtask in isolation. Each one only sees the subtask description plus the artifacts produced by upstream steps. They do not see the global goal.


  3. Synthesizer stitches the artifacts together into the final output.



This buys you three things:




  • The planner uses long-context reasoning once, not repeatedly.

  • Executors have small, focused context windows and run cheap.

  • You can fan out executors in parallel. Independent subtasks finish in wall-clock time proportional to the slowest one, not the sum.



The cost is one extra layer of indirection. The benefit is roughly a $0.50 task instead of a $5 task, and an 8-14 point lift on standard agentic benchmarks like SWE-bench Verified.



The pattern is closest to the orchestrator-worker decomposition described in Anthropic's Building Effective Agents post. The variations are mostly about how strict the planner is and how much autonomy each executor has.



The failure mode to watch for is planner overfitting. The planner writes a plan that looks plausible but contains a step that cannot actually be executed (the tool does not exist, the data is not available, the assumption is wrong). The fix is to make executors return structured failures with context, and re-run the planner with the failures included in its input.






Evaluation is the part nobody wants to build



Every agent system I have shipped or watched ship has reached a point where it works on the cases the team thought about and fails on the cases they did not. The only way out is evaluation.



The pattern that holds up: a small, fast evaluation harness that runs on every change. Not a Kaggle-style leaderboard. Not a research benchmark. A handful of canonical tasks, each with a deterministic checker, that you can run in under a minute and that tells you whether the agent got worse.



For Leviathan's equity research agent, the harness has four task shapes:



$$

\text{score} = \frac{1}{N} \sum_{i=1}^{N} \mathbb{1}{\text{checker}_i(\text{agent output}_i) = \text{pass}}

$$



Where the four shapes are:




  1. Forensic accounting: given a ticker with known fraud signals, does the agent surface the right red flags?

  2. DCF reconstruction: given a public filing, does the agent produce a DCF whose intrinsic value falls within a tolerance band of the analyst consensus?

  3. Peer selection: given a target ticker, does the agent pick a peer set that overlaps with a curated human-picked set by at least 60 percent?

  4. Citation discipline: does every quantitative claim in the output trace back to a retrieved source?



That last one matters. Models hallucinate citations. Without an automated check, this rot accumulates silently until someone notices in production.



The harness is roughly 800 lines of Python. It is the most valuable 800 lines in the codebase.






What gets pruned



A few patterns that looked promising in 2025 did not hold up:





  • Long autonomous loops without checkpointing. Anything over about ten tool calls without human or evaluator intervention drifts. The fix is checkpointing every few steps and asking "is the next action still on the path to the goal?"


  • Self-correction loops that rely only on the model's judgment. The model is bad at noticing its own mistakes in the same context window where it made them. Self-critique works much better when the critic is a fresh context.


  • Memory systems that try to remember everything. Most "agent memory" implementations end up as expensive vector databases that surface stale information. Persistent files with explicit naming and explicit invalidation are usually better.



The throughline across the patterns that survive: they treat the model as a reasoning component embedded in a system, not a magic oracle. The engineering work is on the system. The model is one component. A good one, but one.






Where this is going



The trajectory I am betting on, after watching Claude 4.6 then 4.7 then GPT-5.5 land in quick succession: the models keep getting better at planning and at calling tools, but the gap between "demo agent" and "production agent" stays wide. That gap is mostly engineering. Context discipline, tool interface design, planner-executor decomposition, and evaluation harnesses are the load-bearing pieces.



The teams that win in the next two years are not the ones with the biggest models. They are the ones that have built the infrastructure to use those models with discipline.



That is the bet, anyway. We will see how it ages.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Agentic engineering patterns that survive contact with production

Thematisch verwandte Begriffe: Agentic, engineering, patterns, that · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-94097 | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. Th…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick