--- author: "Umesh Malik" canonical: "https://umesh-malik.com/topics/ai-coding-agents" description: "Deep dives into AI coding agents: agentic workflows, AGENTS.md, enterprise security, and the tools shaping autonomous software development. Written by Umesh Malik." title: "AI Coding Agents — Agentic AI for Developers | Umesh Malik" tokens: 3601 generator: "scripts/generate-page-markdown.mjs" --- Topic Hub # AI Coding Agents AI coding agents represent the next shift in software development — systems that don't just complete code but take multi-step actions: running tests, opening pull requests, fixing failing CI, and iterating without waiting for human prompts. These articles cover the architecture, security implications, enterprise deployment patterns, and the competitive landscape of autonomous coding tools. AI Agents Agentic AI AGENTS.md Enterprise AI MCP ## Articles 22 [![How server-side compaction replaces a long agent transcript with a single summary block once input tokens cross the trigger, and what is kept versus permanently dropped](https://umesh-malik.com/blog/agent-context-compaction-what-survives-cover.png) AI Engineering • Aug 12, 2026 ### Agent context compaction: keep what the 150K cutoff drops Agent context compaction drops every block before the summary at 150K tokens. What survives, what instructions silently replaces, and the usage field that lies. 9 min read Read more →](https://umesh-malik.com/blog/agent-context-compaction-what-survives) [![Cover showing the four-layer agent containment stack — deny egress, scope identity, watch live, kill fast — alongside the AISI evaluation figures of 122 runs, 10 off-scope runs and containment in under an hour](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access-cover.png) AI Security • Aug 8, 2026 ### How to sandbox an AI agent: 10 of 122 eval runs went rogue AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects. 10 min read Read more →](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access) [![Ads for AI agents: TIME serves markdown with sponsored FAQ blocks to AI crawlers and HTML to humans](https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers-cover.png) AI Engineering • Aug 6, 2026 ### Ads for AI Agents: TIME Serves Crawlers a Different Site Ads for AI agents are live. TIME serves crawlers a 42 KB markdown site with sponsored blocks; humans and Googlebot get 1.2 MB of HTML. I measured all of it. 10 min read Read more →](https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers) [![Agent harness design diagram: a model's reasoning discarded each turn versus reasoning retained and context compacted across turns](https://umesh-malik.com/blog/agent-harness-design-arc-agi-3-cover.png) AI Engineering • Aug 5, 2026 ### Agent Harness Design: Why an ARC-AGI-3 Score Tripled Agent harness design decided a benchmark: OpenAI's ARC-AGI-3 score went 13.3% → 38.3% with zero model changes. What that means for your agent loop. 11 min read Read more →](https://umesh-malik.com/blog/agent-harness-design-arc-agi-3) [![MCP write controls diagram: a tool call passing through a policy layer that allows, labels, or blocks it before the handler runs](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard-cover.png) AI Security • Aug 5, 2026 ### MCP Write Controls: Lessons from Cloudflare WriteGuard MCP write controls decide what your agents can break. Cloudflare's WriteGuard shows the pattern: per-tool risk tiers, agent attribution, central audit. 13 min read Read more →](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard) [![Cover card titled The Gate, subtitled Thousands of tickets. One agent., with three statistics: 4 risk tiers, Cloudflare's MCP portal growing 13 to 27 servers, and tool annotations marked untrusted per the MCP spec](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard-cover.png) AI Security • Aug 5, 2026 ### How to Secure MCP Write Tools: Cloudflare's WriteGuard Lesson How to secure MCP write tools: the spec puts confirmation on the client — the one layer you don't control. Cloudflare's WriteGuard moves the gate server-side. 11 min read Read more →](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard) [![Diagram of an AI agent paying an API over the x402 HTTP 402 protocol using a Cloudflare Virtual Wallet](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments-cover.png) AI Engineering • Aug 4, 2026 ### Cloudflare Wallets and x402: How AI Agents Pay for APIs Cloudflare Wallets and x402 explained: how AI agents get a spending identity, how HTTP 402 payments work, and what breaks when your agent holds a budget. 10 min read Read more →](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments) [![Production-grade AI agents — the funnel from 353,000 course registrations down to 6,000 shipped agent projects](https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap-cover.png) AI Engineering • Aug 4, 2026 ### Production-Grade AI Agents: The Vibe-to-Live Gap Production-grade AI agents need more than a working demo. 353,000 signed up to learn agents; 6,000 shipped a capstone. Here's exactly what closes the gap. 11 min read Read more →](https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap) [![Agent-to-human delegation — an AI agent handing a task to a human coworker in a chat tool](https://umesh-malik.com/blog/agent-to-human-delegation-cover.png) AI Engineering • Aug 3, 2026 ### Agent-to-Human Delegation: Why Your AI Shouldn't DM Coworkers Agent-to-human delegation is the pattern nobody designed for: your AI messaging a coworker. Why it lands badly, and the handoff rules that fix it. 10 min read Read more →](https://umesh-malik.com/blog/agent-to-human-delegation) [![DeepSeek V4 Flash 0731 agent benchmark results compared against the preview build and V4-Pro Preview](https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks-cover.png) LLM Engineering • Aug 1, 2026 ### DeepSeek V4 Flash 0731 Benchmarks: 13B Active Beats 1.6T DeepSeek V4 Flash 0731 benchmarks: same 284B/13B architecture as the preview, re-post-trained only — and it beats the 1.6T V4-Pro Preview on nine agent tests. 9 min read Read more →](https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks) [![ChatGPT super app reform showing the Apps SDK built on MCP with inline app UIs and the App Directory](https://umesh-malik.com/blog/chatgpt-apps-sdk-cover.png) AI Engineering • Jul 11, 2026 ### ChatGPT Apps SDK and the Super App Reform: How Apps in ChatGPT Work (2026) The ChatGPT Apps SDK explained: how apps in ChatGPT work, why it's built on MCP, who the launch partners are, and how developers build and submit apps. 7 min read Read more →](https://umesh-malik.com/blog/chatgpt-apps-sdk-super-app-guide) [![GPT-5.6 Sol vs Terra vs Luna comparison showing price, coding strength, and cost per task](https://umesh-malik.com/blog/gpt-5-6-sol-terra-luna-cover.png) LLM Engineering • Jul 11, 2026 ### GPT-5.6 Sol vs Terra vs Luna: The Routing Strategy That Cuts Cost GPT-5.6 Sol vs Terra vs Luna compared on price, coding, latency, and cost per task — plus a routing strategy that cuts your bill without wrecking quality. 5 min read Read more →](https://umesh-malik.com/blog/gpt-5-6-sol-vs-terra-vs-luna) [![OpenAI GPT-5.6 family showing Sol, Terra, and Luna tiers with benchmarks, pricing, and 1.05M context](https://umesh-malik.com/blog/gpt-5-6-cover.png) LLM Engineering • Jul 11, 2026 ### GPT-5.6 API: Pricing, Thinking Modes, and the Shared Context Trap GPT-5.6 API pricing ($1-$30/1M), the Ultra and Max thinking modes, and a 1.05M context window that is shared — with the fine print that breaks agent loops. 10 min read Read more →](https://umesh-malik.com/blog/openai-gpt-5-6-sol-terra-luna-guide) [![Editorial cover: build enterprise-grade AI agents for free with open-source MaxKB, $0 API cost, self-hosted](https://umesh-malik.com/blog/build-enterprise-ai-agents-free-cover.png) AI Engineering • Jul 8, 2026 ### How to Build Enterprise-Grade AI Agents for Free (MaxKB, 2026) How to build enterprise-grade AI agents for free in 2026: a hands-on MaxKB + local LLM guide to RAG precision, security, and $0 API cost. 10 min read Read more →](https://umesh-malik.com/blog/build-enterprise-ai-agents-free) [![The Agentic Browsing category in PageSpeed Insights scoring a website for AI agents alongside Performance, Accessibility, Best Practices and SEO](https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready-cover.png) AI Engineering • Jun 19, 2026 ### Agentic Browsing in PageSpeed Insights: How to Make Your Website AI-Ready (2026) Agentic browsing in PageSpeed Insights grades your site for AI agents, not just humans. What the category checks, why Google added it, how to pass it. 9 min read Read more →](https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready) [![Editorial cover: the demo-to-production gap for autonomous AI agents in 2026](https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026-cover.png) AI Engineering • Jun 14, 2026 ### Why 77% of Autonomous AI Agents Never Reach Production (2026) Only 23% of autonomous AI agents reach production in 2026. The demo-to-production gap, why agents fail, and the playbook the winners actually use. 9 min read Read more →](https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026) [![Architecture of a production Model Context Protocol server on Cloudflare Workers](https://umesh-malik.com/blog/how-to-build-mcp-server-cover.png) AI Engineering • Jun 8, 2026 ### How to Build an MCP Server: A Step-by-Step Guide (2026) How to build an MCP server, step by step: JSON-RPC 2.0, the Streamable HTTP transport, typed tools, and agent discovery — from a real one I shipped. 9 min read Read more →](https://umesh-malik.com/blog/how-to-build-mcp-server) [![Nvidia OpenClaw strategy cover showing task assignment, agent execution, guardrails, and enterprise runtime control](https://umesh-malik.com/blog/nvidia-openclaw-cover.png) AI Coding Agents & DX • Mar 17, 2026 ### Nvidia OpenClaw Explained: Your AI Agent Strategy (GTC 2026) At GTC 2026, Jensen Huang said every company needs a Nvidia OpenClaw strategy. Here is what it means and what U.S. teams should do next. 6 min read Read more →](https://umesh-malik.com/blog/nvidia-openclaw-strategy-ai-agent-plan) [![Anthropic Code Review cover showing multi-agent pull request review across repository context and custom review rules](https://umesh-malik.com/blog/anthropic-code-review-cover.png) AI Coding Agents & DX • Mar 10, 2026 ### Claude Code Review: How It Works, Pricing & Setup Anthropic's Claude Code Review runs multi-agent PR reviews for $15-$25 each. How it works, pricing, REVIEW.md setup, and where it beats linters. 6 min read Read more →](https://umesh-malik.com/blog/anthropic-code-review-claude-code-guide) [![Agentic AI enterprise security cover showing identity, prompt injection, policy gates, and observability](https://umesh-malik.com/blog/agentic-ai-enterprise-security-cover.png) AI Security • Mar 9, 2026 ### Agentic AI Security: The New Enterprise Control Model Agentic AI security breaks the old enterprise trust model. How to fix identity, delegated authority, prompt injection defense, and tool-level policy in 2026. 8 min read Read more →](https://umesh-malik.com/blog/agentic-ai-enterprise-security-model) [![OpenAI GPT-5.4 overview showing professional work, coding, computer use, and 1M context](https://umesh-malik.com/blog/gpt-5-4-cover.png) LLM Engineering • Mar 6, 2026 ### GPT-5.4 for Agents: Computer Use, MCP Tool Calls, and Real Pricing GPT-5.4's native computer use and MCP tool calls are the real upgrade for agents. What holds up in a loop, what the 1M context costs, and how Pro compares. 12 min read Read more →](https://umesh-malik.com/blog/openai-gpt-5-4-complete-guide) [![Cover for the Claude Fable 5 deep-dive guide: capabilities, the $10/$50 cost math, API behavior, and when to use Anthropic's most capable model](https://umesh-malik.com/blog/claude-fable-5-guide-cover.png) LLM Engineering • Jul 2, 2026 ### Claude Fable 5: Capabilities, Cost & When to Use It (2026) Claude Fable 5 is Anthropic's most capable model yet. The honest deep-dive: capabilities, the $10/$50 cost math, API behavior, and when to use it. 12 min read Read more →](https://umesh-malik.com/blog/claude-fable-5-guide) ## Frequently Asked Questions ### What are AI coding agents? AI coding agents are AI systems that autonomously write, review, test, and deploy code by taking multi-step actions in a development environment. Unlike simple code completion, they run commands, read documentation, make pull requests, and iterate based on test results or feedback — operating with a degree of autonomy rather than completing a single prompt. ### What is AGENTS.md and why does it matter for AI coding agents? AGENTS.md is a project-level instruction file — similar in concept to a README — that tells AI coding agents how to work within a specific repository. It documents coding conventions, forbidden operations, context about the codebase, and agent-specific instructions. Well-written AGENTS.md files reduce agent errors and produce more consistent results without requiring explicit prompting each session. ### What security risks do AI coding agents introduce in enterprise environments? AI coding agents face several enterprise security risks: prompt injection (where malicious content in code, documentation, or issues hijacks agent actions), over-permissioned tool access, supply chain attacks via crafted dependencies, and data exfiltration through agent outputs. Secure deployments require sandboxing agent execution, scoping tool permissions, and requiring human approval for sensitive operations like deployments or secrets access. ### How are major AI companies positioning themselves in the AI agent space? Anthropic, OpenAI, and NVIDIA are each building distinct agent platforms. Anthropic focuses on Claude Code for developer workflows and the Model Context Protocol (MCP) for tool standardization. OpenAI is embedding agent capabilities directly into GPT-5 models. NVIDIA's OpenClaw targets enterprise agentic orchestration at scale. The Model Context Protocol is emerging as a cross-vendor standard for connecting agents to tools and data sources. ## Related Topics [Claude Code →](https://umesh-malik.com/topics/claude-code)[LLM Engineering →](https://umesh-malik.com/topics/llm-engineering) [All Articles →](https://umesh-malik.com/blog)