--- author: "Umesh Malik" canonical: "https://umesh-malik.com/topics/ai-coding-agents" description: "Deep dives into AI coding agents: agentic workflows, AGENTS.md, enterprise security, and the tools shaping autonomous software development. Written by Umesh Malik." title: "AI Coding Agents — Agentic AI for Developers | Umesh Malik" tokens: 5993 generator: "scripts/generate-page-markdown.mjs" --- Topic Hub # AI Coding Agents AI coding agents write, review, test, and ship code with a degree of autonomy — not one-shot autocomplete. These articles cover agentic workflows, AGENTS.md, enterprise security, and the tools actually used in production. Agentic AIAGENTS.mdMCPSecurity ## Articles 39 [![How server-side compaction replaces a long agent transcript with a single summary block once input tokens cross the trigger, and what is kept versus permanently dropped](https://umesh-malik.com/blog/agent-context-compaction-what-survives-cover.png) AI Engineering • Aug 12, 2026 ### Agent context compaction: keep what the 150K cutoff drops Agent context compaction drops every block before the summary at 150K tokens. What survives, what instructions silently replaces, and the usage field that lies. 9 min read Read more →](https://umesh-malik.com/blog/agent-context-compaction-what-survives) [![Cover showing the four-layer agent containment stack — deny egress, scope identity, watch live, kill fast — alongside the AISI evaluation figures of 122 runs, 10 off-scope runs and containment in under an hour](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access-cover.png) AI Security • Aug 8, 2026 ### How to sandbox an AI agent: 10 of 122 eval runs went rogue AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects. 10 min read Read more →](https://umesh-malik.com/blog/sandbox-ai-agent-internet-access) [![Ads for AI agents: TIME serves markdown with sponsored FAQ blocks to AI crawlers and HTML to humans](https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers-cover.png) AI Engineering • Aug 6, 2026 ### Ads for AI Agents: TIME Serves Crawlers a Different Site Ads for AI agents are live. TIME serves crawlers a 42 KB markdown site with sponsored blocks; humans and Googlebot get 1.2 MB of HTML. I measured all of it. 10 min read Read more →](https://umesh-malik.com/blog/ads-for-ai-agents-time-markdown-crawlers) [![Agent harness design diagram: a model's reasoning discarded each turn versus reasoning retained and context compacted across turns](https://umesh-malik.com/blog/agent-harness-design-arc-agi-3-cover.png) AI Engineering • Aug 5, 2026 ### Agent Harness Design: Why an ARC-AGI-3 Score Tripled Agent harness design decided a benchmark: OpenAI's ARC-AGI-3 score went 13.3% → 38.3% with zero model changes. What that means for your agent loop. 11 min read Read more →](https://umesh-malik.com/blog/agent-harness-design-arc-agi-3) [![MCP write controls diagram: a tool call passing through a policy layer that allows, labels, or blocks it before the handler runs](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard-cover.png) AI Security • Aug 5, 2026 ### MCP Write Controls: Lessons from Cloudflare WriteGuard MCP write controls decide what your agents can break. Cloudflare's WriteGuard shows the pattern: per-tool risk tiers, agent attribution, central audit. 13 min read Read more →](https://umesh-malik.com/blog/mcp-write-controls-cloudflare-writeguard) [![Cover card titled The Gate, subtitled Thousands of tickets. One agent., with three statistics: 4 risk tiers, Cloudflare's MCP portal growing 13 to 27 servers, and tool annotations marked untrusted per the MCP spec](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard-cover.png) AI Security • Aug 5, 2026 ### How to Secure MCP Write Tools: Cloudflare's WriteGuard Lesson How to secure MCP write tools: the spec puts confirmation on the client — the one layer you don't control. Cloudflare's WriteGuard moves the gate server-side. 11 min read Read more →](https://umesh-malik.com/blog/secure-mcp-write-tools-writeguard) [![Diagram of an AI agent paying an API over the x402 HTTP 402 protocol using a Cloudflare Virtual Wallet](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments-cover.png) AI Engineering • Aug 4, 2026 ### Cloudflare Wallets and x402: How AI Agents Pay for APIs Cloudflare Wallets and x402 explained: how AI agents get a spending identity, how HTTP 402 payments work, and what breaks when your agent holds a budget. 10 min read Read more →](https://umesh-malik.com/blog/cloudflare-wallets-x402-agent-payments) [![Production-grade AI agents — the funnel from 353,000 course registrations down to 6,000 shipped agent projects](https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap-cover.png) AI Engineering • Aug 4, 2026 ### Production-Grade AI Agents: The Vibe-to-Live Gap Production-grade AI agents need more than a working demo. 353,000 signed up to learn agents; 6,000 shipped a capstone. Here's exactly what closes the gap. 11 min read Read more →](https://umesh-malik.com/blog/production-grade-ai-agents-vibe-to-live-gap) [![Agent-to-human delegation — an AI agent handing a task to a human coworker in a chat tool](https://umesh-malik.com/blog/agent-to-human-delegation-cover.png) AI Engineering • Aug 3, 2026 ### Agent-to-Human Delegation: Why Your AI Shouldn't DM Coworkers Agent-to-human delegation is the pattern nobody designed for: your AI messaging a coworker. Why it lands badly, and the handoff rules that fix it. 10 min read Read more →](https://umesh-malik.com/blog/agent-to-human-delegation) [![DeepSeek V4 Flash 0731 agent benchmark results compared against the preview build and V4-Pro Preview](https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks-cover.png) LLM Engineering • Aug 1, 2026 ### DeepSeek V4 Flash 0731 Benchmarks: 13B Active Beats 1.6T DeepSeek V4 Flash 0731 benchmarks: same 284B/13B architecture as the preview, re-post-trained only — and it beats the 1.6T V4-Pro Preview on nine agent tests. 9 min read Read more →](https://umesh-malik.com/blog/deepseek-v4-flash-0731-benchmarks) [![ChatGPT super app reform showing the Apps SDK built on MCP with inline app UIs and the App Directory](https://umesh-malik.com/blog/chatgpt-apps-sdk-cover.png) AI Engineering • Jul 11, 2026 ### ChatGPT Apps SDK and the Super App Reform: How Apps in ChatGPT Work (2026) The ChatGPT Apps SDK explained: how apps in ChatGPT work, why it's built on MCP, who the launch partners are, and how developers build and submit apps. 7 min read Read more →](https://umesh-malik.com/blog/chatgpt-apps-sdk-super-app-guide) [![GPT-5.6 Sol vs Terra vs Luna comparison showing price, coding strength, and cost per task](https://umesh-malik.com/blog/gpt-5-6-sol-terra-luna-cover.png) LLM Engineering • Jul 11, 2026 ### GPT-5.6 Sol vs Terra vs Luna: The Routing Strategy That Cuts Cost GPT-5.6 Sol vs Terra vs Luna compared on price, coding, latency, and cost per task — plus a routing strategy that cuts your bill without wrecking quality. 5 min read Read more →](https://umesh-malik.com/blog/gpt-5-6-sol-vs-terra-vs-luna) [![OpenAI GPT-5.6 family showing Sol, Terra, and Luna tiers with benchmarks, pricing, and 1.05M context](https://umesh-malik.com/blog/gpt-5-6-cover.png) LLM Engineering • Jul 11, 2026 ### GPT-5.6 API: Pricing, Thinking Modes, and the Shared Context Trap GPT-5.6 API pricing ($1-$30/1M), the Ultra and Max thinking modes, and a 1.05M context window that is shared — with the fine print that breaks agent loops. 10 min read Read more →](https://umesh-malik.com/blog/openai-gpt-5-6-sol-terra-luna-guide) [![Editorial cover: build enterprise-grade AI agents for free with open-source MaxKB, $0 API cost, self-hosted](https://umesh-malik.com/blog/build-enterprise-ai-agents-free-cover.png) AI Engineering • Jul 8, 2026 ### How to Build Enterprise-Grade AI Agents for Free (MaxKB, 2026) How to build enterprise-grade AI agents for free in 2026: a hands-on MaxKB + local LLM guide to RAG precision, security, and $0 API cost. 10 min read Read more →](https://umesh-malik.com/blog/build-enterprise-ai-agents-free) [![The Agentic Browsing category in PageSpeed Insights scoring a website for AI agents alongside Performance, Accessibility, Best Practices and SEO](https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready-cover.png) AI Engineering • Jun 19, 2026 ### Agentic Browsing in PageSpeed Insights: How to Make Your Website AI-Ready (2026) Agentic browsing in PageSpeed Insights grades your site for AI agents, not just humans. What the category checks, why Google added it, how to pass it. 9 min read Read more →](https://umesh-malik.com/blog/agentic-browsing-pagespeed-ai-ready) [![Editorial cover: the demo-to-production gap for autonomous AI agents in 2026](https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026-cover.png) AI Engineering • Jun 14, 2026 ### Why 77% of Autonomous AI Agents Never Reach Production (2026) Only 23% of autonomous AI agents reach production in 2026. The demo-to-production gap, why agents fail, and the playbook the winners actually use. 9 min read Read more →](https://umesh-malik.com/blog/autonomous-ai-agents-production-gap-2026) [![Architecture of a production Model Context Protocol server on Cloudflare Workers](https://umesh-malik.com/blog/how-to-build-mcp-server-cover.png) AI Engineering • Jun 8, 2026 ### How to Build an MCP Server: A Step-by-Step Guide (2026) How to build an MCP server, step by step: JSON-RPC 2.0, the Streamable HTTP transport, typed tools, and agent discovery — from a real one I shipped. 9 min read Read more →](https://umesh-malik.com/blog/how-to-build-mcp-server) [![Nvidia OpenClaw strategy cover showing task assignment, agent execution, guardrails, and enterprise runtime control](https://umesh-malik.com/blog/nvidia-openclaw-cover.png) AI Coding Agents & DX • Mar 17, 2026 ### Nvidia OpenClaw Explained: Your AI Agent Strategy (GTC 2026) At GTC 2026, Jensen Huang said every company needs a Nvidia OpenClaw strategy. Here is what it means and what U.S. teams should do next. 6 min read Read more →](https://umesh-malik.com/blog/nvidia-openclaw-strategy-ai-agent-plan) [![Anthropic Code Review cover showing multi-agent pull request review across repository context and custom review rules](https://umesh-malik.com/blog/anthropic-code-review-cover.png) AI Coding Agents & DX • Mar 10, 2026 ### Claude Code Review: How It Works, Pricing & Setup Anthropic's Claude Code Review runs multi-agent PR reviews for $15-$25 each. How it works, pricing, REVIEW.md setup, and where it beats linters. 6 min read Read more →](https://umesh-malik.com/blog/anthropic-code-review-claude-code-guide) [![Agentic AI enterprise security cover showing identity, prompt injection, policy gates, and observability](https://umesh-malik.com/blog/agentic-ai-enterprise-security-cover.png) AI Security • Mar 9, 2026 ### Agentic AI Security: The New Enterprise Control Model Agentic AI security breaks the old enterprise trust model. How to fix identity, delegated authority, prompt injection defense, and tool-level policy in 2026. 8 min read Read more →](https://umesh-malik.com/blog/agentic-ai-enterprise-security-model) [![OpenAI GPT-5.4 overview showing professional work, coding, computer use, and 1M context](https://umesh-malik.com/blog/gpt-5-4-cover.png) LLM Engineering • Mar 6, 2026 ### GPT-5.4 for Agents: Computer Use, MCP Tool Calls, and Real Pricing GPT-5.4's native computer use and MCP tool calls are the real upgrade for agents. What holds up in a loop, what the 1M context costs, and how Pro compares. 12 min read Read more →](https://umesh-malik.com/blog/openai-gpt-5-4-complete-guide) [![Cover for the Claude Fable 5 deep-dive guide: capabilities, the $10/$50 cost math, API behavior, and when to use Anthropic's most capable model](https://umesh-malik.com/blog/claude-fable-5-guide-cover.png) LLM Engineering • Jul 2, 2026 ### Claude Fable 5: Capabilities, Cost & When to Use It (2026) Claude Fable 5 is Anthropic's most capable model yet. The honest deep-dive: capabilities, the $10/$50 cost math, API behavior, and when to use it. 12 min read Read more →](https://umesh-malik.com/blog/claude-fable-5-guide) [![Memory comparison between rust-analyzer and Rust Glancer showing the dramatic reduction from gigabytes to under 100MB](https://umesh-malik.com/blog/rust-glancer-low-memory-lsp-cover.png) AI Coding Agents & DX • Aug 23, 2026 ### Rust LSP Low Memory: How to Run Glancer Locally on 8GB RAM Rust LSP low memory is achievable: Rust Glancer runs on 8GB machines by freezing analysis at save and offloading to disk. 8 min read Read more →](https://umesh-malik.com/blog/rust-glancer-low-memory-lsp) [![Architecture diagram of a self-hosted AI coding agent with sandboxed execution](https://umesh-malik.com/blog/self-hosted-ai-coding-agent-sandbox-cover.png) AI Coding Agents & DX • Aug 23, 2026 ### Self-Hosted AI Coding Agent: Sandboxed Prompt-to-Deploy for $25/mo Build a self-hosted AI coding agent with sandboxed execution. One prompt produces a repo, tests, CI, and deployed app — $25/mo, no cloud bills. 7 min read Read more →](https://umesh-malik.com/blog/self-hosted-ai-coding-agent-sandbox) [![Swapping bespoke search tools for generic grep, glob and view raised Copilot code review cost until the system prompt was rewritten to be diff-anchored](https://umesh-malik.com/blog/cut-agent-tool-call-cost-prompt-rewrite-cover.png) AI Coding Agents & DX • Aug 14, 2026 ### Cut agent tool call cost: GitHub's 20% fix was a prompt rewrite Agent tool call cost jumped after you gave it better tools? GitHub hit that on Copilot code review and won ~20% back with a prompt rewrite, not new tools. 9 min read Read more →](https://umesh-malik.com/blog/cut-agent-tool-call-cost-prompt-rewrite) [![A research spike shipped as running code surfaces engine-specific blockers a design doc would have missed](https://umesh-malik.com/blog/research-spike-as-running-code-cover.png) AI Coding Agents & DX • Aug 13, 2026 ### Build your research spike as running code: 8 blockers a doc missed A research spike should ship as running code, not a design doc. alchemy-utils surfaced 8 engine blockers a doc would miss, and priced the fix at 3-5 weeks. 10 min read Read more →](https://umesh-malik.com/blog/research-spike-as-running-code) [![The four-step loop for learning a complex topic by having an AI coding agent build an interactive simulation of it](https://umesh-malik.com/blog/learn-complex-topics-claude-code-simulations-cover.png) AI Coding Agents & DX • Aug 11, 2026 ### Learn Complex Topics With Claude Code: Build a Simulation, Not Notes Learn complex topics with Claude Code by building a small simulation of the mechanism: the 4-step loop, the fact-check gate LLMs skip, and how to ship it free. 8 min read Read more →](https://umesh-malik.com/blog/learn-complex-topics-claude-code-simulations) [![Muse Glimmer 30B memory ladder showing 55GB at full precision shrinking to under 20GB with 4-bit K-Quant compression](https://umesh-malik.com/blog/run-muse-glimmer-30b-locally-cover.png) AI Coding Agents & DX • Aug 11, 2026 ### Run Muse Glimmer 30B locally: 55GB shrinks to under 20GB How to run Muse Glimmer 30B locally: the K-Quant setup that fits a single 24GB GPU, the drafter model that triples decode speed, and where it breaks. 8 min read Read more →](https://umesh-malik.com/blog/run-muse-glimmer-30b-locally) [![Cover card titled Approve, subtitled One in three gets through, with three statistics: 409,000 approve or deny decisions analysed, 66.3% mean accuracy, and 52.5% miss rate on npm-disguised exfiltration](https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue-cover.png) AI Security • Aug 7, 2026 ### Configuring AI Agent Permissions: Humans Miss 1 in 3 Threats 409,000 approve/deny decisions show humans miss 1 in 3 agent threats, and 52.5% of npm-shaped exfiltration. The AI agent permissions config that works instead. 10 min read Read more →](https://umesh-malik.com/blog/ai-agent-permissions-approval-fatigue) [![The browsing loop a code-review agent enters under generic tool instructions, versus the diff-anchored evidence path review-shaped instructions produce](https://umesh-malik.com/blog/writing-agent-tool-instructions-cover.png) AI Coding Agents & DX • Aug 7, 2026 ### Fix your agent tool instructions: GitHub's 20% review-cost cut Agent tool instructions decide what your agent costs. GitHub kept the same grep/glob/view toolset, rewrote the guidance, and cut review cost by ~20%. 9 min read Read more →](https://umesh-malik.com/blog/writing-agent-tool-instructions) [![Rust LLM policy: AI allowed for review and analysis, banned for creating code and prose](https://umesh-malik.com/blog/rust-llm-policy-ai-generated-code-cover.png) AI Coding Agents & DX • Aug 6, 2026 ### Rust LLM Policy: Use AI to Review, Not to Create The Rust LLM policy bans AI-created code and prose but allows AI review, analysis, and bug-finding. Here's the exact rule, why it works, and how to copy it. 10 min read Read more →](https://umesh-malik.com/blog/rust-llm-policy-ai-generated-code) [![Cover for the Claude Opus 5 guide: benchmarks, the $5/$25 cost math, effort levels, and the two API breaking changes in the Opus 4.8 migration](https://umesh-malik.com/blog/claude-opus-5-guide-cover.png) LLM Engineering • Jul 24, 2026 ### Claude Opus 5 Migration: The Two API Changes That Break Your Code Two API changes break a Claude Opus 5 migration, and the effort parameter needs re-sweeping, not reusing. The fixes, the real cost math, and the benchmarks. 12 min read Read more →](https://umesh-malik.com/blog/claude-opus-5-guide) [![Cover for the Claude Sonnet 5 guide: benchmarks, pros and cons, use cases, and cost math versus Sonnet 4.6 and Opus 4.8](https://umesh-malik.com/blog/claude-sonnet-5-guide-cover.png) LLM Engineering • Jul 1, 2026 ### Claude Sonnet 5 for Coding: The Tokenizer Change That Moves Your Bill Claude Sonnet 5 for coding lands near Opus level at Sonnet prices — until the tokenizer change moves your bill. The real cost math, and when it beats Opus 4.8. 8 min read Read more →](https://umesh-malik.com/blog/claude-sonnet-5-guide) [![Field report cover: a week of running Claude Code auto mode in production, showing what it nailed, where it broke, and the cost](https://umesh-malik.com/blog/claude-code-auto-mode-production-field-report-cover.png) AI Coding Agents & DX • Jun 25, 2026 ### Is Claude Code Auto Mode Reliable in Production? A Field Report I ran Claude Code auto mode in production for a week — where it's reliable, where it broke, real token costs from my usage logs, and my honest verdict. 6 min read Read more →](https://umesh-malik.com/blog/claude-code-auto-mode-production-field-report) [![Decision matrix cover comparing Claude Code, Cursor, and GitHub Copilot for real production work in 2026](https://umesh-malik.com/blog/claude-code-vs-cursor-production-work-2026-cover.png) AI Coding Agents & DX • Jun 25, 2026 ### Claude Code vs Cursor for Production: A Shipping Engineer's Field Report (2026) Claude Code vs Cursor for production, field-tested on real shipping tasks: a working engineer's decision table, failure modes, pricing, and which to use when. 5 min read Read more →](https://umesh-malik.com/blog/claude-code-vs-cursor-production-work-2026) [![Cover comparing free and paid access to Claude Code, Codex, Gemini CLI, and GitHub Copilot AI coding agents in 2026](https://umesh-malik.com/blog/use-claude-code-codex-for-free-cover.png) AI Coding Agents & DX • Jun 23, 2026 ### Can You Use Claude Code and Codex for Free? Honest 2026 Guide The honest answer to using Claude Code and Codex for free in 2026: what's truly $0, what isn't, the best free AI coding CLIs, and how to cut your bill. 7 min read Read more →](https://umesh-malik.com/blog/use-claude-code-codex-for-free) [![Cover showing the one-day flow of Claude Fable 5 building a streaming microservice: spec, infrastructure, code, and ship](https://umesh-malik.com/blog/claude-fable-5-streaming-microservice-one-day-cover.png) AI Coding Agents & DX • Jun 13, 2026 ### How I Built a Full Audio/Video Streaming Microservice in One Day with Claude Fable 5 Auto Mode Claude Fable 5 in auto mode built my entire HLS streaming microservice in under a day — AWS infra, security, backend, frontend, CI/CD, migrations, runbooks. 11 min read Read more →](https://umesh-malik.com/blog/claude-fable-5-streaming-microservice-one-day) [![Comparison of Cursor, Claude Code, and GitHub Copilot AI coding tools](https://umesh-malik.com/blog/cursor-vs-claude-code-vs-copilot-cover.png) AI Coding Agents & DX • Jun 8, 2026 ### Cursor vs Claude Code vs Copilot (2026): Which Tool for What Cursor vs Claude Code vs Copilot in 2026 — how they actually differ in model, workflow, and autonomy, and which to use for what (I use all three). 5 min read Read more →](https://umesh-malik.com/blog/cursor-vs-claude-code-vs-copilot) [![Anatomy of an effective CLAUDE.md project context file for Claude Code](https://umesh-malik.com/blog/how-to-write-claude-md-cover.png) AI Coding Agents & DX • Jun 8, 2026 ### How to Write a CLAUDE.md That Actually Helps How to write a CLAUDE.md that actually helps Claude Code: what to include, what to leave out, a real structure, and how to stop it from rotting. 7 min read Read more →](https://umesh-malik.com/blog/how-to-write-claude-md) ## Frequently Asked Questions ### What are AI coding agents? AI coding agents are AI systems that autonomously write, review, test, and deploy code by taking multi-step actions in a development environment. Unlike simple code completion, they run commands, read documentation, make pull requests, and iterate based on test results or feedback — operating with a degree of autonomy rather than completing a single prompt. ### What is AGENTS.md and why does it matter for AI coding agents? AGENTS.md is a project-level instruction file — similar in concept to a README — that tells AI coding agents how to work within a specific repository. It documents coding conventions, forbidden operations, context about the codebase, and agent-specific instructions. Well-written AGENTS.md files reduce agent errors and produce more consistent results without requiring explicit prompting each session. ### What security risks do AI coding agents introduce in enterprise environments? AI coding agents face several enterprise security risks: prompt injection (where malicious content in code, documentation, or issues hijacks agent actions), over-permissioned tool access, supply chain attacks via crafted dependencies, and data exfiltration through agent outputs. Secure deployments require sandboxing agent execution, scoping tool permissions, and requiring human approval for sensitive operations like deployments or secrets access. ### How are major AI companies positioning themselves in the AI agent space? Anthropic, OpenAI, and NVIDIA are each building distinct agent platforms. Anthropic focuses on Claude Code for developer workflows and the Model Context Protocol (MCP) for tool standardization. OpenAI is embedding agent capabilities directly into GPT-5 models. NVIDIA's OpenClaw targets enterprise agentic orchestration at scale. The Model Context Protocol is emerging as a cross-vendor standard for connecting agents to tools and data sources. Google Search · Preferred sources ## Prefer this site on Google If you already read this writing, add umesh-malik.com as a Preferred Source. Google can then highlight it with a preferred badge in Top Stories, AI Overviews, and AI Mode — for you, not as a site-wide ranking boost. [Open in Google Search(opens Google Preferred Sources in a new tab)](https://www.google.com/preferences/source?q=umesh-malik.com) ## Related Topics [Claude Code →](https://umesh-malik.com/topics/claude-code)[LLM Engineering →](https://umesh-malik.com/topics/llm-engineering)[MCP →](https://umesh-malik.com/topics/mcp) [All Articles →](https://umesh-malik.com/blog)