Fan et al.

A nine-author study led by Fan et al. held the underlying model and execution loop fixed while varying three coding-agent harness components — planning, action space, and context management — across 1…

A security paper by Fan et al. (2026) proves that flat tool-level monitors, which track taint as a single label per session, must either let dangerous actions through or block harmless ones. The team …