A big agent number is useful
the way a speedometer is
useful. It tells you something
moved. It does not tell you
the move was the one you
wanted, or that copying the
costume will reproduce it.
Octoverse, Agentic Workflows,
and Amazon's memo are three
ways of saying that in one
week.
Separate presence from
authorship. "Repos with an
agent configuration file did
eight times the commits" is a
comparison of averages among
new repos. The file was
present. The report does not
say the agent wrote each
commit, that review got
easier, or that defects fell.
Teams who were already
shipping may be the ones who
added the file. If you add the
file to chase the multiple,
you have optimized the
classifier, not the product.
Separate start from land.
"More than 40% of pull
requests start with an agent"
is a first-move statistic.
GitHub puts review after that
sentence on purpose. A draft
rate can rise while a human
still decides the merge, or
while nobody does. Ask which.
The same caution applies to
windows. A monthly rate from
a keynote and a twelve-month
total from the written report
are not the same bar. Put the
window in the label before
you put the number in a slide.
Separate the prompt from the
fence. Agentic Workflows
compiles Markdown into Actions
YAML. That is a convenience.
The controls that matter are
outside the prose: read-only
by default, a sandbox and
firewall, safe outputs, and a
threat-detection job before
apply. General availability
did not move those into the
model. If a workflow can widen
its own permissions, the
Markdown is the asker and the
asker is also the gate. That
is the failure mode, not the
feature.
Then refuse to aim at the
correlate. Amazon's memo is
willing to watch tokens and
adoption because, for now,
they move with delivery. It
is not willing to make them
the goal. A target that is
only an input grows the input.
The replacement is a pair: one
pace number, one outcome you
can explain without the pace
number. And a written miss.
If the tool does not help a
task, the paragraph that says
why is the eval. Leaders in
the memo are expected to have
used the tools on production
work and to be able to name
both a help and a miss. That
is a smaller bar than "find
every place an agent could
have typed."
-
When a report says "repos
with an agent config file,"
write what was counted:
file present. Not commits
authored. Not defects
escaped.
-
Split start from land.
Agent-started pull requests
are not merge quality. Ask
what review still does, and
label the time window next
to every total.
-
Before the first agentic
workflow run, list the outer
fences: default permission,
sandbox, safe-output path,
threat-detection job, and
who is allowed to widen
them.
-
Keep one input metric and
one outcome on the same
page. Tokens or commit count
alone is not a result.
-
If a task does not benefit,
write why in one paragraph
and share it. Stop when you
can name one help, one miss,
and the fence that is not
the prompt. Do not add a
config file to borrow
someone else's eight times.
Watch the speedometer. Do not
steer by it. The number that
cannot name a customer, a
defect, or a fence is an
input-metric, and it will
happily become the job.
The notes this sits on are
GitHub's
Octoverse 2026,
Willison's Universe notes,
the
Agentic Workflows changelog,
and
Amazon's role-guideline memo.