Field note

Pinishv: nine control surfaces — or you have an ungoverned factory that looks healthy

Sep 8 Pini Shvartsman series finale: agentic factory as nine human control surfaces (readiness → halt); five failure modes where metrics improve while judgment dies; F0–F4 maturity without buying a platform.

Source: The Agentic Software Factory: Every Control Surface, Named

Pini Shvartsman’s Sep 8 series finale assembles fourteen essays into one audit sheet. Thesis line: execution is cheap; intent, context, verification, judgment, and control are not — a system that mass-produces the first and ignores the rest is a fast way to ship things nobody understands.

The factory is nine stages that look more like a loop than waterfall (intent → package → route → execute → evidence → hostile adjudication → human judgment → delivery → run-and-learn), then nine control surfaces with named owners: readiness gate, constraint set, capability grant, machine floor, per-class verification requirements, adjudication gate, judgment gate, autonomy tier, and a halt you can fire from a phone without the agent’s cooperation. Missing any one is not a “governance gap” — it is an ungoverned system that happens to be behaving. Five failure modes make the dashboard look better as reality worsens: velocity theater, verification theater, approval theater, context rot, comprehension collapse. Maturity is F0 (assisted) through F4 (governed factory); F1 — lanes without gates — is called the most dangerous rung because speed is up and every failure mode is quietly stacking.

Why it matters for code review

Continuous factories do not fail first on generation volume; they fail when review attention is spent on theater while merge admission has no owner. Pinishv’s useful complication for always-on harnesses: overnight momentum without readiness, hostile adjudication, tiers, and a tested halt is FOMO dressed as productivity — green deploy frequency beside worsening intent-to-verified-behavior time. Bursts still win for forming intent and refusing what must not exist; the harness’s job is to make those the scarce human surfaces, not the midnight typing. Audit your review queue against the nine surfaces before you add another overnight worker.