STRATEGY · TECHNOLOGY
Agentic Engineering: When Supervising Is Worth More Than Typing
The discipline that follows "vibe coding" promises speed without sacrificing quality. But it only works in organizations that invest as much in verification as they do in models.
In February 2025, Andrej
Karpathy, a co-founder of OpenAI and former head of AI at Tesla, popularized
the term "vibe coding": giving in to the vibes, asking a model for
code, and forgetting that the code exists. A year later, Karpathy himself
declared his coinage obsolete. Models had improved enough that professional
teams stopped typing most of their software and began directing agents that
write it. For this more disciplined and supervised use, he proposed another
name: agentic engineering.
The label matters because it changes the executive's question. It is no longer whether to let AI write code, but what system of controls makes what it writes trustworthy. This article defines the concept, sets out its objectives, describes the means of developing it, reviews documented cases, and assesses its prospects and its limits.
What it is, and what it is not
Karpathy justified the name with two words. "Agentic," because the new default is that you do not write the code directly most of the time: you orchestrate agents that do, and you provide oversight. "Engineering," because there is art, science and expertise in it, and because it is something one can learn and get better at.
The difference from vibe coding is one of rigor. The latter raises the floor: almost anyone can build prototypes, scripts and experiments. Agentic engineering raises the ceiling: it uses agents to produce software you can trust, held to the usual standards of security, reliability, architecture and maintainability.
Three traits set it apart. First, intentional delegation: the human defines the goal, constraints and acceptance criteria before releasing the agent. Second, verification: nothing reaches production without tests and review. Third, accountability: the engineer remains answerable for what is deployed, even without having written a single line.
In practice, the engineer's work shifts: less code and more specifications, plans and acceptance criteria; more reviewing and less typing. The skill that earns a premium is no longer typing speed but the ability to break a problem down, anticipate how it can fail, and confirm that it was actually solved.
A word of candor: it is not a formal standard or a certification. It is a label the industry adopted quickly and that each organization interprets in its own way, which makes it necessary to define what you mean by it before investing.
What it is for: the objectives
The first is speed without debt: multiplying output without accumulating hidden flaws that must be paid for later. The second is verifiable quality: turning trust into a measurable process instead of a hunch. The third is redeploying talent: moving people from typing toward design, architecture and judgment, which is where an agent still needs direction.
The fourth objective is scaling beyond the individual: moving from the personal assistant to fleets of agents working in parallel on well-bounded tasks. The fifth is governing risk: leaving a trail of what each agent did, with what permissions and under whose approval.
How it is developed: the means
The experience of pioneering companies points to six levers, none of which is the model itself.
Context. An agent performs according to what it knows about the project. Clear specifications, up-to-date documentation and explicit repository conventions are worth more than a clever prompt. Making systems legible to machines becomes an engineering investment.
Isolated, reproducible environments. Agents need somewhere to work without risk: disposable environments with the same tools people use. An analysis by the firm Ona of Stripe, Ramp and Spotify argues that the obstacle was not model quality but the development environment.
Automated verification. Tests, continuous integration, static analysis and security scanning act as a safety net: the agent runs, fails, fixes and iterates before a human looks at the result.
Least privilege and traceability. Curated tools, restricted access and a log of every call. The OWASP project has already cataloged risks specific to agentic applications, such as goal hijacking and tool misuse, which two years ago did not exist at enterprise scale.
Focused human review. The person reviews the plan and the outcome at defined checkpoints rather than reading every line. There is a trap: as volume grows, review can degenerate into a formality. It is a legitimate doubt that should be measured, not assumed resolved.
Training and cultural change. According to a study by Microsoft researchers on the rollout of command-line agents, early use spread mainly among colleagues rather than by mandate. The gains do not distribute themselves: they require training and a redesign of the workflow.
Success stories
Stripe. Its "Minions" are unattended agents: they start from a Slack message or a ticket and return a change ready for review. According to the company itself, in February 2026 more than 1,300 pull requests per week were merged without a single line written by humans, all reviewed by people. Stripe built on an open-source base rather than adopting commercial tools, precisely because of the requirement to operate without continuous supervision.
Rakuten. In its January 2026 trends report, Anthropic credits Rakuten with cutting feature delivery time from 24 days to 5. Separately, a case study published by OpenAI in March 2026 reports that the company halved its mean time to resolve incidents with Codex. In both cases the figures are published by vendors.
TELUS. According to coverage of the same report, the Canadian telecom accumulated more than 500,000 hours saved with roughly 13,000 AI solutions built in-house.
Ramp. Its internal agent, Inspect, was already generating more than half of merged pull requests in February 2026, according to an Ona white paper based on engineering blogs.
The common pattern, an independent review of cases notes, is that each company scaled thanks to verification and not thanks to the agent alone.
What the numbers do not say
These results deserve caution. Faros AI telemetry on 22,000 developers, from April 2026, shows epics per developer up 66.2%, but also bugs per developer (54%) and incidents per pull request (242.7%). Speed and quality do not automatically move in the same direction.
The Microsoft study found about 24% more merged pull requests among adopters, but its authors caution that they measure an output indicator, not delivered value. And according to Anthropic's report, developers use AI in around 60% of their work but fully delegate only 0% to 20% of tasks. The trust gap, more than model capability, is today's brake.
Prospects
Karpathy argues that the leverage of top-tier agentic engineering is very high, though not perfect: it requires high-level direction, judgment and taste. Three trends deserve watching.
The first is growing autonomy: agents chaining more steps without human intervention, which raises the value of well-designed checkpoints. The second is expansion beyond engineering: non-technical teams building their own tools, as suggested by the 89% adoption Zapier reports across its organization. The third is a premium on judgment: when producing code costs less, deciding what to build and spotting what is wrong are worth more.
There are also second-order risks. If agents write almost everything, organizations must prevent erosion of their understanding of their own systems: a team that does not understand its code cannot supervise it. That is why continuous training, rotation in reviews and a record of design decisions are not a luxury but part of the control.
For regulated sectors, such as banking or auditing, the parallel with internal control is natural: segregation of duties (the one who generates does not approve), audit trails and access management, now applied to agents.
What leaders should do
Three questions chart the path. Which tasks are delegable? Start with bounded ones that have clear tests. How will we know the result is correct? Define acceptance criteria and tests before multiplying agents. Who is accountable? Assign a human owner to every change that reaches production.
Measure outcomes, not activity: defect rate, incident recovery time and delivered value, not just the amount of code generated.
The competitive advantage will not go to whoever has the most agents, but to whoever has the best supervision.
Glossary
Agent. An AI system that does not just answer but plans and carries out multi-step tasks using tools such as editors, terminals or APIs.
Agentic engineering. Disciplined, supervised use of AI agents to build software while keeping professional quality standards. The term was proposed by Karpathy in February 2026.
Acceptance criteria. Conditions a change must meet to be considered correct, defined before the agent starts work.
Checkpoint. A defined point in the workflow where a human reviews and approves the plan or the outcome.
Continuous integration (CI). An automated process that builds the code and runs tests on every change.
Context. The information an agent receives about the project (specifications, documentation, conventions) and that conditions the quality of its work.
Goal hijacking. An attack or failure in which an agent is diverted from its original objective, for example through malicious instructions hidden in the data it reads.
Guardrails. Technical and procedural limits (permissions, tests, approvals) that constrain what an agent can do.
Human in the loop. A design in which a person reviews or approves the agent's actions at key points.
MTTR (mean time to resolve). Average time taken to resolve an incident or restore a service.
One-shot (unattended) agent. An agent that takes a task from start to finish without intermediate human interaction, returning a result for review.
OWASP. An open community that publishes security guidance, including a list of risks specific to agentic applications.
Orchestration. Coordinating one or more agents, assigning tasks, resources and limits, and integrating their results.
Pull request (PR). A proposal to merge a code change, which others review before it enters the main codebase.
Sandbox. An isolated, disposable environment where an agent can run code without risk to production systems.
Static analysis. Automated inspection of code, without running it, to detect errors or vulnerabilities.
Telemetry. Automatic collection of usage and performance data, used here to measure the effects of adopting agents.
Vibe coding. Style of development popularized by Karpathy in February 2025, in which the user asks a model for code and accepts the result without reviewing it closely, suited to prototypes and experiments.
Sources consulted
– Karpathy, A., on "agentic engineering" (Feb. 2026), per The New Stack, "Vibe coding is passé" (Feb. 10, 2026): thenewstack.io/vibe-coding-is-passe
– Stripe, "Minions: Stripe's one-shot, end-to-end coding agents", Parts 1 and 2 (Feb. 2026): stripe.dev
– Anthropic, 2026 Agentic Coding Trends Report (Jan. 21, 2026): resources.anthropic.com/2026-agentic-coding-trends-report
– OpenAI, "Rakuten fixes issues twice as fast with Codex" (Mar. 11, 2026): openai.com/index/rakuten
– Ona, white paper on background agents (2026): ona.com/files/background_agents_white_paper.pdf
– Murphy-Hill, Butler and Savelieva, arXiv 2607.01418 (Jul. 2026), and Faros AI telemetry (Apr. 2026), both cited in developertoolkit.ai/en/strategy/success-stories



