Each design choice below points at the study that shaped it. Where we are reasoning from the evidence rather than quoting it, we say so. Most of these are 2026 preprints, so read them as strong signals, not settled law.
The real time on every messageModels cannot feel elapsed time, so the ⏱ line gives it to them. Their own guesses of task time ran 4–7× too long, and the paper itself recommends external timing over asking the model.
Garikaparthi, Can LLMs Perceive Time? (2026)
WORKSHOP PAPER
An evidence report, with a way outWhen tests contradicted the spec, letting models flag a human instead of forcing a pass cut GPT-5’s cheating from 54% to 9%. That is why finish verified or flag honestly both count as done.
ImpossibleBench (2025)
PREPRINT
You, not the test, judge whether it is what you meantSpecBench (2026) revealed that on codebases >25k LOC, frontier agents hit a 100% reward hacking gap: passing 100% of visible unit tests while delivering 0% functional accuracy. A green test shows the code runs; only you know if it is what you meant.
Denison et al., SpecBench (2026)
PREPRINT
Asking for evidence, not approvalCAVE-Bench (2026) demonstrated that frontier models capitulate to false user blame in 60.06% of trials, destructively rewriting working code to simulate agreeableness rather than verifying ground truth.
Mao et al., CAVE-Bench (2026)
PREPRINT
The trust inflation trap in AI code generationStanford and Cornell researchers (ACM CCS 2023) showed that developers using AI coding assistants write significantly less secure code while reporting 2.6× higher confidence in its correctness.
Perry et al., ACM CCS (2023)
PEER-REVIEWED PAPER
A short agent file that points to detailContext files did not generally raise task success and added over 20% cost; repository overviews were not helpful, but non-standard rules were followed. So ours is a map plus your specific rules.
Gloaguen et al., Evaluating AGENTS.md (2026)
PREPRINT
Give the agent a map, not a manualOpenAI’s account of building with Codex: one giant instruction file crowds out the task and rots; a short file that points to deeper docs worked better.
OpenAI, Harness engineering (2026)
VENDOR DOCS
Our own measurementsOn the builder’s machine, agent time estimates ran about 3.2× too high against the clock. One person, one machine, small sample: a first-party data point, not a study.
Antidote build logs (clockd)
FIRST-PARTY DATA
What we have not shown: no study tests the evidence report itself. Approval-seeking is a documented failure mode (sycophancy is well documented in LLMs, mostly in Q&A studies), so the kit asks the agent for evidence, not approval, and leaves the judgment to you. That part is our design reasoning.