As coding agents produce larger changesets, security and review tools are moving attention to the control layer. GitHub removed file and line limits from Copilot review, while Harness and Sonar announced products aimed at agent-produced code and business-logic flaws. A reported intrusion case offers a separate warning about how the same capability can be directed beyond defensive work.
GitHub removed the 300-file and 20,000-line limits from Copilot code review, and pull requests opened by its cloud agent can now receive a full review. Harness likewise announced a rebuilt repository and review layer, saying agent-produced code can outpace a team's ability to write, review and deploy it. The two moves point to the same bottleneck: as production accelerates, decisions, permissions and feedback become more visible constraints.[4], [3]
Sonar's Hunter Agent announcement focuses on access-control, business-logic and session problems that pattern-based scanning can miss. By the company's account, spotting those flaws requires understanding intended behaviour; no independent measurement of the agent's detection rate has been published. GitHub's new resolution reasons also let a developer classify a review comment as addressed, won't fix or incorrect. That is a small but concrete human-feedback surface which keeps an automated comment from becoming the decision itself.[2], [4]
In an account reported by Capital Brief, Gambit alleges that the Aurora group handed exploitation work to Cursor Agent after gaining access to a target network. The finding rests on the security firm's review and is not presented as independently verified. Still, the account shows why broader review capacity is not itself a security boundary: however much change an agent can inspect, the environments it can reach and the work it can initiate remain separate control points. This comparison is an inference from the sources’ separate treatment of review and access; broader review could coincide with tighter access controls, but the sources do not show that the two controls were established together.[1]
