In 30 Sekunden
For Claude Code’s team, verification means giving an agent a way to run and exercise the software it changes, not just passing existing tests. Anthropic’s Boris Cherny and Cat Wu describe an agent that clicks through a desktop app, fixes issues and checks again, plus routines that pick up bug reports and prepare fixes. They also explain how auto mode uses a separate model to assess permission requests and how they tested it against attacks. Both favor giving newer models less prescribed context while letting them retrieve what they need.
- 1Verification means running the actual softwareCherny distinguishes agent verification from existing unit tests, lint and type checks. He describes giving Claude a way to run the feature it built and test its behavior.
- 2A desktop skill teaches Claude to click through the appWu says Claude runs the local desktop app, exercises a new interface and edge cases, fixes problems and checks again. When environment issues arise, she asks it to investigate and update the skill.
- 3A routine finds unattended bug reports and proposes fixesWu describes an engineer’s routine that monitors voice-mode reports. Another routine picks up bug reports without a response after five hours and prepares fixes for the engineer to verify and merge.
- 4Auto mode routes permission decisions through another modelCherny says he uses auto mode to avoid manually watching most permission requests. The speakers say a classifier denies suspicious actions and the user can later allow them.
- 5The team tested auto mode against adversarial promptsWu says the team classified thousands of agent trajectories and permission prompts, then used red-team and internal attack attempts to build evaluations and improve the system.
- 6The speakers prefer minimal context with a way to retrieve moreCherny and Wu say they give current models only the necessary instructions and tools, allowing them to pull in additional context. Wu says too much context can amount to micromanagement.
Das Wichtigste
- Give an agent a way to run the changed product and exercise its interface, including edge cases, before accepting its work.
- Record recurring mistakes and their fixes in project instructions or a reusable skill so the agent can use the lesson later.
- Use recurring routines to collect issues and prepare proposed fixes, with a person merging those that are easy to verify.
- Treat an automated permission classifier as a security system to evaluate and test against adversarial attacks, not merely a way to suppress prompts.
- Cherny and Wu prefer providing the context a model needs and a way to retrieve more, rather than prescribing every step.
Den bearbeiteten Text nach Kapiteln lesen
From early coding assistance to agent verification
Cherny describes recording lessons from mistakes and giving agents ways to test their work. Wu explains a desktop development skill that can run and click through an app.
Boris Cherny and Cat Wu recall the early Claude Code release: a short video posted to Slack drew only a couple of reactions, and the tool handled simple engineering tasks. A year later, Cherny says, he may have many agents working or agents prompting other agents.
Cherny says that when Claude makes a mistake, he asks it to record the lesson in CLAUDE.md or create a skill rather than merely correcting that one attempt. The team also learned that verification is important, he says.
Wu asks how to make verification effective. Cherny distinguishes it from unit tests, linting and type checks, which are already straightforward to automate. For an agent, he says, the question is whether it can run and exercise the thing it built; figuring out how to do that may require deliberate setup.
Cherny recalls asking Claude, using Opus 4, to build a feature and test itself in a shell. It opened a Claude command-line session and tested the feature. He says the team now has similar loops for mobile simulators and desktop computers, but that behavior was surprising at the time.
Wu says she is working on the desktop app and uses a development skill that teaches Claude to run a local version. If the staging environment causes trouble, she asks it to check Slack for an outage or a known issue and then update the skill with what it learned.
The skill starts the desktop app and uses computer control to click through a new interface, test edge cases, fix problems and check again. Cherny says one thing he values about the team is that people across roles, including product managers, contribute code.
More roles contribute code and routines handle reports
The speakers describe designers and product staff making changes directly. Recurring routines can monitor issues, prepare fixes and help maintain pull requests.
The speakers say the idea and the product, business, design and user context become more important when Claude can write code. Cherny recalls initially being surprised to see a designer submit a code change, then seeing that the code looked good. Wu says designers and product managers can prototype or change an app directly; finance and data-science colleagues also use Claude Code.
Asked which uses are pushing the limits, Wu points to routines. One engineer who launched voice mode set up a routine to listen for tickets, GitHub issues and bug reports; Claude prepares a fix and sends him the pull request.
Wu says the engineer also made a routine for other feedback. After she introduced a feature with an overlooked edge case, her own Claude reported that another Claude had already fixed the bug. The engineer told her his routine picks up unaddressed reports after five hours and he merges the fixes that are easy to verify.
Cherny says recurring routines made the programmatic use of Claude Code more concrete. He describes them helping with code review, following pull requests, responding to comments, fixing continuous integration and rebasing changes.
Auto mode and its security checks
Cherny says he prefers auto mode for his current workflow. Wu describes evaluating permission decisions and testing the system against adversarial attempts.
Asked about features he uses in the command line, Cherny says he used to prefer plan mode but now uses auto mode. In his experience, newer models do not need a separate planning step for his work, although some people still value the planning artifact. Auto mode lets him start one agent and move to another.
The earlier permission model asked a person to approve individual tool calls. Cherny and Wu say auto mode instead routes requests to another model for a security decision; suspicious actions can be denied and a user can later allow them. They think this helps people focus on consequential requests rather than repeatedly approving routine ones.
Cherny emphasizes continuous security work, including red teaming, penetration testing and threat modeling for attacks such as prompt injection. He says trust in that work makes it possible for him to let an agent run while attending to another.
Wu says the team first collected thousands of agent transcripts and permission prompts and had auto mode classify their safety. It then asked red teamers and internal teams to attempt prompt injections and attacks, used those attempts to create evaluations and improved the system to catch them.
Cherny says he initially doubted that routing a permission prompt through another model would work, but changed his mind after seeing the results. He describes building on models as a process of relearning assumptions from earlier engineering work.
Rethinking work around agents
Cherny compares direct agent prompts with routines that prompt the agent on a person’s behalf. The speakers discuss changes in business processes and overlapping product and engineering roles.
Cherny says loops and routines represent another shift in how he works. First, he moved from writing source code to asking an agent to write it; now, he sometimes gives an instruction to a loop or routine that prompts Claude on his behalf.
Asked how engineering organizations are changing, Cherny recalls a business case about personal computers: the productivity benefit required redesigning processes around the computer, not merely putting one beside a paper-based workflow. He thinks AI adoption similarly changes processes, but expects the transition to be faster because work is already digital and Claude can use computers and code.
Cherny says Claude is embedded throughout Anthropic’s work: employees ask it onboarding questions, use it to write and review code, and use Cowork for forms. He says it frees him to spend more time generating ideas and talking with customers.
Wu asks whether the future belongs to product managers or engineers. Cherny thinks the roles are merging: he says product, developer-relations and design colleagues write code, while engineers can take an idea through implementation and work with legal, marketing and security on release.
Managing many agents with less prescribed context
Cherny describes desktop, phone and remote-control workflows. He and Wu favor minimal instructions plus a way to retrieve context, while acknowledging the tools will continue to change.
Cherny describes moving from six terminal tabs with separate checkouts to an agent view and desktop app that manages worktrees. He says roughly half of his engineering work now happens on his phone, where he uses remote control to check agents or start a new one after a conversation sparks an idea.
On context engineering, Cherny says current models work with a minimal system prompt and tools, provided they have a way to retrieve context. Wu calls herself a context minimalist: she prefers telling the model what it needs to know and letting it find a path rather than micromanaging it with too much information.
The team is also making its supporting software leaner to leave more room for user prompts, Wu says. Cherny expects longer-running, more autonomous agents to require new interfaces, though he does not know what those will be. He expects ideas to come from the team and its community of users.
Mehr aus diesem Kanal
16:17EN
10:38EN
12:19EN
33:46EN
17:50EN
34:42EN