Reviewing agent output Recommended

Check where generated code came from

Make sure generated code does not copy licensed code you may not use, and that every new dependency's licence fits your project.

By Erik Bergstedt, Agent Wranglers. Updated 20 October 2026.

How to do it

AI tools can repeat code from their training data word for word. Turn on the tool's filter or reference check for public code where it has one. Run a licence scanner over dependencies in CI, and keep an allow list of licences.

How to check

CI runs a licence check with an allow list and fails on any other licence. Examples are npx license-checker --onlyAllow "MIT;ISC;Apache-2.0;BSD-2-Clause;BSD-3-Clause" and pip-licenses --allow-only "MIT License;BSD License;Apache Software License".

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/reviewing-agent-output/code-provenance.