Dotnet on Tokenise

Your agent's minimal API accepts anything: turn on .NET 10 validation and test the 400s

Mon, 09 Nov 2026 16:08:00 +0000

Ask an agent for a POST /orders endpoint in ASP.NET Core and the handler it writes will compile, run and return 201 for a body with no customer, a quantity of minus five and a misspelt field. Nothing in the request type says otherwise, so nothing pushes back. The agent has no reason to add checks the prompt never asked for, and the happy-path test it writes alongside passes.

Your agent's tests pass until midnight: inject TimeProvider and ban the system clock

Mon, 09 Nov 2026 11:08:00 +0000

A typical first draft of a 14-day free trial calls DateTime.UtcNow in three places. The tests written next call it again, compare against a value computed a few microseconds earlier, and pass. Mostly. They fail when the clock ticks between two lines, when the suite runs just before midnight UTC, or on the one day a month when someone checks the boundary by hand and finds the trial ends a day early.

Make the C# compiler reject an agent's half-finished enum change

Mon, 09 Nov 2026 07:05:00 +0000

The ticket says orders can now be refunded. An agent adds Refunded to the OrderStatus enum, wires up the refund endpoint, runs the tests, sees green and opens the pull request. Eleven switch expressions elsewhere in the codebase still decide what each status means: whether the order can be cancelled, which email goes out, what the dashboard shows, which rows the nightly export includes. Nobody changed them. Nothing failed.