Comment by ecb_penguin

> I agree. But what I'm trying to say is that we'll soon have automated agents that look for vulnerabilities, in agentic flows, ready to be plugged into ci/cd pipelines.

We already have that, and we can see it doesn't perform very well.

An agent that has no reasoning ability will not generate better code than what it was trained on.

https://garymarcus.substack.com/p/llms-dont-do-formal-reason...