Security gates at the end of a sprint kill velocity. A coding agent can cut feature work time in half, but security teams that don’t understand what the agent does will block it. The agent reads code from your repo, issues from your tracker, snippets from web pages, and it writes back pull requests. One malicious instruction planted in that text can make the agent send a deploy token somewhere it shouldn’t.