arxivcs.SEcs.AIcs.LG2026-07-12
When Does Restricting a Coding Agent to execute_code Help? A Regime $\times$ Agent-Design Ablation
Hong Yang, Qi Yu, Travis Desell
Modern coding agents expose multiple tool surfaces -- IDE primitives, bash, and Model Context Protocol (MCP) code-execution -- and the field has shipped three contradictory claims about which one matters. We run the missing crossed comparison: an integrity-clean three-arm ablatio…