The Governed Machine · Paper 81 · September 2026

The Authorship Fallacy

Not by humans. Not by AI.

On April 22, 2026, Sundar Pichai, CEO of Google, said that 75% of all new code at Google is now AI-generated and approved by engineers, up from 50% the previous fall. On September 23, a survey of 800 U.S. developers and engineering leaders ranked reviewing and validating AI-generated code as the top bottleneck in their pipelines. This paper credits the first figure as a real achievement in producing code. It then names the assumption both figures share: that the hardest problems in software are problems of how much code can be written, and how well. They are not. They are problems with code itself, and changing who writes it does not change what it is.

MindAptiv, Inc.Ken GranvilleOpen access
The doctrine
Written ≠ Resolved
Code records a decision made before the machine, the data, or the priorities are known. Changing the author changes how fast those decisions are made. It does not change when. A further instance of Compiled ≠ Resolved, applied to authorship.
01 · The record

Writing code has never been cheaper.

At Google, the share of new code generated by AI went from roughly a quarter in October 2024 to half by the fall of 2025 and three quarters by April 2026. Pichai described the workflow as agentic: engineers now supervise systems that write, rather than writing themselves. This paper credits that trajectory plainly. In two years, the cost of producing a line of code has fallen further than most of the discipline expected.

Five months later, a survey from the code-quality company Qodo, conducted by Censuswide among 500 U.S. developers and 300 engineering leaders at organizations using AI meaningfully in development, showed where the cost went instead:

Put the two together. The industry has made writing code nearly free and made knowing what that code does the scarce resource. That is not a tooling gap to be closed next quarter. It is what happens when the unit of work stays the same and the rate of producing it goes up.

02 · The evidence

More code. The same problems.

If more code were the answer, the measurements taken as AI-generated code scaled would show the hardest problems receding. They show the opposite, or at best no change.

Maintainability · GitClear, Jan 2026
+81%
AI-era code repeats itself far more, and gets cleaned up far less.
2023 (baseline) 100 2026 181
Duplicated-block count indexed to 100 in 2023, across 623 million analyzed code changes. Over the same period, refactoring fell to 3.8% of changed lines, from 21% in 2022.
Security · Veracode, Mar 2026
45%
Without security guidance, nearly half of AI-written code has a known flaw.
Syntax correctness 95% Security pass rate ~55% Vulnerable, no guidance given 45%
Across more than 150 models tested. The security pass rate has stayed near 55% for two years, even as syntax correctness passed 95%.
Delivery · DORA, 2024
−7.2%
More AI in the pipeline was associated with less stable releases, not more.
Delivery stability −7.2% Delivery throughput −1.5%
Change associated with each 25% increase in AI adoption, per DORA's 2024 survey. An association, not a proven cause.
Speed · METR, 2025
19%
Developers using AI thought they were 20% faster. They were actually 19% slower.
Actual Perceived
Actual time to finish tasks: 19% slower −19% Perceived by the developer: 20% faster +20%
16 experienced open-source developers, 246 tasks, early-2025 AI tools. METR's 2026 follow-up suggests later tools may help, and calls its newer data only weak evidence either way.

None of these results describes a bad model. Syntax is correct more than 95% of the time. What does not improve is everything that depends on context the author of the code did not have: the rest of the codebase, the threat model, the production environment, the priorities of the person who will run it. Better models write better code. No model can write code that knows what it will meet.

03 · The mechanism

Code is a decision made before the facts arrive.

Every line of code is a decision about a situation that does not exist yet. It is written at authorship and run at execution. Between the two, the hardware changes, the data changes, the load changes, the user's priorities change, and the attacker changes. The code does not. It carries its author's assumptions into every situation it will ever meet.

That is why code needs more code. Drivers, hypervisors, compatibility layers, frameworks, orchestrators, monitors and patches each exist to reconcile a decision made early with a situation discovered late. A hypervisor is the clearest case: a layer of code whose job is to cover the gap between code written for one machine shape and the machine actually present. Before generative AI reached scale, CISQ estimated the cost of poor software quality in the United States at $2.41 trillion for 2022, with accumulated technical debt of about $1.52 trillion.

The human version of this story is old. In 1975, Frederick Brooks observed that adding people to a late software project makes it later. In 1986, in “No Silver Bullet,” he argued that no single advance in technique would deliver an order-of-magnitude gain, because the hard part of software is its essential complexity, not the labor of writing it down. Four decades of better languages, frameworks and practices bore him out. Each made writing code easier. None made code unnecessary.

AI changes the author, not the artifact. A model that writes code produces the same thing a person produces: a fixed route, decided before the facts. It produces it faster, in greater volume, and with authorship no one can fully reconstruct. Era 2 does not replace Era 1. It accelerates it.

Who decidesWhen the decision is madeWhen the situation changes
Era 1
Human-written code
An engineerAt authorshipSomeone writes more code
Era 2
AI-generated code
A model, approved by an engineerAt generation, fasterA model writes more code, and someone reviews it
Era 3
Intent resolved by Essence®
Declared intent, governed by Meaning CoordinatesAt execution, against the machine presentThe same intent resolves differently. Nothing is rewritten.
04 · Two answers at the wrong layer

Better code. Faster code.

Write better code

The discipline has pursued this for sixty years: structured programming, object orientation, type systems, testing, continuous delivery. Each was real progress. None changed when the decision is made. A better-written route is still a route, and it still fails the first time the terrain differs from the map its author had.

Write more code, faster

Generation is now cheap. Verification is not, as Paper 42 argued in The Verification Tax. The Qodo survey shows where the cost moved: to review. And review is inspection of a decision after it has been made. Governing the AI that writes code is still governing code, after the fact. Detection ≠ Determination.

The fix for code is not better code. It is not faster code. It is not code reviewed more carefully. It is resolving intent at the moment the facts exist.

05 · What replaces the author

A coordinate, not a route.

A route works from the place it was drawn. A coordinate names a destination that can be reached from anywhere. Code is a route. Meaning Coordinates are coordinates: 256 published primitives for intent, a closed set whose value lies in the machinery that applies them, the way the value of the periodic table lies in chemistry.

  1. 01
    You say what you want. In natural language. No code is required, so the intent is legible, and governable, from the first step.
  2. 02
    AI proposes. It never executes. AI does what it does well: interpret intent and propose options. It is not a replacement author.
  3. 03
    Synergy® maps the intent to Meaning Coordinates and checks it against what is authorized, before anything runs.
  4. 04
    Morpheus® resolves machine instructions directly from the coordinates for the hardware present, below compilers, frameworks and languages.

The person declares priorities, such as time, energy and quality. The principles that govern execution are fixed. When the machine changes, the same intent resolves differently: the same source can be delivered at 4K to a 4K display and 8K to an 8K display, because each architecture is assessed at execution. Nothing is rewritten, because nothing was written.

This is also where Essence's measured results come from. On specific workloads, validated with AWS and Rowan University's Digital Engineering Hub on single GPUs, Chameleon® has run 20–114× faster with up to 99.7% lower power, on existing hardware. The gain does not come from better code. It comes from the absence of the stack that code required.

06 · The honest question

What about code that already exists and gets created in the future?

PowerAptivs are one of Essence’s eight Aptiv types, the type that executes; every Aptiv is built from Meaning Coordinates. Some PowerAptivs contain code. A careful reader will ask whether that is more coding by another name. It is not, and the distinction is the center of this paper.

Trust levelWhat executesWhere it is used
Level 1
Coded Guard
Directive code authored outside the platform, chaperoned and governed by policy enforcement and testingLegacy or third-party code that must run but cannot yet be converted to Meaning Coordinates
Level 2
AI-Governed Guard
AI-driven execution, with Essence controlling critical resources and bounding non-deterministic outputsWhere AI reasoning is needed inside the trust envelope
Level 3
Native Guard
Pure Meaning Coordinates. No code. Fully governed, fully ephemeralThe level at which Chameleon's performance results are produced
1

Code is an implementation, never the definition.

A PowerAptiv Action defines what can be done and how it is verified. A Brand is one implementation of it. The Clock Action returns local time; an operating system API, a BIOS read and a network time service are all Brands of it, and Trust Tests keep them honest. Swap the Brand and the expression of intent does not change. Code enters as one interchangeable way to fulfill a declared intent, not as the thing that declares it.

2

Code is chaperoned, not trusted.

PowerAptivs run on a never-trust-by-default model. Meaning Coordinates govern the code at the instruction level. SecuriSync™ decides whether it can run; Guard ensures it behaves while running. Zero ungoverned code. This is not a hypothetical posture: agentic AI is already being used by white hats, red teams, and black hats alike, and that roster now includes rogue AI acting on its own initiative, without a human operator directing it turn by turn. Guard evaluates what an action does, not who or what proposed it, so the same enforcement holds regardless of which of these is on the other end.

3

Code comes from what already exists.

Chaperoned code is how existing software, legacy systems, third-party libraries and APIs, joins the substrate without being rewritten. Elevate wraps APIs and even LLMs so they become Aptivs. That is assimilation, not authorship. The first answer to a new capability is not new code: it comes from declared intent, and from experts encoding what they know as Aptivs. That allows for choice, though. MindAptiv doesn't dictate the solution, and sometimes the answer will be new code: MindAptiv has used Chameleon® to generate new code itself. Some customers require deliverable source code outright (a military application, for instance, where inspectable, deliverable code can be a contractual or sovereignty requirement) and MindAptiv builds to that requirement rather than arguing around it. Even there, an Aptiv remains the better architecture: deterministic and governed by Meaning Coordinates, not a probabilistic agent guessing at intent. The direction of travel is toward Level 3.

Code can live inside Essence. The first answer to a new problem is no longer new code.

07 · What changes

The ceiling moves.

08 · Where this argument stops

What this paper does not claim.

Every application ever built was a workaround. Code was the best approximation available for a gap between human intent and machine execution that no one could close directly. Handing the approximation to a faster author does not close the gap. It widens it at machine speed.

Written ≠ Resolved

The answer to the hardest problems in software is not more code.
Not by humans. Not by AI.

Sources
  1. Sundar Pichai, remarks at Google Cloud Next 2026, Google blog, April 22, 2026
  2. Semafor, “Google CEO says 75% of company's new code is AI-generated,” April 24, 2026
  3. Qodo, 2026 State of AI Code Quality Report, September 23, 2026
  4. GitClear, The Maintainability Gap: 2026 AI Code Quality Research, January 2026
  5. Veracode, Spring 2026 GenAI Code Security Update, March 24, 2026
  6. DORA, Accelerate State of DevOps Report 2024
  7. METR, Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity, July 10, 2025
  8. METR, We Are Changing Our Developer Productivity Experiment Design, February 24, 2026
  9. CISQ, The Cost of Poor Software Quality in the US: A 2022 Report, December 6, 2022
  10. Frederick P. Brooks Jr., The Mythical Man-Month (1975), and “No Silver Bullet: Essence and Accidents of Software Engineering” (1986)
  11. MindAptiv, Meaning Coordinates
  12. MindAptiv, Aptivs: The Building Blocks of Wantware
  13. MindAptiv, How PowerAptivs Work
← Paper 80The Authorization Gap SeriesThe Governed Machine

White Paper Series · The Governed Machine

1The Civilizational Fault Line 2We Are Building the Wrong Machine 3The Ornithopter Mistake 4The Convergence 5The Four Horsemen of the Knowledge Apocalypse 6What the Insiders Confirmed 7The Metaphor Trap 8The Recall Standard 9The $1 Trillion Governance Gap 10The Litigation Layer 11The Scale of Intent 12The Intent Economy 13The Session Illusion 14The Necessary Sequence 15The Wrong Race 16The Ledger That Is Intent-Driven 17The Agency Illusion 18The Substrate 19The End of the Mean 20Era 3: The Architecture of the Next Civilization 21The Missing Substrate 22The Context Fatigue Ceiling 23The Iceberg Stays Frozen 24The Dependency Tax 25The Record That Was Never Kept 26Composable by Default 27Do No Harm 28The Stack Replacement Thesis 29The Moat Is the Code 30The Last Platform War 31Beyond the Agent: Intent-Native Execution 32The Hardware Imagination 33The Architecture Tax 34The Tokenization Ceiling 35The Payment Moment 36The Oracle Problem 37The Reviewer Problem 38The Provenance Fallacy 39Role Without Determination 40Known and Funded Anyway 41The Style Confusion Proof 42The Verification Tax 43The Pause Reflex 44The Human Margin 45The Balance of Power Fallacy 46The Liability Backstop 47One Substrate, Every Signal 48The Attribution Problem 49The Consciousness Ceiling 50The Detection Patch 51The Consumptive Machine 52The Agent That Isn't 53The Legibility Gap 54The Semiotic Machine 55The Transpilation Ceiling 56The Provisioning Ceiling 57The Reservation Ceiling 58The Circularity Ceiling 59The Coexistence Ceiling 60The Conformance Ceiling 61The Preservation Ceiling 62The Parity Clause 63The Governed Boundary 64The Transcript Problem 65The Unpaired System 66The Memory Ceiling 67The Admission Gap 68The Wrong Ask 69The Best Case 70The Last Chokepoint 71The Fourth Step 72The Adoption Standard 73The Same Weekend 74Sixty to One 75Coordinates, Not Correlations 76The Governability Axis 77Era 3, Confirmed 78The Eleventh Rule 79The Seventh Admission 80The Authorization Gap 81The Authorship Fallacy ← this paper 82The Camera and the Vault 83Cleared to Proceed 84A Class, Not a Product 85The Inherited Playbook