96% of developers don’t trust AI code: Here’s a step toward the fix

The narrative surrounding software development has shifted dramatically over the last six months. The industry has moved past the initial awe of Large Language Models (LLMs) and entered the era of agentic AI development — where autonomous systems aren’t just suggesting lines of code, but are actively refactoring services and managing multi-step deployments across the repository.

However, while development teams have made leaps in velocity, a friction point has emerged: the gap between generation and verification. According to Sonar’s 2026 State of Code: Developer Survey, 96% of developers do not fully trust AI-generated code without manual intervention. This lack of trust has birthed a new form of developer “toil,” with teams reporting they spend nearly a quarter of their work week (24%) merely checking, fixing, and validating the reliability of AI output.

In short, there’s been a trade-off between the effort of writing code and the labor of auditing it. To fulfill the promise of an AI-driven SDLC, organizations must move beyond the “toil swap” by focusing on three strategic points: shifting metrics from speed to impact, implementing a governed AI framework, and automating verification.

From “speed” to “impact” in the agentic era

For years, the industry leaned on “speed” as the primary metric for productivity. In a world where AI agents can generate a thousand lines of code in seconds, speed has become a commodity — and a dangerous one. If those lines introduce security vulnerabilities or architectural issues, productivity hasn’t increased; it has backslid.

Speed has become a commodity — and a dangerous one.

In the AI era, productivity must be measured by the impact of the code and the reduction of friction. When organizations automate the verification process, developers can move from “auditors” back to “orchestrators,” staying in a flow state rather than being interrupted by the constant need to debug AI-powered hallucinations.

The operational path to AI at scale

Many organizations are currently stuck in an “AI pilot” phase. Individual developers use assistants, and teams experiment with agents, but most lack a secure, scalable way to move those AI drafts into production.

The challenge isn’t the AI tool itself; it’s the framework surrounding it. To scale, a “blueprint” is needed that treats autonomous code with the same (or greater) level of scrutiny as human-written code. This requires a shift toward deterministic, repeatable verification.

Development teams cannot rely on one AI to “check” another AI’s work in a circular loop of non-deterministic outcomes. For example, a developer might ask an LLM to review a pull request, only for the LLM to miss a subtle SQL injection because it “hallucinated” that a sanitization function existed when it didn’t.

Instead, teams need a consistent, objective verification layer — such as static analysis tools that use hard-coded rules — to ensure every line of code is secure and maintainable before it ever hits the main branch.

Managing risk of technical debt

One of the biggest risks of the agentic era is the potential for rapid accumulation of technical debt. If production accelerates and quality checks don’t, then development teams are essentially building on quicksand. If an agent produces a service that works but is insecure or unmaintainable, the ‘speed’ gain is merely a debt with high interest.

A common scenario I’ve observed involves AI agents refactoring legacy monoliths into microservices. While the agent may successfully split the code, it often introduces “code smells” or ignores company-specific naming conventions or non-obvious coupling that can make future maintenance a nightmare.

The goal of the evolved SDLC should be to resolve issues at the source. By automating the identification and remediation of vulnerabilities and code issues, teams can eliminate the “toil swap” of spending their days fixing AI mistakes, allowing them to focus on high-level architecture and innovation.

The road ahead: Trust and verify

The software industry is at a crossroads. Engineering excellence can either be drowned out by AI-generated noise or organizations can build the infrastructure necessary to verify and trust the new way of working.

Moving beyond the hype requires defining what a reliable, AI-driven SDLC actually looks like. This transition from “speed” to “trust” will be a core focus at the upcoming Sonar Summit on March 3, 2026. This free, virtual event features insights from thought leaders, including host Gergely Orosz, host of The Pragmatic Engineer, and executive advisor Laura Tacho.

The future of software isn’t just about how much code can be created—it’s about how much of that code can be trusted.

Manish Kapur is a technical product leader with a strong background in product management, developer relations, marketing, and strategy. He is currently a senior director of technical product marketing at Sonar, based in Austin, Texas.

Read more from Manish Kapur