Fetching from the wire…
Public story · 2026-08-05 · high
CodeAssay also found that prompting models for secure code made programs longer and more complex, without reducing bugs.
Why now: The audit results are covered in the August 5, 2026 briefing.
CodeAssay's audit flipped 170 of 1,890 model-output labels in a 185-task Python benchmark, per the paper's regrading results. Aggregate correctness across the benchmark barely moved. But the bad labels weren't neutral. They were hiding real gaps between models, and fixing them nearly doubled the measured spread between best and worst performers, from 11.9 points to 23.7.
CodeAssay builds its taxonomy first: public tests for generation, hidden tests for grading, and mutation testing to validate the references themselves. That design caught the 9% label error rate, the same fix behind the jump in spread. The paper doesn't say which individual rankings flipped, only that the aggregate gap nearly doubled.
The paper also ran a security-focused prompt against every model tested. It produced no gain in correctness and no consistent drop in static-analysis findings. What it did do, consistently, was make the generated programs longer and more cyclomatically complex. The paper doesn't say whether that added complexity came from real safety fixes or defensive boilerplate.
Each link below shares sources, entities, or timing with this story.
Claude Code uses Python / Shared entity: Python / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Python; reported by the same outlet (arxiv.org).
OpenHands uses Python / Same source domain / Shared topic
Linked by a graph relationship (OpenHands uses Python); reported by the same outlet (arxiv.org); overlapping topics (benchmark, code, model).
Shared entity: Python / Same source domain / Shared topic / Earlier coverage / Tension
Both cover Python; reported by the same outlet (arxiv.org); overlapping topics (barely, code, model).
Claude Code uses Python / Shared entity: Python / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Python; overlapping topics (code, model, test).
Shared entity: Python / Same source domain / Shared topic / Earlier coverage / Tension
Both cover Python; reported by the same outlet (arxiv.org); overlapping topics (code, test).
Claude Code uses Python / Shared entity: Python / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Python; overlapping topics (benchmark, code).
Claude Code uses Python / Shared entity: Python / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Python; reported by the same outlet (arxiv.org).
Claude Code uses Python / Shared entity: Python / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Python; overlapping topics (audit, code).