Research noteAIGIS WorkbenchJuly 2026

Building token efficiency that refuses to trade away code quality

AIGIS Workbench tested context and execution treatments across multiple model and workload classes. The system preserved safety, rejected a universal optimization rule, and identified where further measurement matters most.

V1 execution complete · promotion fail-closed · protected review open

18/18 Runtime experiment arms reaching a safe outcome three architecture-sensitive comparisons still under review
12/12 Build arms preserving terminal validation and rollback evidence Build arms only
4.85% Ordinary-workload input reduction from the tested treatment below the 15% preregistered promotion floor
0 Experimental profiles activated on insufficient evidence governance, not failure

A coding agent's cost is not mostly the answer it writes. It is everything the model has to read before it can answer — growing conversation history, repository evidence fetched again and again, command and validation output, the recovery cycles after a failed step, and the several physical model calls a single task can require. Visible verbosity is the part users see. It is not the part that dominates the bill.

That makes efficiency a harder problem than it first appears, because the obvious levers are the wrong ones. Sending every model less context, capping every response, or stopping every long-running task would all reduce tokens. They would also remove evidence that some tasks genuinely need, and the correction cycles that follow cost more than the savings.

So we started somewhere else.

01Quality is the hard boundary

Every efficiency decision in the Workbench sits inside the protections that were already there: architecture, security, concurrency, approvals, validation, rollback, review, and the operator's own model choice. An efficiency change cannot lower any of them to save tokens. Quality is a veto, not a metric to be traded against a percentage.

A token reduction is not an improvement if it increases bugs, weakens architecture, loses validation evidence, or requires more correction later.

That reframes the question. Not “how many tokens can we remove?” but “what information does this exact task actually need to reach a safe outcome — and what is it currently paying for that it doesn't need?”

Figure 01

How an efficiency candidate earns activation

Every stage can end the process. A treatment that reaches the last stage is switched on for one narrowly defined kind of work — never as a global mode.

01

Observe

Record what real governed work actually costs — context composition, model calls, cache reuse, repeated evidence, and outcome quality — without changing behavior.

02

Measure efficiency and quality together

A candidate is compared with a baseline on identical work. Token and cost movement is only half the measurement; validation results, review findings, and repair cycles are the other half.

03

Apply safety and architecture gates

Safe outcome, terminal validation, and rollback evidence are required before any efficiency number is even considered. Architecture-sensitive work additionally requires independent review.

04

Replicate the exact treatment

One attractive comparison is not a finding. The same treatment must repeat its result for the same kind of work before it can be trusted.

05

Activate narrowly — or reject

If the evidence is incomplete, the existing path stays. Rejection is a normal outcome, and the study below ends in one.

02Why one efficiency mode failed

V1 tested one model-efficiency treatment contract, using the preregistered context posture for each model class. Within every pair, baseline and candidate differed only by that directive. Every arm was safe. The interesting result was not safety — it was that the same contract produced different outcomes depending on where it landed.

Figure 02

Treatment response by model class and workload

Response to one treatment contract applied under each class's preregistered context posture. Architecture-sensitive results are shown striped because independent review is still open — they are signals, not benefits, and are deliberately not quantified here.

Improved Regressed Neutral or mixed Provisional — review pending
Model class
Targeted question
Repetitive build work
Architecture-sensitive build
Lightweightsmallest tested class
Regressed Uncached input and cost rose materially while total input and physical calls stayed nearly flat. The pair establishes a regression, not its mechanism. Do not apply
Improved Input, cost, and one physical model call all reduced on the same work. Promising · replication required
Promising Directionally positive on input, cost, and call count — mechanism not established. Review pending
Balancedmid tested class
Mixed Total processed context barely moved, while fresh context and cost fell sharply — a cache and ordering effect, not less prompt. No benefit claim
Neutral No material movement in either direction. No benefit claim
Modest signal Smaller directional improvement than the other two classes. Review pending
Frontierlargest tested class
Small improvement Real but modest, and well short of the promotion floor on its own. Below floor
Neutral No material movement in either direction. No benefit claim
Strong signal The largest directional effect in the study, consistent with fewer but denser calls — mechanism not established. Review pending

Reading. The treatment that helped a lightweight model on repetitive build work made the same model worse on a targeted question. The balanced class barely moved on total context yet its economics changed anyway. The frontier class showed its strongest effect on the hardest work, not the simplest. Treatment response depended on model behavior and workload together — not on model size.

There is a pattern worth naming in the architecture-sensitive column, though it must be stated as a hypothesis. Across that group, aggregate input and physical calls fell while uncached input rose 1.53%. That is consistent with fewer, more information-dense calls — but V1 did not establish the mechanism, and independent review remains open. It is a shape worth investigating, not a finding.

03How the study was controlled

Two separate experiments ran, and their results are never combined. The runtime treatment study ran 18 paid comparison arms; a separate benchmark of static context curation ran 54. Seventy-two paid arms in total, two distinct questions, two distinct conclusions.

Each comparison held everything constant except one thing:

  • Deterministic workload fixtures, so the same work can be run again and recognized as the same work.
  • Identical repository state, request, model, reasoning level, policy, tool authority, and validation surface across baseline and candidate.
  • Exactly one treatment difference per comparison.
  • Counterbalanced execution order, because cache state is itself a variable.
  • Receipt-backed token and cost accounting for every physical model call.
  • Terminal validation and rollback evidence required on all build work.
  • Independent review for architecture-sensitive comparisons.
  • Explicit spending ceilings authorized before any paid arm ran. Every arm finished inside its ceiling.
  • Fail-closed promotion: absence of evidence blocks activation rather than deferring to judgement.

Cheap, bounded experimentation is what makes that last rule affordable. When refusing to activate something costs almost nothing, there is no pressure to talk yourself into a weak result.

04The primary result

Across the ordinary efficiency endpoints — the group the promotion decision actually rests on — the treatment produced a modest, safe benefit that did not reach the bar set before the study began.

Figure 03

Measured result against the promotion floor

The floor was preregistered before the study ran, specifically so that an attractive but thin result could not argue its own way into production.

Ordinary workloads

Measured · below promotion floor

Aggregate input▼ 4.85%
Cost▼ 3.11%
Physical model calls25 → 24
Required for promotion15% input

Safe, below threshold → existing production path kept

4.85%
0% aggregate-input reduction20%

Architecture-sensitive workloads

Provisional · review open

Three comparisons produced a stronger directional signal than the ordinary group, including fewer physical model calls on the heaviest work.

Those numbers are not published here and are not counted toward any result. Independent blind review is incomplete, and a protected-boundary signal is not a benefit until it clears that review.

Held back — signal only, not a claim

Why the two are never merged. They answer different questions and carry different evidence weight. Averaging a measured ordinary result with an unreviewed protected one produces a larger, more flattering number and a worse study. The promotion decision uses the left card alone.

The decision was to keep the existing production path. Not because 4.85% has no value — at sustained volume a repeatable few percent is worth having — but because the sample was small, the effect varied materially by model and workload, one stratum regressed outright, and a single comparison per stratum cannot establish that a result will hold.

05The finding that changed our priorities

Alongside the controlled study we analysed a window of real governed work to decide where measurement effort should go next. It reordered our assumptions.

Figure 04

Where the tokens actually are

Token composition across a window of real governed engineering work.

≈ 99% — input context the model must read
Input context≈ 99% of tokens Visible response output≈ 1% of tokens

Consequence. Response verbosity cannot be the primary lever — there is barely any output to cut. Trimming responses remains worth doing for readability, and because today's prose becomes tomorrow's context, but it is not a savings programme. The cost lives in what gets read, and a substantial share of it is evidence carried between steps: command output, validation results, and repository state.

The long-running tasks looked like the obvious target, and they were the biggest single pool of input. But attributing that cost by cause did not support the story we expected. Among the 47 outliers with complete activity coverage, none met the strict strong-no-progress definition, and command, validation, and mutation evidence dominated continuation input. That did not justify a new volume-only stop — existing hard ceilings and safety guards remain in place regardless.

So we did not add one. The finding pointed somewhere less obvious and more useful: the cost is in how evidence is represented between steps, not in the number of steps. Future work will study whether that evidence can be carried more efficiently while retaining exact, governed access to the original material. Long-run monitoring stays advisory, and warnings key on absence of progress rather than on volume.

06Long-session summaries are an economic decision

Long conversations genuinely benefit from durable summaries. But producing a summary costs tokens too, and a summary that costs more to write than it later saves is not efficiency — it is a second bill. The Workbench therefore treats summarization as an economic and quality decision rather than an automatic cleanup step.

  • Raw history remains immutable and exactly retrievable. A summary never replaces the record.
  • Summaries are genuinely useful for navigating long sessions, independent of any token argument.
  • Manual summarization is available, with its cost and expected effect shown before anything is charged.
  • Automatic summarization stays off until its generation cost and downstream quality are demonstrably justified for the work it is applied to.
  • For eligible repository-question continuation, a bounded continuation state remains the cheap fallback; other surfaces retain their existing context path.

Our current measurements do not support an automatic savings claim, so we do not make one.

07Active versus experimental

The useful distinction is not a completion percentage. It is whether something can affect real work today.

Figure 05

What is live, and what is still being measured

Active

  • usage and cost accounting across canonical model calls
  • model capability awareness
  • quality, authority, and validation protections
  • long-session continuation support
  • evaluation and rollback infrastructure

Experimental or evidence-gated

  • dynamic context selection treatments
  • governed evidence representation
  • response sizing
  • economics-aware summarization
  • change-aware retrieval
  • model-specific optimization

Reading. The right column combines behavior-neutral shadows, evidence-gated candidates, and explicitly authorized experiments. None is a production default, and several still need adequate measurement coverage before they could become one.

08Why this looks different from a general agent platform

General-purpose agent platforms increasingly combine multiple models, tools, persistent state, and isolated execution to complete broad workflows. AIGIS is narrower by design: it is a governed software-engineering runtime, where an efficiency result is accepted only when the resulting code, architecture, evidence, validation, authority, and rollback all remain safe.

That produces five concrete differences in how efficiency is even defined.

Figure 06

Where the approaches diverge

Common agent optimization
AIGIS Workbench
Common approachRoute a step to a different model.
AIGIS WorkbenchSeparates model routing from efficiency treatment. Choosing who reasons and choosing what evidence that model receives are independent, receipted decisions.
Common approachTruncate or summarize large tool output.
AIGIS WorkbenchApplies governed evidence representation only where the Workbench owns the later prompt, retaining protected evidence exactly and keeping bounded access to the raw source.
Common approachReplace old conversation history with a memory note.
AIGIS WorkbenchKeeps the raw transcript, accepted plans, validation, approvals, and repository state authoritative. A bounded continuation state is a fallback — never a replacement authority.
Common approachJudge efficiency by the price of one call.
AIGIS WorkbenchMeasures the whole path: total calls, input, cache behavior, cost, corrections, validation, regressions, and the final safe outcome.
Common approachOptimize every long run as if length proves waste.
AIGIS WorkbenchDistinguishes productive investigation and repair from genuine no-progress behavior. Volume alone cannot create a stop.

Reading. The outcome is not a cheaper agent loop. It is a control system that can explain why a treatment is eligible, run it without weakening the engineering boundary, and reject it when the evidence is heterogeneous, uneconomic, or incomplete.

09What the study proved

01

Quality gates and efficiency experimentation can coexist

Every arm reached a safe outcome and every build arm kept its validation and rollback evidence. Measuring efficiency did not destabilize the engineering workflow.

02

Model and workload must be evaluated together

The same treatment helped, did nothing, and actively hurt — depending on the pairing. Model identity alone is not enough to decide how a task should be handled.

03

Token volume alone does not prove waste

The heaviest sessions were carrying evidence, not spinning. Cost attribution changed the conclusion and prevented a governor that would have interrupted real work.

04

Refusing activation is a successful result

A system that can only say yes is not an evaluation system. Declining on incomplete evidence is the behavior that makes the eventual yes worth anything.

The study did not produce a universal efficient mode. It produced something more useful: a governed way to discover which optimizations are safe, effective, and appropriate for each kind of work.

10Where this goes next

  • Improve how evidence is represented between steps, while keeping exact retrieval of the original material.
  • Continue treatment experiments at the level of specific model and workload pairings rather than global modes.
  • Study the economics of long sessions and summarization further before changing any default.
  • Expand evidence coverage to additional providers; a result measured on one provider does not transfer to another.
  • Keep quality, validation, and rollback as non-negotiable gates in every future round.

How to read these numbers

  • Two experiments, never merged. The 18-arm runtime treatment study and the 54-arm static context benchmark asked different questions. Their efficiency results are not combined into a single figure.
  • Architecture-sensitive results are signals, not results. Three comparisons remain under independent review, and their numbers are withheld until that review completes.
  • Nothing was switched on. No experimental profile or automatic summarization treatment was activated. Experimental layers record measurements without changing what a model receives.
  • Treatment response is not model capability. That a model benefits from a particular kind of context curation says nothing about its reasoning, autonomy, or safety.
  • Evidence is provider-specific. The evaluation approach generalizes; the measurements do not. A result observed on one provider's models does not authorize the same treatment elsewhere.
  • No automatic savings claim for summarization. Current measurements are observational, and observational data can reject a claim without being able to prove one.

Methodology note

V1's paid model evidence came from three Codex model strata. The decision architecture is provider-neutral; the evidence is not. Promotion remains provider-, model-, mode-, and workload-specific, so a result measured in one stratum does not authorize the same treatment in another.

study_readout

>_subject........token_efficiency >_stance.........quality_is_a_veto >_result.........universal_rule_rejected >_activated......none >_next...........evidence_representation

>_ Back to Writing