Research noteAIGIS WorkbenchJuly 2026
Building token efficiency that refuses to trade away code quality
AIGIS Workbench tested context and execution treatments across multiple model and workload classes. The system preserved safety, rejected a universal optimization rule, and identified where further measurement matters most.
V1 execution complete · promotion fail-closed · protected review open
A coding agent's cost is not mostly the answer it writes. It is everything the model has to read before it can answer — growing conversation history, repository evidence fetched again and again, command and validation output, the recovery cycles after a failed step, and the several physical model calls a single task can require. Visible verbosity is the part users see. It is not the part that dominates the bill.
That makes efficiency a harder problem than it first appears, because the obvious levers are the wrong ones. Sending every model less context, capping every response, or stopping every long-running task would all reduce tokens. They would also remove evidence that some tasks genuinely need, and the correction cycles that follow cost more than the savings.
So we started somewhere else.
01Quality is the hard boundary
Every efficiency decision in the Workbench sits inside the protections that were already there: architecture, security, concurrency, approvals, validation, rollback, review, and the operator's own model choice. An efficiency change cannot lower any of them to save tokens. Quality is a veto, not a metric to be traded against a percentage.
A token reduction is not an improvement if it increases bugs, weakens architecture, loses validation evidence, or requires more correction later.
That reframes the question. Not “how many tokens can we remove?” but “what information does this exact task actually need to reach a safe outcome — and what is it currently paying for that it doesn't need?”
How an efficiency candidate earns activation
Every stage can end the process. A treatment that reaches the last stage is switched on for one narrowly defined kind of work — never as a global mode.
Observe
Record what real governed work actually costs — context composition, model calls, cache reuse, repeated evidence, and outcome quality — without changing behavior.
Measure efficiency and quality together
A candidate is compared with a baseline on identical work. Token and cost movement is only half the measurement; validation results, review findings, and repair cycles are the other half.
Apply safety and architecture gates
Safe outcome, terminal validation, and rollback evidence are required before any efficiency number is even considered. Architecture-sensitive work additionally requires independent review.
Replicate the exact treatment
One attractive comparison is not a finding. The same treatment must repeat its result for the same kind of work before it can be trusted.
Activate narrowly — or reject
If the evidence is incomplete, the existing path stays. Rejection is a normal outcome, and the study below ends in one.
02Why one efficiency mode failed
V1 tested one model-efficiency treatment contract, using the preregistered context posture for each model class. Within every pair, baseline and candidate differed only by that directive. Every arm was safe. The interesting result was not safety — it was that the same contract produced different outcomes depending on where it landed.
Treatment response by model class and workload
Response to one treatment contract applied under each class's preregistered context posture. Architecture-sensitive results are shown striped because independent review is still open — they are signals, not benefits, and are deliberately not quantified here.
Reading. The treatment that helped a lightweight model on repetitive build work made the same model worse on a targeted question. The balanced class barely moved on total context yet its economics changed anyway. The frontier class showed its strongest effect on the hardest work, not the simplest. Treatment response depended on model behavior and workload together — not on model size.
There is a pattern worth naming in the architecture-sensitive column, though it must be stated as a hypothesis. Across that group, aggregate input and physical calls fell while uncached input rose 1.53%. That is consistent with fewer, more information-dense calls — but V1 did not establish the mechanism, and independent review remains open. It is a shape worth investigating, not a finding.
03How the study was controlled
Two separate experiments ran, and their results are never combined. The runtime treatment study ran 18 paid comparison arms; a separate benchmark of static context curation ran 54. Seventy-two paid arms in total, two distinct questions, two distinct conclusions.
Each comparison held everything constant except one thing:
- Deterministic workload fixtures, so the same work can be run again and recognized as the same work.
- Identical repository state, request, model, reasoning level, policy, tool authority, and validation surface across baseline and candidate.
- Exactly one treatment difference per comparison.
- Counterbalanced execution order, because cache state is itself a variable.
- Receipt-backed token and cost accounting for every physical model call.
- Terminal validation and rollback evidence required on all build work.
- Independent review for architecture-sensitive comparisons.
- Explicit spending ceilings authorized before any paid arm ran. Every arm finished inside its ceiling.
- Fail-closed promotion: absence of evidence blocks activation rather than deferring to judgement.
Cheap, bounded experimentation is what makes that last rule affordable. When refusing to activate something costs almost nothing, there is no pressure to talk yourself into a weak result.
04The primary result
Across the ordinary efficiency endpoints — the group the promotion decision actually rests on — the treatment produced a modest, safe benefit that did not reach the bar set before the study began.
Measured result against the promotion floor
The floor was preregistered before the study ran, specifically so that an attractive but thin result could not argue its own way into production.
Ordinary workloads
Measured · below promotion floor
Safe, below threshold → existing production path kept
Architecture-sensitive workloads
Provisional · review open
Three comparisons produced a stronger directional signal than the ordinary group, including fewer physical model calls on the heaviest work.
Those numbers are not published here and are not counted toward any result. Independent blind review is incomplete, and a protected-boundary signal is not a benefit until it clears that review.
Held back — signal only, not a claim
Why the two are never merged. They answer different questions and carry different evidence weight. Averaging a measured ordinary result with an unreviewed protected one produces a larger, more flattering number and a worse study. The promotion decision uses the left card alone.
The decision was to keep the existing production path. Not because 4.85% has no value — at sustained volume a repeatable few percent is worth having — but because the sample was small, the effect varied materially by model and workload, one stratum regressed outright, and a single comparison per stratum cannot establish that a result will hold.
05The finding that changed our priorities
Alongside the controlled study we analysed a window of real governed work to decide where measurement effort should go next. It reordered our assumptions.
Where the tokens actually are
Token composition across a window of real governed engineering work.
Consequence. Response verbosity cannot be the primary lever — there is barely any output to cut. Trimming responses remains worth doing for readability, and because today's prose becomes tomorrow's context, but it is not a savings programme. The cost lives in what gets read, and a substantial share of it is evidence carried between steps: command output, validation results, and repository state.
The long-running tasks looked like the obvious target, and they were the biggest single pool of input. But attributing that cost by cause did not support the story we expected. Among the 47 outliers with complete activity coverage, none met the strict strong-no-progress definition, and command, validation, and mutation evidence dominated continuation input. That did not justify a new volume-only stop — existing hard ceilings and safety guards remain in place regardless.
So we did not add one. The finding pointed somewhere less obvious and more useful: the cost is in how evidence is represented between steps, not in the number of steps. Future work will study whether that evidence can be carried more efficiently while retaining exact, governed access to the original material. Long-run monitoring stays advisory, and warnings key on absence of progress rather than on volume.
06Long-session summaries are an economic decision
Long conversations genuinely benefit from durable summaries. But producing a summary costs tokens too, and a summary that costs more to write than it later saves is not efficiency — it is a second bill. The Workbench therefore treats summarization as an economic and quality decision rather than an automatic cleanup step.
- Raw history remains immutable and exactly retrievable. A summary never replaces the record.
- Summaries are genuinely useful for navigating long sessions, independent of any token argument.
- Manual summarization is available, with its cost and expected effect shown before anything is charged.
- Automatic summarization stays off until its generation cost and downstream quality are demonstrably justified for the work it is applied to.
- For eligible repository-question continuation, a bounded continuation state remains the cheap fallback; other surfaces retain their existing context path.
Our current measurements do not support an automatic savings claim, so we do not make one.
07Active versus experimental
The useful distinction is not a completion percentage. It is whether something can affect real work today.
What is live, and what is still being measured
Active
- usage and cost accounting across canonical model calls
- model capability awareness
- quality, authority, and validation protections
- long-session continuation support
- evaluation and rollback infrastructure
Experimental or evidence-gated
- dynamic context selection treatments
- governed evidence representation
- response sizing
- economics-aware summarization
- change-aware retrieval
- model-specific optimization
Reading. The right column combines behavior-neutral shadows, evidence-gated candidates, and explicitly authorized experiments. None is a production default, and several still need adequate measurement coverage before they could become one.
08Why this looks different from a general agent platform
General-purpose agent platforms increasingly combine multiple models, tools, persistent state, and isolated execution to complete broad workflows. AIGIS is narrower by design: it is a governed software-engineering runtime, where an efficiency result is accepted only when the resulting code, architecture, evidence, validation, authority, and rollback all remain safe.
That produces five concrete differences in how efficiency is even defined.
Where the approaches diverge
Reading. The outcome is not a cheaper agent loop. It is a control system that can explain why a treatment is eligible, run it without weakening the engineering boundary, and reject it when the evidence is heterogeneous, uneconomic, or incomplete.
09What the study proved
01
Quality gates and efficiency experimentation can coexist
Every arm reached a safe outcome and every build arm kept its validation and rollback evidence. Measuring efficiency did not destabilize the engineering workflow.
02
Model and workload must be evaluated together
The same treatment helped, did nothing, and actively hurt — depending on the pairing. Model identity alone is not enough to decide how a task should be handled.
03
Token volume alone does not prove waste
The heaviest sessions were carrying evidence, not spinning. Cost attribution changed the conclusion and prevented a governor that would have interrupted real work.
04
Refusing activation is a successful result
A system that can only say yes is not an evaluation system. Declining on incomplete evidence is the behavior that makes the eventual yes worth anything.
The study did not produce a universal efficient mode. It produced something more useful: a governed way to discover which optimizations are safe, effective, and appropriate for each kind of work.
10Where this goes next
- Improve how evidence is represented between steps, while keeping exact retrieval of the original material.
- Continue treatment experiments at the level of specific model and workload pairings rather than global modes.
- Study the economics of long sessions and summarization further before changing any default.
- Expand evidence coverage to additional providers; a result measured on one provider does not transfer to another.
- Keep quality, validation, and rollback as non-negotiable gates in every future round.
How to read these numbers
- Two experiments, never merged. The 18-arm runtime treatment study and the 54-arm static context benchmark asked different questions. Their efficiency results are not combined into a single figure.
- Architecture-sensitive results are signals, not results. Three comparisons remain under independent review, and their numbers are withheld until that review completes.
- Nothing was switched on. No experimental profile or automatic summarization treatment was activated. Experimental layers record measurements without changing what a model receives.
- Treatment response is not model capability. That a model benefits from a particular kind of context curation says nothing about its reasoning, autonomy, or safety.
- Evidence is provider-specific. The evaluation approach generalizes; the measurements do not. A result observed on one provider's models does not authorize the same treatment elsewhere.
- No automatic savings claim for summarization. Current measurements are observational, and observational data can reject a claim without being able to prove one.
Methodology note
V1's paid model evidence came from three Codex model strata. The decision architecture is provider-neutral; the evidence is not. Promotion remains provider-, model-, mode-, and workload-specific, so a result measured in one stratum does not authorize the same treatment in another.
study_readout
>_subject........token_efficiency >_stance.........quality_is_a_veto >_result.........universal_rule_rejected >_activated......none >_next...........evidence_representation
