Coding agents are trained on common patterns, and you see that emerge in the code they produce. Even when that pattern has a giant security vulnerability.
I had a recent discussion on Reddit where someone found that their LLM-generated code was using user-provided metadata to assign a security role. The impact was severe: any user could simply manually edit the metadata they provided to mark themselves as admin, and it would dutifully grant it.
The code compiled just fine, all the unit tests passed, and manual QA looked clean. The code did exactly what you'd expect from a plain reading, and it was wrong.
The thing that struck me was that none of my normal checks (honestly, even human-manual ones) were designed to catch this. The acceptance criteria say "can a user log in" not "a user cannot manually promote themselves".
The flaw isn't the code, it's what's being checked. A check can only catch what it can see, and most checks see far less than we assume.
I call this the verification surface: the set of things a given check can actually see.
A test that runs the app sees crashes. It can't see privilege escalation. Those are different surfaces, and "it passed" only means "it passed through the surfaces you happened to check". That's why I don't think reliability is about the model. A smarter model writes the same plausible-but-flawed code. Reliability comes from checking against a surface that can see the failure you actually care about.
You can only trust what you can verify. The catch is that what you can verify is the surface, and most of us never chose it on purpose.
A few things it's not. It's not the model's confidence: you can be very sure and still be looking at the wrong surface. It's not a guardrail either; the guardrail is the check, the surface is what the check can see. And it's not really about the model, which is the part people find surprising. Two systems built on the same model can be worlds apart on reliability, depending on what each one lets you verify.
This is the plain-language version. I develop it properly across three papers, testing the same rule in three domains:
- Trust Topology — the flagship framework, on a 97-day production coding pipeline. doi:10.5281/zenodo.20292194
- Medical imaging companion — the same rule in image segmentation. doi:10.5281/zenodo.20331363
- Language-model companion — the same rule at the token and schema level. doi:10.5281/zenodo.20331399
Using the term? Cite the flagship: Rothrock, M. (2026). Trust Topology: Verification Surfaces as the Unit of Reliability. Zenodo. doi:10.5281/zenodo.20292194