Tenki’s startup program is live: up to $50K in credits and grants.Apply
AI Agents

Agentic CI Solved Throughput. The Bottleneck Is the Gate.

Eddie Wang
Eddie Wangengineering

Share Article:

For most of the last decade, CI throughput was the thing teams complained about. Queued jobs backing up behind slow runners, serial steps wasting minutes, cold-start delays eating into developer feedback loops. GitHub just fixed all of that in a single month.

Between June 11 and June 25, 2026, GitHub shipped Agentic Workflows, parallel steps in Actions, RHEL runner images, and new managed runner controls. Four major releases in two weeks, all targeting the same layer: compute throughput. The platform can now run your CI faster, in parallel, on better images, with finer-grained control over who gets what runners.

That's good news. It also means the throughput problem is done. And if you're still spending your CI budget on faster runners to keep up with AI agent output, you're optimizing a constraint that no longer exists.

What GitHub actually shipped

The June 2026 releases weren't incremental. They represent a structural change in how Actions handles workloads.

Parallel steps are the headline feature. Before June 25, every step in a job ran sequentially. You could hack around it with shell backgrounding and &, but logs interleaved and failure handling was a mess. Now you get first-class background: true, wait/wait-all, cancel, and a parallel block that groups steps for concurrent execution. Multiple builds, background services, telemetry uploads while packaging continues. All within a single job.

Agentic Workflows go further. They let you define automation in natural-language Markdown files that compile down to standard Actions YAML. Issue triage, CI failure analysis, documentation updates. These aren't theoretical use cases. Carvana is running them across multiple repositories. Marks & Spencer built a catalog of reusable agentic workflows spanning security, quality, and delivery.

Add in the new managed runner controls (organizations can now restrict runner access, enforce concurrency limits, and route jobs through policy) and the RHEL runner images, and you've got a platform that's moved past the "we need more compute" phase entirely.

The constraint moved, but most teams didn't notice

Here's what happens when you combine these releases with the reality of AI coding agents in mid-2026. An agent can open 50 or more pull requests per day. With parallel steps and on-demand runners, CI runs all of them in minutes. Queue depth? Solved. Runner availability? Solved. Step serialization? Solved.

So what's left? The merge decision.

Every one of those 50 PRs passes CI. The tests are green. The linter is happy. The type checker signs off. But does the change actually make sense? Does it introduce a subtle regression the test suite doesn't cover? Does it follow the patterns the rest of the codebase expects? Does it handle the edge case that only shows up in production under load?

Tests confirm the code does what the tests check for. They don't confirm the code is correct. That distinction has always existed, but it didn't matter much when humans opened three PRs a day and reviewed each other's work over coffee. When agents open 50 and CI greenlights all of them in 12 minutes, the distinction becomes the whole game.

Buying faster runners won't help

We talk to engineering teams every week who are scaling their runner fleets to handle the volume of agent-generated PRs. Bigger instances, more concurrency slots, GPU runners for ML pipelines. And the logic makes sense on the surface: more PRs means more CI runs, more CI runs means more compute demand.

But GitHub just commoditized that layer. Parallel steps cut wall-clock time without adding runners. Managed runner controls let you allocate what you have more efficiently. Agentic Workflows handle the orchestration. The compute throughput problem has an off-the-shelf solution now.

The problem that doesn't have an off-the-shelf solution is this: when all 50 PRs pass CI, which ones are safe to merge?

A green CI run tells you the code compiles and the existing tests pass. It doesn't tell you whether the change is a good idea. It doesn't catch a race condition introduced in a concurrent data path. It doesn't flag that the agent rewrote an error handler in a way that swallows exceptions. It doesn't notice that a dependency was pinned to a version with a known CVE.

May Walter, CTO at Hud.io, put it well in the GitHub Agentic Workflows announcement: "Getting an agent to open a pull request was never the hard part. Trusting it enough to merge is."

The merge gate has to be right

When the bottleneck was throughput, a weak merge gate was tolerable. Humans reviewed most PRs anyway. The review might have been cursory, but it existed. If something slipped through, the pace of change was slow enough that someone would catch it in the next sprint.

That model breaks at agent scale. Fifty PRs per day means a human reviewer gets about nine minutes per PR in a standard workday. That's not review. That's rubber-stamping. And if the merge gate is just "CI passes and one person clicks approve," you've got a pipeline that's fast but unguarded.

The gate needs to do three things that CI traditionally doesn't:

  1. Understand the codebase, not just the diff. A test suite validates behavior against explicit assertions. A good reviewer knows that a function changed its return type in a way that'll break three downstream callers the tests don't cover.
  2. Assign severity, not just pass/fail. Not every finding is a blocker. Noisy gates that flag style nits alongside security issues train developers to ignore them. The gate needs to distinguish critical findings from suggestions.
  3. Be required, not advisory. An advisory comment on a PR is easy to dismiss, especially when an agent generated the PR and nobody feels personal ownership over the code. A required status check that blocks the merge until critical findings are resolved is a fundamentally different enforcement model.

Where Tenki puts its investment

This is why Tenki invests in review quality rather than runner milliseconds. Tenki's Code Reviewer is built to function as a required status check, not a comment bot. It understands the codebase contextually, assigns severity levels to findings so teams can tune what blocks a merge versus what gets flagged as a suggestion, and integrates as a required gate in your GitHub branch protection rules.

In independent benchmark testing across 122 seeded bugs, Tenki's Code Reviewer caught 68.9% of them, compared to 28.7% for CodeRabbit and 24.6% for Copilot. Those numbers matter a lot more when the PR volume goes from 3 per day to 50. At 50 PRs a day, a reviewer that catches 25% of bugs is missing roughly 37 defective changes. One that catches 69% is missing about 16. That gap is the difference between a stable codebase and a slow accumulation of regressions nobody can trace.

The design choice is deliberate. When the bottleneck was compute, you optimized compute. Now that the bottleneck is the merge decision, you optimize the merge decision. Spending more on runners that shave 30 seconds off a CI run doesn't matter if the thing that merged shouldn't have.

What to actually optimize in 2026

If you're an engineering manager or DevEx lead evaluating where to put CI budget, here's the honest assessment of what the June 2026 releases changed.

You probably don't need more runners. Parallel steps alone will cut wall-clock time for most workflows without adding a single runner. If your CI is slow because steps run in sequence, that's a configuration change, not a procurement decision.

You probably do need a better merge gate. If your current setup is "tests pass + one approval," that was fine when humans were the primary PR authors. It won't hold up against agent-generated volume. Ask yourself: if an agent opens a PR that passes all tests but introduces a subtle logic error, what in your pipeline catches it before it hits main?

Make the gate required, not advisory. The difference between a review comment and a required status check is the difference between a suggestion and enforcement. Advisory comments get ignored under time pressure. Required checks don't ship until the issue is resolved. That enforcement model is the only thing that scales when PR volume outpaces human review capacity.

GitHub solved the throughput problem. The question for every team running AI agents in 2026 isn't how fast CI runs. It's how good your gate is.

Tags

#agentic-ci#quality-gates#merge-policy#parallel-steps

Recommended for you

What's next in your stack.