Sign InOpen Brain
arXivPaperNeeds Review

SWE-Gate: Passing Functional Tests Is Not Enough for Software Engineering Agents

SWE-Gate shows why green tests are an incomplete agent-eval signal: 221 of 644 functionally passing repairs still violated constraints derived from code review.

arXiv · Sep 3, 2026
Open Source Open MarkdownOpen JSON
Source Summary

SWE-Gate contains **303 repair instances** from **75 Python repositories**, with separate tests for functionality and constraints derived from real pull-request reviews. Across four model backends, 644 repairs passed functional tests, but **221** still violated review constraints.

Practical Implication

Treat green tests as one gate, not final acceptance, for coding-agent patches. Encode review expectations as executable checks where possible, and evaluate issue resolution separately from compliance with repository-specific requirements.

Agent-Ready Context
SWE-Gate contains **303 repair instances** from **75 Python repositories**, with separate tests for functionality and constraints derived from real pull-request reviews. Across four model backends, 644 repairs passed functional tests, but **221** still violated review constraints.

Treat green tests as one gate, not final acceptance, for coding-agent patches. Encode review expectations as executable checks where possible, and evaluate issue resolution separately from compliance with repository-specific requirements.

The benchmark uses synthesized repair instances and a common agent scaffold, so its failure rates may not transfer directly to your repos. It nevertheless exposes a concrete blind spot in functional-only coding-agent evaluations.
Connected Context · Feed7 Judgment

This turns the general warning that coding benchmarks can reward shortcuts into a concrete acceptance split: functional success and compliance with review-derived constraints are materially different outcomes. It supports final-state and repository-specific grading, while its synthesized tasks and shared scaffold mean the reported violation rate should diagnose a blind spot, not estimate failure rates in a particular codebase.

DeepSWE: A Contamination-Resistant Coding Benchmark — James Shi, DatacurveDeepSWE broadens evaluation with original long-horizon repository tasks, while SWE-Gate adds an orthogonal check that even functionally successful repairs may violate review constraints.Rethinking Environments for Long-Horizon Work — Rayan Garg, Theta SoftwareImplements the call for final-state inspection by separating issue resolution from constraint compliance instead of treating test passage or task duration as sufficient.Form, Not Content? A Preregistered, Placebo-Controlled Evaluation of Learned Error-Conditioned Self-Repair Through Prompts and Weights in Frozen Small Code ModelsBoth expose misleading success signals: retries can look like error-conditioned repair without using the error, and green tests can look like acceptable engineering without satisfying review requirements.When Will The Benchmaxxing Plague End? — Nick Heiner, Surge AIProvides a concrete example of weak-verifier risk: a functional-only grader can award patches that fail requirements encoded in real review feedback.
Context Map
benchmarkcoding#agent-evals#benchmark-integrity#agent-reliability
Uncertainty
The benchmark uses synthesized repair instances and a common agent scaffold, so its failure rates may not transfer directly to your repos. It nevertheless exposes a concrete blind spot in functional-only coding-agent evaluations.