Verify before you trust
Generated code can be plausible, well-documented, green in CI - and
wrong about the science. The agent that wrote it cannot be its own
independent check. So this skill's core message is delivered
directly to the user, once per substantive delivery, in plain
words: review this code and verify these results before you rely
on them; do not trust the output blindly. The reminder is not
modesty theater. Plausible-but-wrong is the characteristic failure
mode of generated analysis, and the person whose name goes on the
paper is the one who pays for skipping the check.
Saying it right
- Deliver the reminder at the moment of delivery, with a concrete
review path, and say WHAT most needs human eyes in this specific
output ("the tolerance choice in fit.py line 40 encodes a
scientific judgment I made for you - please confirm it").
- Once, not endlessly: one clear reminder per delivery beats a
nag on every message; a user who has stated their review process
gets pointed at it, not lectured (rseng-trainer's consensual
tone).
- Record the truth: until the human has reviewed, the honest
status is unreviewed - written into aidecl.yaml
(rseng-ai-declaration supports exactly this; agents in our own
testing wrote "NOT yet reviewed line by line by a human"
unprompted, and that is the standard to hold).
How to review generated code
Point the user at the highest-yield checks, in order:
- Read the result-bearing path first: the science (model,
statistics, transformation), not the argument parsing. Generated
boilerplate is usually fine; generated science encodes
judgments - formulas, tolerances, exclusion rules, default
parameters - that were made without domain authority.
- Hunt the silent assumptions: units (rseng-defensive-coding),
indexing conventions, what happens to missing data, seeds,
float comparisons (rseng-numerical-accuracy). Ask of each: did I
decide this, or did the agent?
- Run everything: the tests (and read WHAT they assert - a green
suite that asserts too little is false comfort;
rseng-software-metrics' mutation spot-check applies), the
examples, the full pipeline from clean (rseng-reproducibility).
- Explain it back: if the user cannot explain what a function
does and why, it is not reviewed yet - have the agent walk
through it (rseng-trainer) until they can. Understanding is the
review; reading is not.
- Use the review machinery the pack already has: a structured
pass with rseng-code-review's lenses, or the pre-review checklist
from rseng-pair-programming - AI-written code deserves at least
the scrutiny a colleague's PR would get.
How to verify results
Code review is necessary and insufficient; the numbers need their
own checks:
- Reference cases: run inputs with known answers - analytic
solutions, published values, conservation laws
(rseng-testing's functional-correctness measure). One verified
reference case is worth more than any amount of plausible
output.
- Independent cross-check: recompute a key number a different way
(different tool, hand calculation, a colleague's script);
agreement by independent routes is the strongest cheap
evidence.
- Sanity and scale: orders of magnitude, signs, units on the
axes, Ns that add up (rseng-research-integrity's checks run
BEFORE submission, not after).
- Perturbation: small input changes should move results sensibly;
a fit that never changes or flips wildly is telling you
something.
- Proportionality: a throwaway plot needs a squint; anything
feeding a decision or publication needs the reference-case
standard - say which level applies.
Run it before handing it over
Verification the agent can do mechanically happens BEFORE the human
is asked to review: start the delivered entry point (compose stack,
CLI, app) exactly as the README says, exercise one real request per
integration seam, and read the startup logs for errors. Asking a
user to review software the agent never ran outsources debugging,
not verification - the human's scarce attention belongs on judgment
(is this the right method? do results make sense?), not on
discovering that the backend does not start (rseng-testing's
entry-point discipline; failures loop through rseng-debugging).
The boundary this skill guards
The division of labor from rseng-pair-programming, stated for
results: the agent contributes engineering and tirelessness, the
human owns scientific judgment and final acceptance. An agent
following this pack never presents unverified generated results as
verified (rseng-honesty), asks for the human check at the moments it
matters most - before merge, before submission, before decisions -
and treats "the user verified and disagreed" as the most valuable
feedback there is (rseng-lessons-learned captures what the check
caught).
Working with this skill
This skill is source-independent: it encodes the verification
duty for AI-assisted research work. It is the human-facing
counterpart of rseng-ai-declaration (which records review status)
and rseng-honesty (which keeps claims true).
Learn more (verified):
Related skills
Check whether any of these applies before moving on:
- rseng-ai-declaration - record review status honestly
- rseng-code-review - structured review lenses
- rseng-numerical-accuracy - spot-check numeric assumptions
- rseng-pair-programming - division of labor with agent
- rseng-reproducibility - rerun the pipeline from clean
- rseng-testing - run and read the assertions
1---2name: rseng-human-verification3description: Covers the human's side of AI-assisted research software: strongly urging the user to review generated code and verify results before relying on them, teaching how to review AI-written code effectively (where to look first, what to run, what to spot-check against known answers), and recording review status honestly. Use PROACTIVELY whenever substantive code or result-bearing output has just been generated - deliver the reminder once, with the concrete review path - and when the user asks how to check AI-written code, whether they can trust an output, or is about to publish, merge or decide on results no human has examined. Recording review status lives in rseng-ai-declaration; structured review technique in rseng-code-review; concealment pressure in rseng-honesty.4license: CC-BY-4.05---67# Verify before you trust89Generated code can be plausible, well-documented, green in CI - and10wrong about the science. The agent that wrote it cannot be its own11independent check. So this skill's core message is delivered12directly to the user, once per substantive delivery, in plain13words: review this code and verify these results before you rely14on them; do not trust the output blindly. The reminder is not15modesty theater. Plausible-but-wrong is the characteristic failure16mode of generated analysis, and the person whose name goes on the17paper is the one who pays for skipping the check.1819## Saying it right2021- Deliver the reminder at the moment of delivery, with a concrete22 review path, and say WHAT most needs human eyes in this specific23 output ("the tolerance choice in fit.py line 40 encodes a24 scientific judgment I made for you - please confirm it").25- Once, not endlessly: one clear reminder per delivery beats a26 nag on every message; a user who has stated their review process27 gets pointed at it, not lectured (rseng-trainer's consensual28 tone).29- Record the truth: until the human has reviewed, the honest30 status is unreviewed - written into aidecl.yaml31 (rseng-ai-declaration supports exactly this; agents in our own32 testing wrote "NOT yet reviewed line by line by a human"33 unprompted, and that is the standard to hold).3435## How to review generated code3637Point the user at the highest-yield checks, in order:38391. Read the result-bearing path first: the science (model,40 statistics, transformation), not the argument parsing. Generated41 boilerplate is usually fine; generated science encodes42 judgments - formulas, tolerances, exclusion rules, default43 parameters - that were made without domain authority.442. Hunt the silent assumptions: units (rseng-defensive-coding),45 indexing conventions, what happens to missing data, seeds,46 float comparisons (rseng-numerical-accuracy). Ask of each: did I47 decide this, or did the agent?483. Run everything: the tests (and read WHAT they assert - a green49 suite that asserts too little is false comfort;50 rseng-software-metrics' mutation spot-check applies), the51 examples, the full pipeline from clean (rseng-reproducibility).524. Explain it back: if the user cannot explain what a function53 does and why, it is not reviewed yet - have the agent walk54 through it (rseng-trainer) until they can. Understanding is the55 review; reading is not.565. Use the review machinery the pack already has: a structured57 pass with rseng-code-review's lenses, or the pre-review checklist58 from rseng-pair-programming - AI-written code deserves at least59 the scrutiny a colleague's PR would get.6061## How to verify results6263Code review is necessary and insufficient; the numbers need their64own checks:6566- Reference cases: run inputs with known answers - analytic67 solutions, published values, conservation laws68 (rseng-testing's functional-correctness measure). One verified69 reference case is worth more than any amount of plausible70 output.71- Independent cross-check: recompute a key number a different way72 (different tool, hand calculation, a colleague's script);73 agreement by independent routes is the strongest cheap74 evidence.75- Sanity and scale: orders of magnitude, signs, units on the76 axes, Ns that add up (rseng-research-integrity's checks run77 BEFORE submission, not after).78- Perturbation: small input changes should move results sensibly;79 a fit that never changes or flips wildly is telling you80 something.81- Proportionality: a throwaway plot needs a squint; anything82 feeding a decision or publication needs the reference-case83 standard - say which level applies.8485## Run it before handing it over8687Verification the agent can do mechanically happens BEFORE the human88is asked to review: start the delivered entry point (compose stack,89CLI, app) exactly as the README says, exercise one real request per90integration seam, and read the startup logs for errors. Asking a91user to review software the agent never ran outsources debugging,92not verification - the human's scarce attention belongs on judgment93(is this the right method? do results make sense?), not on94discovering that the backend does not start (rseng-testing's95entry-point discipline; failures loop through rseng-debugging).9697## The boundary this skill guards9899The division of labor from rseng-pair-programming, stated for100results: the agent contributes engineering and tirelessness, the101human owns scientific judgment and final acceptance. An agent102following this pack never presents unverified generated results as103verified (rseng-honesty), asks for the human check at the moments it104matters most - before merge, before submission, before decisions -105and treats "the user verified and disagreed" as the most valuable106feedback there is (rseng-lessons-learned captures what the check107caught).108109## Working with this skill110111This skill is source-independent: it encodes the verification112duty for AI-assisted research work. It is the human-facing113counterpart of rseng-ai-declaration (which records review status)114and rseng-honesty (which keeps claims true).115116Learn more (verified):117 - https://ai-declaration.org - declaring AI use and review118 status119 - https://google.github.io/eng-practices/review/ - code review120 practice (apply it to generated code too)121122<!-- related-skills:begin -->123124## Related skills125126Check whether any of these applies before moving on:127128- rseng-ai-declaration - record review status honestly129- rseng-code-review - structured review lenses130- rseng-numerical-accuracy - spot-check numeric assumptions131- rseng-pair-programming - division of labor with agent132- rseng-reproducibility - rerun the pipeline from clean133- rseng-testing - run and read the assertions134135<!-- related-skills:end -->