← All speakers

Bio, Work & Ideas

Prasenjit Sarkar

Conference affiliation: Sonar · 2026

Prasenjit Sarkar is a solutions marketing manager at Sonar focused on enterprise-quality AI-generated code: whether software produced by coding agents remains secure, maintainable and affordable after it passes its tests. His background spans more than two decades in technology and product work, including cloud-native networking, API management, language models, retrieval-augmented generation and knowledge graphs.

In 2025, Sarkar evaluated four GPT-5 reasoning settings across more than 4,400 Java programming assignments. Greater reasoning intensity improved functional performance and reduced some obvious defects, but also produced more code and shifted failures toward subtler issues, including concurrency errors and incomplete certificate validation. The medium setting slightly surpassed the high setting on functional success while costing substantially less.

He subsequently coauthored research comparing six matched pairs of cleaner and messier repositories with Olivier Schmitt and Priyansh Trivedi. Agents working in cleaner codebases used approximately 7% fewer input tokens and 8% fewer output tokens, and revisited edited files less frequently—evidence that software maintainability affects operating costs as well as developer comprehension.

  • Passing tests does not establish production readiness. At AI Engineer Europe 2026, Sarkar described evaluating 4,444 Java assignments for security findings, bugs, code volume, cyclomatic complexity and cognitive complexity. Models solving identical problems generated markedly different amounts of code: Claude Sonnet 4.6 produced approximately 627,000 lines, while GPT-5.4 variants produced approximately 1.2 million.
  • Clean code changes agent economics. Repository structure, naming and manageable complexity influence how much context coding agents consume and how often they retrace their work, making technical debt a recurring computational expense.
  • Deterministic verification makes autonomy accountable. Sarkar advocates reproducible verification gates grounded in compilation, static analysis and security rules. Probabilistic model-based review can assess intent, but enterprise workflows also need objective checks capable of rejecting unsafe or incomplete changes.
  • Guide, verify and solve form one development cycle. His Agent-Centric Development Cycle pairs architectural context with in-loop code analysis and verified remediation while retaining developer oversight. He also coauthored the introduction of Sonar Vortex and the SonarQube Remediation Agent, extending those principles across code generation, quality gates and automated fixes.

Read the topics behind these talks

1 conference talk

Key ideas

Scroll to read ↓

Passing tests is only the beginning: evaluating generated code also requires measuring security, maintenance cost and complexity, then feeding those findings back into the agent’s development loop.

  • Who checks the code after the agent writes it?
    0:20 ↗
  • Functional correctness leaves engineering questions open
    2:00 ↗
  • A high pass rate can accompany substantial defects
    3:38 ↗
  • Where unreliable output can come from
    5:27 ↗
  • Read the leaderboard across several dimensions
    6:45 ↗
  • Measure paths through code and the effort of understanding it
    8:36 ↗
  • Improvement changes the defects reviewers must find
    9:48 ↗
  • Guide generation before verifying its output
    10:32 ↗
  • Return analysis findings to the agent before committing
    11:41 ↗
  • Propose repairs, check them, and return them for review
    12:39 ↗
  • Put the checks where development already happens
    14:10 ↗

References