Karpathy’s four coding-agent principles are useful, but production agents need scoped edits, test-gaming controls, trust-boundary calibration, and calibrated reporting.