← Reddit

I built a way for Claude Code to verify its own work instead of just saying "done"

Reddit · hack_the_developer · June 12, 2026
Claude Code shipped a 401 on my payment endpoint. Called it done. I didn't know for 3 days. So I built Iris: an MCP server that runs inside your real app and gives your agent a verdict (pass/fail + evidence) instead of a snapshot it has to interpret. How it

Detailed Analysis

A developer has released Iris, an open-source MCP (Model Context Protocol) server designed to address a fundamental reliability gap in Claude Code's autonomous coding workflow: the agent's tendency to declare tasks complete without verifying that the resulting code actually functions correctly. The project was motivated by a direct failure case in which Claude Code shipped a 401 error on a payment endpoint and reported success, a bug that went undetected for three days. Iris allows the agent to call an `iris_assert()` function with explicit pass/fail conditions — such as an HTTP 200 status, a clean console, or a specific event signal — and returns structured evidence (`{ pass: false, evidence: [...] }`) including the actual value observed and the precise file and line number responsible for the failure.

The tool's core architectural distinction is that it runs inside the real application rather than operating on a separate browser instance or interpreting DOM snapshots. This contrasts meaningfully with tools like Playwright MCP, which drives an external browser and presents the agent with a snapshot it must interpret probabilistically. Because Iris returns a binary verdict with grounded evidence rather than a representation the agent must reason about, it eliminates a layer of inference that introduces both latency and error. The developer is explicit that the two tools are complementary rather than competitive, positioning Iris as the verification layer and Playwright as the interaction layer.

The token efficiency argument the developer presents is notable, though deliberately qualified. In the common feedback loop scenario — where an agent needs to check whether a condition was met — Iris consumes approximately 100 tokens compared to roughly 6,856 for a full-tree snapshot, a 73× reduction. However, when comparing full-tree outputs directly, the differential narrows to approximately 1.8×, a figure the developer surfaces proactively to preempt misleading interpretations. The transparency here reflects a growing norm in developer tooling discourse around AI agents, where credibility increasingly depends on honest benchmarking rather than selectively favorable metrics.

Iris fits into a broader and accelerating trend in the AI development ecosystem: the construction of scaffolding infrastructure around large language model agents to compensate for their known failure modes in autonomous execution contexts. Claude Code and similar agentic coding tools operate well in single-turn or supervised settings but introduce compounding risk in multi-step workflows where undetected errors propagate silently. Tools like Iris represent a category of "agent reliability middleware" — lightweight, composable primitives that enforce ground-truth verification at key execution checkpoints. The MCP protocol, which Anthropic introduced to standardize how Claude interfaces with external tools and data sources, has become a meaningful extension surface for exactly this kind of third-party reliability tooling.

The project is released under the MIT license and scoped intentionally to development and localhost environments, signaling a pragmatic, safety-conscious design philosophy. By constraining the blast radius of the tool to local development contexts, the author avoids the security surface area that would come with production instrumentation while still addressing the phase of development where silent agent failures are most costly — when code is being written and tested autonomously before human review. That a significant portion of post-Claude Code community tooling now centers on verification, rollback, and failure detection rather than capability extension suggests that trust in agentic output remains the primary unsolved problem in practical AI-assisted software development.

Article image Read original article →