MuleSoft Builds Trust-Bar System to Block AI-Generated Code Merges for Agentic Development at Salesforce

Title

MuleSoft Builds Trust-Bar System to Block AI-Generated Code Merges for Agentic Development at Salesforce

Content

Salesforce's MuleSoft unit has built a trust-bar system for AI-generated code, designed to block merges when reliability checks fail in agentic development environments. According to Salesforce Engineering's write-up in June 2026, the trust bar was created because "agentic development changes the economics" of code review. Historically, code trust was enforced through manual reviews, downstream validation, and human expertise — a model that worked when human-paced review cycles matched human-paced code production. MuleSoft's framing is that "code now reaches the merge boundary at a velocity and volume those workflows were never designed to absorb. The same acceleration that shortens delivery cycles also narrows the window in which trust issues can be caught." The stakes motivate this conservative guardrail design: customers run production workloads directly on MuleSoft infrastructure, so any change that ships can flow into customer runtime environments and downstream Salesforce systems across the software supply chain. Every change has to clear the same trust threshold, every time, regardless of how it was authored — a deliberately high bar given the blast radius of customer-affecting releases. The trust-bar approach is described as "a model any engineering org adopting agentic development can apply." Rather than retrofitting trust onto AI-generated code after merge, the system prevents merges from completing when their AI-generation provenance is detected and the trustworthiness signal falls below threshold. Salesforce Engineering frames this as a forward-looking pattern for engineering organizations adopting agentic coding, where the alternative — allowing human-paced review cycles to gate machine-paced generation — would not scale.