A governed cloud coding agent that runs development tasks on isolated machines and returns results as pull requests, solving the need to delegate code changes without running code locally or exposing credentials to the agent. It sells to developers, engineering teams, and IT teams in B2B organizations that use GitHub and manage repositories with branch protection and review workflows. It is positioned as a governed alternative enforced by the runtime with a policy pinned by digest, hard token caps metered by the gateway, and encrypted evidence per attempt, delivered as SaaS via a GitHub App with bring-your-own model keys.
Key features
- Isolated machine per attempt
- Policy pinned by digest
- Hard token cap metered by gateway
- Encrypted evidence per attempt
- Pull request delivery without auto-merge
- GitHub App repository connection
- No credentials in agent process
- Separate short-lived credentials per step
- Wall clock and process count caps
- Live activity and budget display