Agency

An experiment in containment: how do you let AI agents write and run code on your infrastructure without handing them the keys? Agency is the harness: an orchestrator, a Postgres state machine, disposable rootless sandboxes, short-lived credentials and an independent reviewer. The side projects it produces are almost a by-product.

What's interesting about it

• Explicit task state machine in Postgres: legal transitions only, row locks on every change, work claimed with SKIP LOCKED.
• Workers run on a separate rootless Docker daemon, read-only, all capabilities dropped, with memory, CPU, process and wall-time limits.
• The agent never holds push credentials. It hands back a git bundle; the orchestrator checks diff size and protected paths, then pushes with a one-hour token scoped to a single repo.
• Every change passes the project's own verification and a review by a model from a different family before it reaches me.
• When a model runs out of quota it's benched until reset and the next one in the pool takes over.