12 min read
Shipping Code With an Agent You Do Not Trust
I built a small, private harness that lets a coding agent open real pull requests under guarantees that are enforced by infrastructure rather than by prompt text, and that measures every run honestly enough to improve itself. This is what it does, what it proved, and what broke.