Inputs
- A reproducible repository snapshot
- A bounded issue
- Acceptance tests
- Permission and tool limits
Control points
- Protected branches
- No secret output
- Automated tests
- Human diff review
Human approval gate
A repository maintainer reviews the full diff, test evidence, security impact, and scope before merge.
The workflow
Every step includes a check that can stop the process before risk moves downstream.
- 01
Freeze the task and baseline
Record the commit, issue, environment, and expected behavior before the assistant starts.
Gate: The baseline tests and known failures are captured. - 02
Constrain the workspace
Grant only the repository, tools, and credentials needed for the task.
Gate: Secrets and unrelated repositories are unavailable. - 03
Generate and test
Require the assistant to run relevant tests and explain any test it could not run.
Gate: A passing claim is backed by command output. - 04
Review the diff
Inspect correctness, scope creep, dependencies, security, and maintainability.
Gate: Unexpected file changes block acceptance. - 05
Merge through normal controls
Use the team's branch protection, approvals, and deployment process.
Gate: AI-generated work does not bypass engineering governance.
Candidates to pilot
Inclusion means relevant product shape, not measured superiority.
Sources checked
Open the original pages before relying on a time-sensitive product decision.