Post

Agents open PRs in our repo. The diff is untrusted input flowing into models with merge authority. This is what dealing with agentic PRs actually looks like — multiple scoped AI reviews, each with a different job, including auditing changes to the pipeline itself. stack72.dev/anatomy-of-a...

stack72.devAnatomy of a Swamp PRAgents open PRs in our repo. Other agents review them. That means untrusted input flowing through models with merge authority — so we built a pipeline with four independent AI reviews, scoped tools, a...

1 repost2 likes

No replies yet.