My name is Matt and I am building Airlock. Airlock is going to be an open standard on managing autonomous fleets of engineering agents. I am seeking constructive feedback on the direction of this project and also asking what are your major pain points with managing AI use at larger businesses. Right now I am running my own company using this framework with a total of 23 workflows across four large scale projects.

Airlock is still really early, only 3-4 weeks old.

Airlock's configuration standard is aimed to be open source and I will also open source the backplane once I gain a bit more confidence in what I have built here and it is a bit more ready for public scrutiny. Today the schema itself and the reusable GitHub actions are publicly available. I will selfishly figure out how to monetize this at some point but my desired customer is going to be larger enterprises. Airlock kind of does a lot of things but if I had to sum it up in several bullet points it would be:

1) Allows for the configuration of agent behaviors and life cycles under version control. Each agent run proves who it is with GitHub’s OIDC token, and Airlock trades that for a GitHub token that lasts one hour and can only touch the repos and permissions listed in that agent’s role file.

2) Allows for configuring levels of autonomy starting with a repository's base autonomy level with stricter overrides down to individual files within a code base. (e.g. you trust agents for most of the repo but perhaps you want extra gating around the 'billing' or 'auth' modules).

3) Supports a standard autonomy scale. At level 4 agents are leading a project's direction while at level 1 they are dependent on humans to lead the direction of a project.

4) Provides an out-of-the-box OTEL collector that stores a subset of agent actions you would care about in the event of an audit. I’m exploring storing agent prompts and user prompts so that only the customer can decrypt them, and haven’t decided how.

5) Comes with a shadow mode that allows you to run Airlock and observe how it would behave in your org without turning it on.

To try it you just need to install the GitHub App, create a policy repository and run on GitHub hosted runners. I personally use self-hosted runners on EC2 spot instances. Visit https://airlock.lunareng.com/docs/quickstart to get started.

I have been really passionate lately about exploring how businesses of the [near] future will effectively manage autonomous development using agents at scale. I want to help answer the question of how can the business better manage AI spend, prioritization of token usage, auditability of agent actions and compliance with various governance, risk and compliance frameworks.

I am coming from the perspective of being an engineer for 15+ years but I have somehow managed to also develop a good understanding of how larger businesses operate. My vision of the future looks like a world where engineers don't use agent harnesses directly from their computer [for coding]. Instead engineering teams are managing a larger backlog of work that is automatically picked up by these agents. Engineering will instead be less about writing code and more about effectively deploying technology to solve business problems.

Thanks for taking a look and I look forward to meeting you in the comments.

References: https://github.com/lunareng/airlock-actions https://airlock.lunareng.com/schema/role.schema.json https://airlock.lunareng.com/schema/autonomy.schema.json https://airlock.lunareng.com/schema/config.schema.json https://www.anthropic.com/institute/measuring-pace-of-ai-dev... https://felixrieseberg.com/how-to-be-more-ambitious-a-tutori...

Merkle's Puzzles

Saint Brice's Day Massacre (1002)

Show HN: Jot – Select text anywhere on macOS, tap Shift twice, get Markdown

Luxe: GTK4 Continuation of LXDE

AI-first browser test automation at $0.01 per step

RIP, Harvest

Revolut Cut AI Costs 90% and Started Shipping Faster

Local data center fights are fueling a wider backlash

Video of Jensen Huang after learning about the Chinese honeypot scandal

You've Given the Insider Threats in Your Company a Super Intelligent Accomplice

How Low-Dimensional Is Intelligence?

Returning Starship to the Launch Site

Agents don't suggest the use of LLMs for problems where they should

Read Huang's email to his staff and statement from Nvidia's board of directors

Microsoft Workers Call for Accountable AI

Investigating Vault Particles with Claude

Adapting for a World of Software Factories

Advent of Computing Episode 194 – SpeedCoding Your Way to Software

Dodo – A Community Fork of Deno

RetroWEB 2.0: a forwarding proxy for old browsers

The Psychology of Letting Go

Staff at the US center for AI safety are reporting to the White House

Jensen Huang Betrayed Nvidia, Not Just His Family

Nvidia launches investigation into CEO's alleged relationship with Chinese spy

Replacing corporations with openly operated ERP

Artificial Analysis Decision Index v2

Parse_number() as a SQLite extension: C vs. Rust

Ian Murdock – And we learn about Debian

Show HN: Airlock – Policy-as-code for fleets of AI coding agents

Show HN: Replay your Claude Code logs to count parallel session collisions

Ask HN: Are you running production workloads in Pytorch eager mode?