Repo-native tooling: a sandboxed agent workflow using Git as a dead drop

OutrageousAbies5835 · reddit · 2026-10-30

A Reddit user details a repo-native tooling setup for sandboxed coding agents, reusing already-approved transports like Git instead of negotiating security for extra channels. Agents (planner/implementer/reviewer) run in OpenShell with no secrets, communicate with a human-supervised gatekeeper only via a separate Git repo acting as an auditable dead drop, and the host reads code only through bare shallow clones with hooks and attributes disabled. Full write-up covers benefits and limitations; author built the Epiq tool used.

Original post →

More from coding & agent

coding & agent channel →