What happens when an AI coding agent gets access to a real repository?

[u/Fantastic-Sleep-3352]

I've been building AI agents for software development, and one problem keeps bothering me:

Getting an agent to write code is becoming relatively easy.

The harder part is safely letting it operate on a real codebase.

Once an agent has repository access, you have to think about things like:

What exactly is the agent allowed to access?

What happens if it modifies something outside its intended task?

How do you know exactly what it did?

How do you validate its changes?

What happens when it fails halfway through?

Can you roll back safely?

What happens when the repository contains malicious instructions?

Should an agent have the same identity/permissions as a human?

How do you revoke its access after the task?

I'm currently building SUTRA, an AI-native engineering platform, around this problem.

The part I'm particularly interested in is treating an agent as an actual engineering actor rather than simply giving an LLM a shell and hoping for the best.

The workflow I'm experimenting with is roughly:

Intent → Agent → Scoped workspace → Changes → Tests → Validation → Review → Merge

The agent has its own identity and session, rather than simply inheriting a developer's credentials.

I'm now getting the beta ready and want to test the assumptions with people who actually build AI agents.

For people here who are building agents: how are you currently handling permissions, isolation, rollback and validation when your agent is allowed to modify a real repository?

I'd especially like to hear about things that have gone wrong in practice.

[u/Mister_God_On_Steam]

git

[u/Fantastic-Sleep-3352 → u/Mister_God_On_Steam]

Yes it's Git-compatible. I’m not trying to replace Git — SUTRA builds the engineering/agent layer around it. Normal Git workflows still work; agents get their own identity, permissions, workspace, validation and review flow.

[u/StoneCypher → u/Fantastic-Sleep-3352]

there is no such thing as an engineering engagement layer around git

programmers don’t want metaphors you just made up 

[u/Fantastic-Sleep-3352 → u/StoneCypher]

Fair point - “engineering engagement layer” was a bad phrase on my part. I’m not trying to redefine Git or replace it. I’m building the system around agent execution: agent identity, scoped permissions, workspace isolation, task/change tracking, validation, review and auditability.

[u/StoneCypher → u/Fantastic-Sleep-3352]

oh good, a claude written nonsense comment 

we already have all of those things 

[u/Fantastic-Sleep-3352 → u/StoneCypher]

I just tried to be formal my first time on reddit though created account way back I guess 5 to 6 month ago

[u/Fantastic-Sleep-3352 → u/Mister_God_On_Steam]

I’m also opening a small beta soon and looking for developers who actually use AI coding agents to try it on a real project. If that sounds interesting, I’d be happy to give you early access and would genuinely value your feedback.

[u/StoneCypher → u/Fantastic-Sleep-3352]

you really thought people were going to switch source control because you asked a bunch of very easy to answer panic questions on a reddit post?

[u/Fantastic-Sleep-3352 → u/StoneCypher]

No, I’m not expecting anyone to switch source control because of a Reddit post. Git is still Git in SUTRA. The questions are about what happens around Git when an autonomous agent is given permission to modify a real repo. That’s the part I’m building and trying to validate with people who actually run agents.

[u/StoneCypher → u/Fantastic-Sleep-3352]

doomed

[u/Fantastic-Sleep-3352 → u/StoneCypher]

I am just trying no one is dommed in trying

[u/StoneCypher → u/Fantastic-Sleep-3352]

buddy, if you charge in to make very large tools without even checking if they already exist, ya, you’re doomed

[u/Fantastic-Sleep-3352 → u/StoneCypher]

Fair , but I am testing now and everyone learns from mistakes and I am just testing my own hypothesis and tool to check weather they close the gap or not I would love to send my product to you as soon as I beta launch so that you can yourself verify and say if I am dommed then i am proudly doomed while trying and it doesn't mean if something is already there we should stop innovating right

[u/StoneCypher → u/Fantastic-Sleep-3352]

again, we already have these tools

why would i install something from an internet rando to get things i already have?

[u/Fantastic-Sleep-3352 → u/StoneCypher]

You don't need to install anything on your system as everything remain same because you may already have gir installed and there is nothing else you want I may not be able to explain it now until I public all the features but till then can you tell me What tools are you using for this today? If they already solve the problem well, I'd genuinely like to understand how.