InfoQ 中文T2·72 pts
- The orchestrator separates state-transition decisions from side effects like database, network, and model calls, persisting run state for resumable execution.
- Agent containers receive only short-lived repo tokens and model credentials, with no access to Slack, Linear, or cloud identity, plus an independent Git Diff check restricting paths.
- High-risk tasks such as migrations, schema changes, CI config, auth, and payment code are rejected; validation and fix stages retry at most twice, and merges still require human approval.