Overview

A secure AI development environment for running agentic coding tools (Claude Code, Codex, etc.) without giving them access to host credentials or production repositories.

Key features

  • Containerized per-project isolation: each project runs in its own Docker container with hardened network and filesystem boundaries.
  • Local Gitea mirror: agents push/pull to a local Gitea instance rather than directly to GitHub/GitLab, keeping production repos fully isolated and enabling human-in-the-loop review.
  • External CI enforcement: remediates common agentic failure modes (e.g., hallucinated test results) by requiring tests to pass on an external CI runner before changes are merged upstream.

Stack

Docker, Bash, Gitea, CI pipelines, LLM APIs.