Conductor
A production-grade orchestration system that deploys AI agent swarms to turn your GitHub backlog into a stream of reviewable pull requests. Adversarial review, parallel portfolio execution, token optimization, and human gates at every critical decision point. Battle-tested across a 100+ issue production codebase.
Orchestrator
The main conversation. Enforces process, manages user interaction, deploys agents, verifies outputs, controls state transitions.
Planner Agent
Explores the codebase and collaboratively builds implementation plans. Plans are adversarially reviewed before human approval gate.
Developer Agent
Implements the approved plan in an isolated worktree. Code is adversarially reviewed before it can proceed to PR.
- Review ledger system. Findings tracked across review rounds with statuses (justified, withdrawn, fixed, open). Reviewers don't re-raise resolved issues.
- Seven review principles. Deep Verification, Scope Verification, Failure Mode Analysis, Comment Skepticism, Infra Parity, Test Depth, Scope Mixing.
- Severity with evidence. BLOCKING findings require search-verified proof. No theorizing. Exception only for financial-risk contract code.
- Structural enforcement. Analysis-only mode forbids write operations at the tool level, not just behaviorally.
Worktree Isolation
Every issue runs in its own Git worktree with calculated port offsets. Multiple development environments run simultaneously without conflicts.
Hook-Driven Status
Pre/post tool hooks track session states in real time: needs-input, needs-permission, running, idle, complete, crashed.
Shared MCP Infrastructure
Instead of each session spawning its own MCP servers, a shared proxy layer serves all sessions. Health-aware fallback to per-session stdio if a server fails.
Discovered Work Handling
When agents find out-of-scope work, they stop immediately and return structured payloads. The orchestrator creates separate issues. No scope creep.
- Pre-tool command guards. Hook system validates every command before execution. Secret detection on both inputs and outputs.
- Deny-by-default network egress. Sandbox blocks all outbound except an explicit allowlist.
- All GitHub writes audited. Every write logged with target, payload hash, and policy decision via an outbox pattern.
- Emergency stop. Pause any run, bulk cancel a project, or disable all agent execution system-wide.
- Redaction. API keys, tokens, and passwords automatically stripped from logs, comments, and stored artifacts.
Automated Weekly Reports
GitHub Actions generate structured JSON from project data. AI produces executive narratives with week-over-week deltas, risk assessments, and stakeholder framing. Auto-filed as PRs.
Smart Contract Upgrades
Orchestrated upgrade pipeline: pause, deploy, verify, update registry, resume. Full audit trail with rollback support. No manual steps.