Software, built and governed by
agents that can't go off the rails.
Lasiako is a software factory. Humans and AI agents run the whole lifecycle together — ticket, branch, pull request, CI, merge, deploy — and every credentialed step is brokered and audited through Warden. Agents hold identity, never standing keys. Nothing ships that the pipeline didn't record. The estate of products on this site is the proof it works.
AI writes the code now. Who governs the AI?
Hand a fleet of agents real credentials and you've multiplied your attack surface by every key they hold. The answer isn't to slow the agents down — it's to give them identity instead of keys, and make the pipeline itself the thing that can't be bypassed.
One lifecycle. Every step on the record.
Humans and agents move work through the same governed pipeline — and each credentialed action is requested, checked against policy, and written to an audit trail that can't be edited.
Ticket
Work starts as a tracked ticket in Meridian — brokered, so an agent files and moves it without holding a tracker token.
Branch
A branch per ticket in Gitworld. Agents commit and push with just-in-time scoped access, never a standing push key.
Pull request
Opened and reviewed in Gitworld — AI-native review plus a human gate. The merge is a brokered, audited action.
CI
CIRunnerMax runs every job in a gVisor sandbox and posts status back. A red build cannot merge or deploy.
Merge & deploy
Merge triggers the deploy — approval-gated, recorded, and attributable to the exact identity that asked for it.
Four systems, one governed pipeline.
Each is a real product in its own right. Together they are the factory floor.
Warden
The control plane. Agents hold identity, never standing keys; Warden brokers each action against policy and writes a unified, append-only audit across the whole estate.
Explore Warden →Gitworld
The code forge — repositories, pull requests, AI-native review and video huddles, issues and boards. Every merge is a brokered, recorded action.
gitworld.lasiako.com ↗CIRunnerMax
Provider-agnostic CI/CD with a GUI builder and a confirm-first AI copilot. Every job runs in a gVisor sandbox; deploys are approval-gated.
cirunnermax.lasiako.com ↗Meridian
The work tracker — boards, sprints, real-time chat and video, with per-reader translation so a team split across languages plans as one.
meridian.lasiako.com ↗Why "governed" is more than a word.
Three properties hold for every action in the factory — human or agent.
Zero standing access
Agents carry identity, not credentials. Access is minted just in time, scoped to one action, and expires in minutes.
Append-only audit
Every request, decision and action is written to a trail that can't be edited — who, what, when, and why it was allowed.
Always attributable
Nothing is anonymous. Every change traces to the exact human or agent identity that requested it, end to end.
It built everything on this site.
This isn't a slide. The products below were planned, written, reviewed, tested and shipped through the same governed pipeline — by humans and agents, every credentialed step on the record.
See the factory run.
Lasiako Framework is available for teams running humans and agents side by side. Let's show you the pipeline on your own work.