Describe the outcome. The delivery agent clones the repo, works under an exec policy, runs tests, and opens a pull request. Humans keep the merge button — routine execution doesn't need them.
One work item, one task branch, one tested pull request. Preview environment included.
Users file change requests on any screen — they land as work items and close the loop.
An instruction lands as a work item — via the console, the widget, or the API.
The repo is cloned fresh, a task branch cut, and an isolated workspace provisioned.
A Devin agent works the task. Every shell command is allow/deny-gated by your exec policy.
Commits are verified, the branch pushed, and a pull request opened. Humans merge.
Every autonomous action is scoped, policy-checked, and recorded. The agent never holds credentials, never pushes to main, never touches production unsanctioned.
Every command the agent wants to run is matched against allow/deny rules — compound commands split per segment, subshells refused, paths confined to the workspace. Fail closed by default.
Tool calls, permissions, retries, and the raw JSON-RPC transcript land in an append-only event log per work item.
Failed runs resume the same agent session with context — up to a hard attempt cap, then flagged as over budget.
Per-project ssh aliases let the agent run read-only diagnostics on app servers — keys stay with the orchestrator, never the agent.
The agent can't merge, push to main, or deploy. Review stays human; routine execution doesn't.
The Mobidev operating principle.
Open the console →