SUTRA/demo
This is a realistic example of one task moving through the full SUTRA lifecycle — including a CI failure that the agent retried, and a merge that was blocked until a human approved.
Fix token validation logic in auth service — replace generic ValueError with typed AuthError and add length guard. Target: src/auth/token_validator.py.
Agent sutra-agent/code-fix-bot (agt_9f3a2d1c) granted access to achintai/api-service. Capabilities: git:clone, git:commit, git:push:feature-branches, ci:trigger. No write access to main branch.
AgentSession token issued. Absolute TTL: 15 minutes. Idle timeout: 120 seconds. Agent must maintain a heartbeat or session is revoked automatically.
Agent cloned repository into ephemeral workspace, made changes, and pushed to feature/fix-token-validation. Commit is signed with the agent's session token.
First CI run failed. test_token_validator.py::test_short_token failed: expected AuthError, got TypeError on line 58. Agent automatically retried after inspecting the error output.
Agent inspected CI output, identified missing import, added 'from .errors import AuthError' to token_validator.py, and pushed an amended commit.
All 34 tests pass. Type check clean. Coverage 91%. CI run recorded independently of agent's own report.
Repository governance rules evaluated: branch protection OK, no direct push to main detected, PR opened for review. Agent is blocked from merging until human approves.
Agent cannot self-merge. Pull request is open and pending human review. Session remains active (heartbeat active). Merge is programmatically blocked until approval.
Engineer reviewed diff, CI results, and changed files. Approved the pull request. Approval is bound to the current commit SHA — any new push would invalidate it.
Change merged to main. Full audit trail recorded: task intent → agent identity → session → commit → CI results → human approval → merge. Evidence is immutable.
Works alongside your existing GitHub repositories. Free to start.