AI engineers,
on probation.
Ada and Tunde are GitLab Duo agents. Assign one an issue and it plans, codes, tests, reviews and ships it through nine DevSecOps stages. How far it may go without you depends on its clearance, and clearance is earned in production.
Every number on this page is read live from the GitLab project.


Autonomy you don't configure.
You earn it.
Each crew member holds one of three clearances. The pipeline reads it on every merge request and decides what the agent may do on its own.
A human merges
New crew start here. The agent does the work and its gatekeeper reviews it, but the merge request waits for a person.
- Plans, codes, tests, opens the MRyes
- Merges to mainno, you do
- Releases to productionno, you do
Production waits for you
The pipeline merges the exact commit the gatekeeper reviewed. Staging deploys and validates on its own; production is one click.
- Plans, codes, tests, opens the MRyes
- Merges to mainyes, after review
- Releases to productionone click from you
Ships on its own
Issue to production with nobody watching. If the production checks fail, the pipeline rolls back by itself.
- Plans, codes, tests, opens the MRyes
- Merges to mainyes, after review
- Releases to productionyes, on its own
From assignment to production.
The agents work inside GitLab: issues, commits, merge requests and the CI/CD pipeline. Nothing happens off the record.
Plan
- reads the issue
- reads the policy
- posts a plan
Create
- writes code + tests
- commits a branch
- opens the MR
Verify
- unit-tests
- lint-ci-and-config
Package
- container-image
- sbom
Secure
- semgrep-sast
- secret_
detection - container_
scanning
Govern
- policy-gate
- gatekeeper review
- clearance gate
Configure
- configure:
railway
Release
- release + tag
- deploy:
staging - validate:
staging - deploy:
production
Monitor
- monitor:
production - rollback
- clearance-ledger
Highlighted stages are done by the agent; the rest are GitLab CI jobs. The job names are the real ones in .gitlab-ci.yml.
Every promotion and demotion is a commit.
Releases, rollbacks and clearance changes, as the pipeline recorded them.
Release log
- Loading…