The fixture begins with a specific change request instead of a generic chat prompt.
CodePilot
A coding agent with
validation and repair checks.
I built CodePilot around one rule: the model can propose code, but it cannot declare its own work correct. The runtime owns the repository boundary, mutation policy, validation commands, repair budget, and final verification state.
Inspect repositoryrepo.listFiles · repo.readFile
READ ONLYEdit export pathworkspace.writeFile
2 FILESValidation failedtests · CSV escaping
EXIT 1Repair patchbounded repair loop
1 / 3Validation passedtests + typecheck
EXIT 0Verifiedrevision + config rebound
HASH MATCH62c7e3d19a0b…9af1✓ VERIFIEDChecking the code
an agent changes.
CodePilot checks which files the model can edit, rejects stale writes, and runs validation commands from workspace configuration. It also limits repair attempts and stores the revision that passed validation.
SCRIPTED DEMO · SYNTHETIC REPOSITORY
Follow a failed test
through repair and validation.
The scripted example includes a CSV escaping failure before the repair step.
The agent gets a limited repair attempt, then validation runs again outside model authority.
Completion only appears after the workspace revision and validation configuration still match.
VERIFIED EXECUTION WALKTHROUGH · 3:49
Watch the CSV export
example run.
I walk through the CSV export example: inspecting files, making a change, catching an escaping bug, repairing it, and checking the final revision.
TASK → MODEL → POLICY → WORKSPACE → VALIDATION → EVIDENCE
From task
to validated patch.
Validation stays outside model control.
The model can request tests, typecheck, lint, or build, but cannot choose the actual command. Success criteria stay in trusted workspace configuration.
Writes are bounded before touching disk.
Sensitive paths are denied, stale writes fail hash checks, and patch impact is measured before mutation.
Failures do not unlock unlimited retries.
Repair attempts are explicit, capped, and separate from provider-level transient retries.
Completion is bound to the exact code validated.
Workspace revision and validation configuration are rechecked before verification evidence and COMPLETED are persisted.
core.autocrlfHost Git settings were changing bytes.
Git apply now pins deterministic line-ending behavior so the same patch means the same thing across environments.
git diff <baseline>Brand-new files were invisible in review.
New files are staged without committing so the final diff is complete and still fully reviewable.
MALEK EL BADAWI EL NAJJAR