M/N Malek El Najjarproject details

PROJECT / 01 · AGENTIC SOFTWARE ENGINEERING

CodePilot

A coding agent with
validation and repair checks.

I built CodePilot around one rule: the model can propose code, but it cannot declare its own work correct. The runtime owns the repository boundary, mutation policy, validation commands, repair budget, and final verification state.

ROLEArchitecture · runtime · product · testing
STACKTypeScript · Next.js · PostgreSQL · Prisma · Docker
MODELSOpenAI · Anthropic
CODEPILOT / VERIFIED EXECUTION
DEMO / 001 · demo/customer-analytics Add CSV export to customer analytics and cover edge cases. Human-defined task · bounded workspace

Inspect repositoryrepo.listFiles · repo.readFile

READ ONLY

Edit export pathworkspace.writeFile

2 FILES

Validation failedtests · CSV escaping

EXIT 1

Repair patchbounded repair loop

1 / 3

Validation passedtests + typecheck

EXIT 0

Verifiedrevision + config rebound

HASH MATCH
workspaceRevisionHash62c7e3d19a0b…9af1✓ VERIFIED
WHY I BUILT IT

Checking the code
an agent changes.

CodePilot checks which files the model can edit, rejects stale writes, and runs validation commands from workspace configuration. It also limits repair attempts and stores the revision that passed validation.

DEMO / WHAT YOU CAN SEE

SCRIPTED DEMO · SYNTHETIC REPOSITORY

Follow a failed test
through repair and validation.

01Start from a concrete repo task.

The fixture begins with a specific change request instead of a generic chat prompt.

02Watch validation fail.

The scripted example includes a CSV escaping failure before the repair step.

03See a bounded repair.

The agent gets a limited repair attempt, then validation runs again outside model authority.

04Inspect the verification record.

Completion only appears after the workspace revision and validation configuration still match.

Run the CodePilot demo →
VIDEO / WALKTHROUGH

VERIFIED EXECUTION WALKTHROUGH · 3:49

Watch the CSV export
example run.

I walk through the CSV export example: inspecting files, making a change, catching an escaping bug, repairing it, and checking the final revision.

SYSTEM / ARCHITECTURE

TASK → MODEL → POLICY → WORKSPACE → VALIDATION → EVIDENCE

From task
to validated patch.

01TaskNatural-language goal
02ModelOpenAI / Anthropic
03Tool gatewaySchema + policy
04Git workspaceConfined writes
05SandboxTrusted validation
06EvidenceRevision-bound completion
ENGINEERING / DECISIONS
01 / AUTHORITY

Validation stays outside model control.

The model can request tests, typecheck, lint, or build, but cannot choose the actual command. Success criteria stay in trusted workspace configuration.

02 / MUTATION

Writes are bounded before touching disk.

Sensitive paths are denied, stale writes fail hash checks, and patch impact is measured before mutation.

03 / REPAIR

Failures do not unlock unlimited retries.

Repair attempts are explicit, capped, and separate from provider-level transient retries.

04 / EVIDENCE

Completion is bound to the exact code validated.

Workspace revision and validation configuration are rechecked before verification evidence and COMPLETED are persisted.

IMPLEMENTATION / BUGS I FIXED
core.autocrlf

Host Git settings were changing bytes.

Git apply now pins deterministic line-ending behavior so the same patch means the same thing across environments.

git diff <baseline>

Brand-new files were invisible in review.

New files are staged without committing so the final diff is complete and still fully reviewable.

MALEK EL BADAWI EL NAJJAR

Try the demo and
inspect each step.