builder-runner

Overview ¶

builder-runner is the agent half of the builder plane (ADR-0023, docs/design/builder-plane.md). It runs on the app host as the unprivileged `builder` user, triggered by a path unit when a build request lands in the spool. Per request it clones the repo, drives one agentic Copilot session in the clone (the repo's AGENTS.md and skills are the agent's instruction surface, same as any human-driven agent), verifies the agent committed, and hands the commits to the platform side as a git bundle. It holds no push credentials and cannot reach production state — that is the point.