Before you run it
.mdWhat factory is honest about not being, yet.
Factory is a proof of concept, and it’s honest about what it is not.
- There’s no sandbox isolation. Agents run as your user, on your machine, with your
ghandopencodecredentials, in a clone of your repository. Point it at repositories and issues you trust. - Workflow inputs reach the agent’s prompt. Anyone who can reach the daemon can start a run, so
don’t expose the port beyond your machine, and never interpolate an input straight into
ctx.exec. - It needs your machine’s logins. There’s no credential injection yet:
opencodeandghmust be authenticated on the host.