01 / NATIVE AI

Two different jobs for inference.

AI advice and code proposals use different permissions. Both are optional.

Clef advisory evidence

Workers AI through AI Gateway supplies metadata-only PR advice in the evidence pipeline. Clef does not approve or merge a change, and does not receive the source tree in this profile.

Agent proposals

A separate Containers / Durable Object profile runs the maintained agent harness on its own Artifacts fork. A GLM 5.3 Flash proposal passed the demo’s tests on October 14.

Private context and control

Private R2 holds context and reports. Each task is limited to its approved source, sponsor permissions, call budget and allowed network routes. Proposals leave canonical Git unchanged until an explicit supported action.

02 / PORTABLE AGENTS AND TOOLS

Keep account access separate from execution.

Provider login, entitlement, repository permission and a successful job are distinct checks.

Configured harnesses

Portable Codex, Claude Code and OpenCode connections have bounded implementations and independent acceptance. A saved account is not evidence every harness or billing mode works.

CLI and MCP

The generated Golf CLI and scoped stdio MCP reuse product authorization. Native machine requests additionally need Access service admission and a scoped Golf credential.

ACP and automation

Bounded ACP transport and delegated automation exist in portable slices. Full interactive harness workflows, all-role matrices and embedded-agent execution remain open.

Make your first move.

Explore the hosted public repository, request enrollment for private workflows, or start your own portable installation.

Find your next step

31 pages and guides

Tab through results · Enter to open · Escape to close