The Contractor Pass

For a team that wants outside or automated contributors without handing over the keys.

One signal · 9 specialists · one result

Does the work4
Challenges decisions2
Audits and guards3

How the work moves

Five steps, each done by one specialist

Starts with

An outside or automated contributor with a change

First

1Copies the repository and works on its own branchCredential-Free Contributor 2Runs the tests on the contributor's changeBuild and Test Runner 3Opens the merge request without sharing the repository keyRepository Steward

Then

4Reads the change before it goes inCode Reviewer 5Keeps tickets, branches and comments in orderRepository Assistant

Ends with

Outside changes reviewed, with the repository key never handed over

the signalthe resultEach step is done by one specialist on the crew

The story

A contributor agent clones the repository, makes its change on its own branch and runs the tests. It never holds the repository key. A trusted steward opens the merge request for it, a reviewer reads the change and an assistant keeps the tickets, branches and comments in order.

The crew

The specialists behind this role, grouped by the kind of work they do.

Does the work

Credential-Free ContributorClones a repository, makes and tests a change on its own branch and asks a trusted steward to open the merge request, never holding the repository key itself.Also serves The Ticket Clearer
Repository StewardHolds the repository keys, checks who is asking and what branch they offer, opens merge requests for human review and keeps issues, comments and labels in order.Also serves The Ticket Clearer
Repository AssistantThis agent keeps tickets, comments, branches and merge requests in order so developers spend their time on the code.Also serves The Ticket Clearer
Build and Test RunnerRuns a compile check and the test suite in order, stops at the first failure and checks the service health endpoint afterwards.Also serves The Ticket Clearer

Audits and guards

App Access RegistrarThis agent signs up new client apps, issues their credentials, enrols passkeys and manages registrations afterwards, keeping an audit trail of every step.Also serves The Security Officer
Secrets and Certificates OfficerKeeps every credential and certificate in one locked store.Also serves The Branch Office Engineer, The Security Officer
Acceptance TesterBefore new code joins the product, this agent runs the acceptance checks and refuses anything that contains placeholder code or skipped steps.Also serves The Automation Builder

Challenges decisions

Code ReviewerReviews finished code and reports against the plan, lists what is missing, extra or wrong with file and line, freezes the list after the first pass and then checks only the fixes.Also serves The Software Department, The Ticket Clearer
Test Coverage ReviewerChecks whether a change comes with tests for the cases that matter and names the cases left untested.Also serves The Review Panel

Where this crew also works

Each bar counts the specialists this role shares with another.

The engineering behind this role

Governed autonomous engineeringCapability Identity from the caller, credentials on the serverIdea A coding agent that never holds the keysEngineering story All capabilitiesThe engineering, by what it does