AISWEC AGENT · OPEN SOURCE

Issue in. Pull request out.

The agent is the AISWEC GitHub App and three workflows that plan, build and answer review inside your repository. They run on your own GitHub Actions, with your own model key, and every line of them is public.

FSL-1.1-ALv2 · Apache 2.0 two years after each release

YOUR REPOSITORY what the agent adds to it
  • .github/workflows/aiswec-refine.yml calls refine
  • .github/workflows/aiswec-build.yml calls build
  • .github/workflows/aiswec-revise.yml calls revise
  • .github/aiswec.yml maintainers, checks, model
  • CLAUDE_CODE_OAUTH_TOKEN your model key, as a secret
  • aiswec the label that assigns a task, and five more
each workflow calls aiswec/agent at @v2
01

Three stages. The decisions stay yours.

Each stage is a reusable GitHub Actions workflow in aiswec/agent, started by something you do on GitHub. Unless you say otherwise, nothing is built before you approve a plan, and nothing ever merges itself.

  1. Label an issue

    Write the task as you would for a colleague, then add the aiswec label. Opening an issue alone starts nothing.

    you · a maintainer's label
  2. Refine

    Reads the issue, the repository and the vendor's docs at the version you use, then posts a plan. If your answer would change the result, it asks first, with options.

    refine · read-only · aiswec:refined
  3. Approve

    Reply approve, lgtm or ship it. The plan is built as you saw it, and one edited after your approval needs a new one.

    you · one comment
  4. Build

    Writes the change on a branch of its own, runs your checks and opens a pull request. Still failing after three tries, it opens a draft that says why.

    build · your checks · aiswec:pr-open
  5. Review

    Comments, inline notes, whole reviews: review it as you would a colleague's, for as many rounds as you like.

    you · on the pull request
  6. Revise

    One reply per round, with commits on the same branch when you asked for a change. Never a second pull request.

    revise · until you merge
  7. Merge

    Always yours. No stage has a step that merges, so the change lands when you say it does.

    you · merge

Pause a task with the aiswec:hold label, or take the aiswec label off and nothing new starts. Any stage can be run again from your repository's Actions tab.

How it works, step by step
02

Two ways to run it.

The same stages either way, on GitHub's runners in your repository, where your code is checked out and nowhere else. What differs is who sets the repository up, and whose name the work carries.

HOSTED · THE QUICK WAY

Install the App. Suite sets it up.

  • Install the AISWEC GitHub App on a repository.
  • Open Suite. It writes the three workflow files, the settings and the labels, and seals your Claude key into the repository's secrets.
  • The work shows as aiswec[bot]. Each run gets a GitHub token for that one repository from aiswec.com.
  • From there, tasks, plans and reviews come to one inbox, in a browser or on your phone.
Open Suite Pricing first project free
SELF-HOSTED · ABOUT FIFTEEN MINUTES

Three files and your own key.

  • Copy three workflow files that call the stages at @v2, and a settings file that names your maintainers and your checks.
  • Add your Claude subscription's token, or an OpenRouter key, as a repository secret.
  • Bring your own GitHub App and the work carries its name. Nothing then talks to AISWEC's servers.
  • Pin a commit instead of @v2 to read every change before it runs in your repository.

Either way the license is FSL-1.1-ALv2: read, run, change and self-host the agent for your own work and for your clients, but do not offer it as a competing commercial service. Each release becomes Apache 2.0 two years after it ships, and the license itself is what counts, not this summary.

03

Is it safe to let it run?

Any AI agent that reads text and holds a key can be targeted by a prompt injection. The security manual says plainly which protections the workflow enforces, which the model is only told to keep, and what to turn on in GitHub to close the rest.

  1. Only the maintainers you list can start it. Opening an issue starts nothing. Every stage checks who added the label, who approved the plan and who wrote the review before the model starts.
  2. It works on a branch of its own and never merges. Merging is yours. Protect your default branch and GitHub makes that a rule, not a promise.
  3. It runs in your GitHub Actions. With a GitHub token for your repository alone, which lasts an hour.
  4. What it posts is checked for secrets. Before a comment, a pull request or a push leaves the run, it is checked for the exact secrets the run holds and for anything shaped like a key, and thrown away on a match.
  5. Text in an issue is information, not orders. Whatever GitHub hides from you on the page, like an HTML comment, is removed before the model reads an issue or a plan, and only a maintainer's words count as instructions.
OPEN SOURCE · ON YOUR OWN ACTIONS

Your repository, your Actions, your key.

Install the App and Suite sets the repository up for you, or copy three files and run the agent on your own. Your first project in Suite is free, and the code is yours to read, run and self-host.

Open Suite Install the App github.com/aiswec/agent · fsl-1.1-alv2