The outcome

Produce a verified repository diff without giving the agent unnecessary access to the host, secrets, or release process.

Step by step

A workflow you can repeat.

  1. 01

    Create a clean branch and sandbox, mount only the target repository, remove secrets, and record the starting status and test baseline.

  2. 02

    Give OpenHands the issue, acceptance criteria, relevant architecture, prohibited changes, validation commands, and a clear stop condition.

  3. 03

    Ask it to inspect the repository and propose a minimal plan before editing, correcting assumptions and narrowing any unnecessary work.

  4. 04

    Allow bounded actions with confirmations enabled for risky operations, then inspect commands, network use, changed files, and test evidence as it works.

  5. 05

    Run the trusted checks independently, review the complete diff and dependency changes, and merge or deploy only through the normal human-approved process.

Working standard

What good use looks like.

  • Use a disposable or isolated sandbox.
  • Mount only the required workspace.
  • Verify tests outside the agent narrative.

Official references

Check the current product documentation.