The outcome
Produce a verified repository diff without giving the agent unnecessary access to the host, secrets, or release process.
Step by step
A workflow you can repeat.
- 01
Create a clean branch and sandbox, mount only the target repository, remove secrets, and record the starting status and test baseline.
- 02
Give OpenHands the issue, acceptance criteria, relevant architecture, prohibited changes, validation commands, and a clear stop condition.
- 03
Ask it to inspect the repository and propose a minimal plan before editing, correcting assumptions and narrowing any unnecessary work.
- 04
Allow bounded actions with confirmations enabled for risky operations, then inspect commands, network use, changed files, and test evidence as it works.
- 05
Run the trusted checks independently, review the complete diff and dependency changes, and merge or deploy only through the normal human-approved process.
Working standard
What good use looks like.
- Use a disposable or isolated sandbox.
- Mount only the required workspace.
- Verify tests outside the agent narrative.
Official references