The factory that built a 20-product portfolio, as a service. Submit a frozen spec; the governed autonomous-build loop — author → verify → review → promote — runs in an isolated worktree with lifecycle leases, verifier gates, and an append-only event trail. This design-partner preview accepts public repositories; hostile-workload isolation, private-repo brokering, and pre-request dollar ceilings remain explicit production-readiness gates.
a · Govern
Each accepted build receives a per-build target clone and a frozen revision. Public access is strictly anonymous; private targets remain disabled until the scoped GitHub App broker is proven.
b · Meter
Attempts and wall-time are bounded, and observed provider cost stops subsequent work. Usage settles to an append-only ledger; a pre-request dollar reservation gateway is still required before calling the dollar ceiling hard.
c · Audit
Every lifecycle transition — submitted, authored, verified, reviewed, promoted or blocked with the reason — appends to an exportable trail. No overwrite, no delete.