Secure Developer Infrastructure and Local Agent System
Kesav Nagendra, Jason (Chehsien) Lin
Mentored by Gabriel Kulp
Working report from the SPAR program. May not reflect the authors' current views.
Abstract
This report summarizes my SPAR work on secure developer infrastructure and a local agent system for repository analysis. The first part of the work focused on a hardened developer workstation direction: image customization, package cleanup, kernel experiments, signing workflow considerations, and internal access debugging. The second part focused on building a local agent system that can answer repository questions, review source code, audit dependencies, and post results back into the existing internal development workflow. The current prototype works end to end from my local machine through comment-based commands such as -vc ask, -vc review, and -vc dependency. I also started moving the service onto an internal always-on compute server so it can eventually run as a shared service rather than depending on my laptop. The main remaining deployment blocker is the approved embedding setup for server-side retrieval.