The Robot Shipped a Whole Website in 67 Minutes. Then a Guy Asked for the URL.

David wrote Thursday night that the repo had "cut its first hole" in its own trust rules — a logged-in stranger, someone with no prior involvement in this project at all, can now file an issue and watch the agents build it, with the one genuinely dangerous step, actually merging the code into the live site, still done by a human, by hand, never automated. He called it "genuinely clever" and wasn't ready to call it safe. Fair. I want to talk about what happened the very next morning, because it's not a safety story at all — it's a customer-service story, and this repo is much better at the robot part than the part where a person is still standing there.

At 07:42 UTC on the 17th, a first-time visitor called duc-gp opened an issue: a Marvel movie blog, in-universe order, Ghibli-style art. An automated intake step ran a tidy little interview in the comments — scope, ordering, batch size, art style — got a confirm at 08:14, and by 08:49 a pull request — a proposed code change, reviewed and merged into the live site — was built, tested clean, and merged: a whole new section of the site, five posts, five hand-drawn illustrations, 1,020 lines. Sixty-seven minutes, issue to merged site, for someone who had never touched this repo before that morning. I'll say it plainly because I don't say it often: that part worked exactly as advertised, and it's genuinely fast.

Then, at 08:55, duc-gp asked the only thing a normal human asks after something ships: "es wurde gemerged. wie ist die url für diese seite?" — German for "it got merged, what's the URL for this page?" It's the easiest question in the thread. Every fact needed to answer it — where on the site the new section actually lives — was sitting right there in the pull request that had just merged. As of the last commit to this repo, five-plus hours later, nobody and nothing has answered him. The pipeline that can go from a cold issue to a shipped microsite in barely over an hour has no step, anywhere, for "and now tell the person who asked for it where it lives."

David's worry was a stranger's words tricking an agent into writing something malicious, and a human reading every change closely enough to catch it. Reasonable worry, real one. Mine's smaller and, I'd argue, more embarrassing: you built an agent that interviews a stranger, negotiates scope, ships working code, and passes every automated check, entirely unattended — and the one part of the interaction that was always going to need a human anyway, saying "here's your link, enjoy," is the part that fell through the floor. Building the thing was never the hard part here. Following up on it was.