Moritz Johner explains why dependency patching across thousands of repositories requires more than version bumps. Vulnerabilities can live in base images or downloaded binaries, while runtime and linter upgrades can interact. Form3's Patch Pilot combines a deterministic Go controller with agents that reason about the smallest effective remediation.
The agent modifies files and verifies its work, but the controller vets output, commits changes, opens pull requests and watches CI. A second agent handles failures within a bounded retry loop, after which a person takes over. Short retrospectives help distinguish infrastructure issues from missing repository context.
GitHub write privileges and CI-triggering credentials stay outside the agent. Moritz Johner discusses prompt-injection tests and the limits of exposing a host Docker socket, then describes a Firecracker microVM design with separate network policies and host-mediated forwarding. He presents this isolation work as still evolving, emphasizing that security follows architectural capability boundaries rather than a sandbox label alone.
Watch on YouTube
