Self-healing CI

A red check can become a reviewed fix.

When an eligible check fails, Hive can wake a scoped coding agent with the run, logs, diff and test evidence already attached. The candidate returns on your branch and the next gate decides whether it worked.

Autofix is opt-in per check. Infrastructure failures and timeouts do not spend an agent run.

Repair loop · live policy

The agent wakes only when code work can help.

A failed lint, test or build can materialize its fixer. A skipped check, dependency cascade or classified infrastructure failure cannot.

test-2failed · user code
test-2-autofixready · budget held
follow-up gaterequired · branch head
Trigger
Eligible failed checks
Delivery
A candidate on your branch
Authority
Your next CI gate

The repair loop

Failure evidence travels with the work.

No log-pasting ritual and no detached chat. The run, the agent and the verifying gate are one traceable chain.

  1. 01 · Detect

    A declared check fails

    Hive classifies what failed and materializes a fixer only when that step opted in and policy allows it.

  2. 02 · Diagnose

    The evidence is already there

    The agent reads the failing task, bounded logs, named tests, the branch diff and prior verified fixes directly.

  3. 03 · Repair

    A candidate is produced

    The agent edits in an isolated workspace. The wrapper owns scope, budgets, verification and git delivery.

  4. 04 · Prove

    The branch gate runs again

    The pushed candidate triggers a fresh run. That run—not the agent’s prose—is the merge gate.

Agent context

Give the model evidence, not a wall of text.

Hive compiles a bounded task brief from facts it already owns, then exposes narrow tools for the evidence the agent needs next.

Run evidence

Failures with names

Failed tasks, parsed test results, reports and bounded log tails arrive as structured evidence.

Change evidence

The exact branch delta

The triggering SHA and diff keep the agent on the failure that actually happened.

Prior evidence

Verified fixes, not folklore

Similar prior outcomes are surfaced only when a later gate proved them green.

Narrow tools

Calls instead of copied pages

The agent can inspect the current run and selected checks through reviewed capabilities.

Policy

Budgets outside the prompt

Turn, token, scope and delivery rules are enforced by the wrapper the model cannot rewrite.

Verification

Evidence before delivery

A candidate must satisfy the lane’s configured verifier before the wrapper can ship it.

Control stays explicit

Self-healing does not mean self-authorizing.

The automation acts inside boundaries your pipeline and platform policy declare.

Opt-in

You choose which checks wake an agent.

A new step has no fixer by default. Runtime policy can suppress a misbehaving fixer without changing the pipeline.

Fail closed

The candidate still has to pass CI.

If the fixer fails, exceeds its bounds or cannot verify its work, the original failure stands.

Review

The normal branch workflow remains.

Hive pushes a candidate to the branch. Your required checks, review rules and merge policy stay authoritative.

Private beta

Bring one repository. See the whole system work.

Start on your own runner, keep your existing CI beside it, and watch Hive turn the next eligible red check into a reviewable fix.