all systems operational file TF-007 · license to act
The Agent Harness Hackathon · WeMakeDevs × TrueFoundry × Qodo · Aug 24–30 2026

RepoMedic 🩺

An autonomous open-source repository triage agent. It reads your repos fearlessly, verifies what it finds in a sandbox — and refuses to file a single issue until a human says Allow. Built on TrueForge, the open-source agent harness.

13
MCP tools
4
safety layers
32
tests, all green
800+
PRs behind the idea

The tool belt

read-onlyrepo_health_checkcomposite snapshot of issues, CI & README
read-onlylist_stale_issuesuntouched issues, PRs filtered out
read-onlycheck_readme_linksHEAD→GET link verification
read-onlyget_ci_statusrecent workflow runs
read-onlyclassify_ci_failuresflaky vs broken, with step evidence
read-onlyaudit_dependenciesdeprecated & majors-behind via npm registry
read-onlycheck_community_healthLICENSE · CONTRIBUTING · CoC scoring
read-onlysearch_similar_issuesdedupe before filing anything new
read-onlybus_factorcontribution concentration risk
read-onlyrelease_healthdrift since latest release
read-onlytriage_prioritiesflagship: ranked action list
🔒 needs Allowfile_issueopens an issue — turn freezes first
🔒 needs Allowpost_commentcomments on an issue — turn freezes first

Safety, four ways

  1. MCP annotationswriters declare destructiveHint — scanners declare readOnlyHint
  2. Human checkpointsTrueForge pauses the entire turn until you pick Allow or Deny
  3. Server-side allow-listwrites outside REPOMEDIC_ALLOWED_REPOS are refused even if layers 1–2 fail
  4. Transport authevery /mcp call requires the shared-secret header — 401 otherwise

The shape of it

repomedic — topology 
You ──chat──▶ TrueForge harness ──MCP──▶ repomedic-tools ──REST──▶ GitHub
                │  model loop              ├─ 8 scanners   (run free)
                │  subagents               └─ 2 writers    (pause for Allow)
                │  sandbox runs
                └─ approval gate ◀── the whole point
★ View the source Health endpoint About the hackathon