Every task runs in its own workspace and arrives as a pull request.

The agent edits inside a Docker container on a dedicated Git worktree and branch. ProPR validates the result and delivers it as commits on a pull request your team reviews like any other.

Isolation boundary Main protected
Repositorymain checkout
Task workspace Arunning
propr-1689branch Docker containeragent runtime
Task workspace Brunning
propr-1690branch Docker containeragent runtime
Pull request Areviewable result
Pull request Breviewable result
One task boundary contains the agent runtime, checkout, and branch. ProPR carries the result into GitHub.

Feature overview

Your checkout never changes

The agent edits a task-specific worktree on its own branch. Stop, retry, follow up, or revert any run from the web UI or the CLI.

A standard Docker container

Containers get ordinary outbound access by default. Restricted network mode is optional: turn it on for the instance or a repository and the container reaches only the model provider, GitHub, package registries, and hosts you list.

Read-only GitHub token

The agent reads the repository and writes nothing. ProPR itself creates every branch, commit, push, and pull request. The guide to running coding agents on your own server covers the Docker host behind this boundary.

The agent writes code. ProPR owns the git lifecycle.

ProPR prepares the workspace and delivers the result. The agent implements inside the boundary.

Before the agent

ProPR updates the repository and creates the task worktree and branch.

The agent implements

The coding agent reads context and edits files inside the isolated workspace.

After the agent

ProPR validates the result, commits, pushes the branch, opens the pull request, and keeps the prompts, logs, diffs, and usage on the task.

One task from queue to pull request: ProPR analyzes the request, the agent implements under a restricted network that denied three hosts, then ProPR creates the pull request
ProPR prepares the run and opens the pull request. The agent implements in between, here in restricted network mode.