Repository approval is not production authority
A reviewed pull request does not prove which credential, target, or exact bytes the production system used.
Agent Production Assurance
Put coding agents in production without giving them the keys.
Novyx takes one blocked migration, deployment, or infrastructure workflow and installs the identity, approval, evidence, and recovery controls your engineering and security teams need to approve it.
Fixed-scope paid review · customer-controlled systems · no free-form production credentials · one workflow at a time
Migration review
20250523_add_partial_index_orders
ProposedEnvironment
Production
Database
postgres-prod
Agent
codex-prod-7f3a
Requested
May 23, 2025 10:42 AM
Change type
Schema
StatementsBlast radius
#SQL statementBlast radiusVerdictEst. rows
1Auto-allow0
CREATE INDEX CONCURRENTLY idx_orders_customer_idON orders (customer_id)WHERE status = 'pending';Low
2Auto-allow0
ALTER TABLE ordersADD COLUMN source text;Low
3Require approval1.42M
UPDATE ordersSET source = 'migrated'WHERE created_at < '2023-01-01';Medium
Estimated impact
Rows to update1,423,587
Tables touched1
Size of write812 MB
Top tables by impact
orders1.42M
order_items24K
Notes
Large update affects about 8.7% of orders. Consider batching or off-peak window.
4Block--
ALTER TABLE ordersSET NOT NULL source;High
5Auto-allow0
DROP INDEX CONCURRENTLY idx_orders_old;Low
5 statements
Auto-allow Require approval Block
The gap
Your agents can write the change. Who proves they were allowed to run it?
The agent should not approve itself
High-impact actions need an accountable human decision outside the coding-agent identity and runtime.
A vendor log is not independent evidence
Platform and security teams need customer-controlled proof of the request, authority, result, and recovery state.
How it works
One blocked workflow. One accountable decision.
Name one blocked action
Choose a migration, deployment, infrastructure change, or internal API operation planned within 90 days.
Map the real boundary
Trace the agent, approver, credentials, target, evidence sources, bypasses, and recovery path.
Make a decision
Receive a go-now, control-first, or do-not-deploy recommendation in five business days.
Install and witness the control
When viable, implement one bounded path and test tamper, wrong-target, replay, bypass, and uncertainty.
Keep it trustworthy
Review evidence and drift as models, agents, identities, and production systems change.
Paid entry offer
Five-day Agent Production Risk Review
$5,000
Get an action and identity map, failure-path tests, evidence-source map, named go/no-go decision, and prioritized control plan for one production-changing agent workflow.
If the workflow qualifies, the full fee applies to a $20,000 fixed Agent-to-Production Sprint signed within 14 days.
The decision you receive
Go now
Control first
Do not deploy
Flagship implementation
Agent-to-Production Sprint
One controlled path in ten delivery days, normally scheduled across two to three weeks. The sprint ends with continue, contain, or stop. Novyx does not manufacture a passing result.
$20,000 total
✓
Agent cannot approve or widen its own request
✓
Production credentials remain outside the agent identity
✓
Reviewed bytes and target are rechecked before execution
✓
Customer-controlled logs determine acceptance
✓
Uncertain outcomes stop for reconciliation instead of blind retry
✓
Operators receive evidence and recovery runbooks
Reference workflow
Start with a governed PostgreSQL migration
The current implementation joins live read-only impact facts, a signed request, exact human approval, request-bound execution, target verification, durable evidence, and honest uncertain- outcome reconciliation.
The demo uses disposable PostgreSQL. It does not touch an external provider, prove same-user hostile-process isolation, or claim arbitrary SQL is semantically safe.
See the governed migration →Fresh local verification
42 populated values + 150 table rows
The clean disposable run required approval, executed the exact reviewed migration once, produced a signed report, retained durable action state, and deduplicated replay.
Novyx is a fit when
- ✓Coding agents are used weekly by the engineering team
- ✓One production-changing workflow is planned within 90 days
- ✓Platform or security needs an accountable approval boundary
- ✓Production credentials can remain outside the agent identity
- ✓A budget owner and technical owner will participate
Novyx is not
A generic AI workshop, unpaid proof of concept, compliance certification, broad multi-cloud rollout, prompt-injection scanner, or a request for Novyx to own customer approval and production recovery.
Production Assurance is available after implementation at $3,000/month for the first workflow with a three-month minimum.
Name the production action your agents are not allowed to perform yet.
In 25 minutes, we will determine whether it belongs in the five-day review.