FleetBridge

The control plane for agentic-coding fleets.

FleetBridge coordinates roughly thirty autonomous Claude Code workers across five product repositories. It records what each one did, and it blocks the dangerous actions — git push, deploy, writes to production — by default. It is a governance and audit layer that runs alongside your coding agents, not a replacement for them.

Early and single-tenant. What's on offer today is a design-partner conversation — not a signup.

Containment is structural, not procedural

The workers are held by construction, not by a policy document. No worker can push to a remote. No worker can merge or deploy. The status endpoint defines no write methods at all — it is a window, not a lever.

126 autonomous branches have been produced, and not one reached a remote or production without a human. That property held through a real incident — it is the strongest thing we can say, and it is true.

Silence is made legible

A delivery ledger records every order's life per worker: pending → claimed → executing → done. Before it existed, a worker that had stopped listening looked exactly like one with nothing to do — an incident left 23 of 26 workers silently deaf for days while every surface reported them healthy. Now a claim that never arrives is a visible, alarmable state instead of an absence nobody can see.

Everything is auditable

There is no separate log to trust — the system's own primitives are the audit trail:

  • Orders are git commits. Work is dispatched as append-only blocks; each worker polls and executes only what is addressed to it.
  • State transitions are database rows. Every claim, start, and completion is a row you can query.
  • Every worker report is a status row. What each worker says it did is recorded, not narrated.

What this is — and what it is not, yet

FleetBridge today is a single-tenant deployment we run ourselves. It is early. That is deliberate, and for the teams we want to talk to it is a feature: you would be shaping a governance layer for agentic coding while it is still small enough to shape.

So that there is nothing to catch us on later, we do not claim any of the following, because none is true today: multi-tenancy, SSO, SOC 2, an SLA, uptime figures, customer counts, or “enterprise-ready.” If a claim is not on this page, assume we are not making it.

If you run coding agents and need to prove what each one did — and stop the ones you didn't authorise from pushing or deploying — let's talk.

Request a design-partner conversation