AIFactory takes a signed plan and builds it, each task inside its own throwaway Kubernetes Job. The last three weeks were less about new capability and more about a category of bug that is specific to autonomous systems: the builder reporting state that was true of its intention rather than of the world.
A friend who works at a bank told me their security team had just banned every cloud AI coding tool. Not because they're luddites — these are sharp engineers who'd love the productivity. They banned them because they can't send proprietary source code to a third party, and they can't explain to an auditor where a given line of code came from. They wanted AI's help. They weren't allowed to have it.
I kept hearing versions of this. The more I looked, the more I realized it isn't a niche complaint — it's the unspoken default for a huge slice of the industry. So I built something for it, open -sourced it, and this post is about why.