Back to browse
GitHub Repository

[Pre-MVP Still Building] Keep your secrets on ice. Secure credential broker. AI agents use your keys without ever seeing them.🦞🧊 Icebox: where lobsters can’t go! 🦞πŸ₯Ά

4 starsRust

Enterprise Process Governance for AI-Driven Delivery (Open Source)

by TorbenAndersonΒ·Mar 18, 2026Β·4 pointsΒ·1 comment

AI Analysis

●MidShip It

Secure Enclave secret broker for agents, but installation is still coming soon.

Strengths
  • β€’Secure Enclave integration prevents secrets lingering in agent memory or logs.
  • β€’Process documentation provides evidence logs rather than just theoretical governance frameworks.
Weaknesses
  • β€’Pre-MVP status means no signed binary or cargo install available yet.
  • β€’macOS-only Secure Enclave dependency limits adoption for Linux or Windows users.
Category
Target Audience

Developers building local AI agents

Similar To

HashiCorp Vault Β· 1Password CLI Β· Doppler

Post Description

Hey HN β€” I'm Torben, I've been building software for 40 years. For the past 6 months I've been running AI agents in real delivery pipelines and kept hitting the same problem: there's no governance model for agent-driven delivery. CI/CD assumes humans write code. That assumption is broken now. GitHub calls their thing "Continuous AI," PwC published on the "Agentic SDLC," but neither gives you an actual framework you can implement. So I built one. This is a gate-driven process framework β€” 6 steps, 5 gates, production feedback loop β€” designed for the transition from CI/CD to what I'm calling AI/CD (Agentic Integration / Continuous Delivery) and eventually AI/AD (Autonomous Delivery). What makes this different from a whitepaper: every gate has real evidence. You can see the actual PRs, issue comments, and gate sign-offs in the repo. Example: https://github.com/torbenanderson/icebox-cli/issues/23 It's platform-agnostic (GitHub, GitLab, Azure DevOps, Jira + any SCM combo) and open source. Fork it, adapt it. Keen to hear from anyone running agents in their delivery pipelines β€” what's working, what's breaking, and whether this kind of governance makes sense for your team.

Similar Projects