What we built

A2A Omega HVR is Hunt, Verify, Report: a hands-off multi-agent DevSecOps loop on GitLab Duo Agent Platform, wired to the a2a-omega agent mesh.

Writing code is the easy part. The post-code lifecycle stalls because every handoff waits on a human. HVFR keeps a fleet busy with no human in the middle.

How it works on GitLab

  • GitLab Issues are the checklist. One issue per finding. Labels are the state machine: hunted -> verifying -> confirmed or rejected -> reported.
  • GitLab Duo Agent Platform is the orchestrator. Public AI Catalog agents: HVR Hunter, HVR Verifier, HVR Reporter, enabled on the project.
  • MCP bridge exposes the a2a-omega mesh as Duo tools.
  • CI is visible history. Unit tests on every push. Hunter job on merge requests. Hourly scheduled cycle.

Path B: Bring Your Own

We started from the existing MIT project a2a-omega and added the GitLab Duo layer, MCP bridge, issues-as-checklist workload, CI pipelines, and a public status page.

Videos

Lifecycle stages covered

Secure, Verify, Create, Govern, Monitor.

Built for Life After Code, Path B, Hands-off.

Built With

  • a2a
  • ci/cd
  • devsecops
  • duo-agent-platform
  • gitlab
  • gitlab-duo
  • mcp
  • multi-agent
  • python
  • security-automation
Share this project:

Updates

Submission history