Alive on Arrival

Don't let your code die on arrival: six GitLab Duo agents that upgrade, ship, watch and explain, and remember what broke.

Comment

Inspiration

I used to build WordPress sites for clients. Once a site was live, nobody touched it again: no plugin updates, no core updates, nothing. The same thing happened with my Astro projects. I built them, shipped them, and forgot to upgrade them or look at what was new. A site you forget to update gets slower, falls behind and collects security holes. That forgetting is what got me started. Everything else grew out of it.

What it does

Alive on Arrival keeps a project up to date without anyone having to remember. Every week an agent checks the project's dependencies. If something is outdated or vulnerable, the agents upgrade it, test it, ship it, watch production and write a plain-language report. A human only steps in when the risk policy asks for one.

On the demo site, one hands-off run took known vulnerabilities from 22 to 0 and JavaScript from 191.7 KB to 0 KB.

How we built it

  • Six agents on GitLab Duo Agent Platform: Scout, Upgrader, Explainer, Release, Watcher and Reporter.
  • A GitLab CI pipeline that does the checks a machine should do: tests, size and speed metrics, security scans, a merge-or-escalate gate and a deploy.
  • Deployment to Google Cloud Run, with monitoring through GitLab Observability.

Challenges we ran into

  • An agent's actions don't trigger other agents, so I chained the first three into one flow.
  • There was no scheduled trigger available, so a weekly pipeline wakes the Scout instead.
  • A flow can't call a private MCP server, so the agents call our public API directly.

Accomplishments that we're proud of

Three full runs went from issue to production with no human in between. The agents also learn: when an upgrade breaks something, they write a lesson, and the next upgrade reads it first.

What we learned

Agents are good at judgment, like reading release notes, refactoring and explaining. The gates should stay deterministic. Agents decide, and CI proves.

What's next for Alive on Arrival

Actual support for WordPress and more ecosystems, which is where this problem started, and one dashboard to keep dozens of client sites alive at once!

Built With

Share this project:

Updates

Submission history