-
GitLab commit view confirming the explicit operational Boundaries & Constraints applied to our custom Duo Agent schema.
-
Local development setup and Markdown syntax highlighting of the complete multi-agent orchestrator file inside VS Code.
-
The production-ready AGENTS.md configuration file securely hosted within the native /.gitlab/duo/ directory infrastructure.
-
Commits
-
Duo Orbit Architect - Pipelines & Artifacts
-
The production-ready AGENTS.md configuration file securely hosted within the native /.gitlab/duo/ directory infrastructure.
-
High Risk Graph
-
pipelines
-
Medium Risk Graph
-
Low Risk Graph
Inspiration
As AI accelerates software development, developers can create and modify code faster than ever before. However, this speed introduces a new challenge: understanding the downstream impact of changes before they reach production.
A seemingly small modification to a shared library, authentication service, or database schema can affect dozens of components across a codebase. During code reviews, developers often struggle to answer critical questions:
What systems are affected by this change? How far does the impact propagate? Are existing tests sufficient? Is this merge request safe to approve?
I built Duo Orbit Architect: Blast-Radius AI Engine to solve this problem by giving developers an intelligent GitLab Duo Agent that provides architectural awareness during Merge Request reviews.
Using GitLab Orbit's structural understanding of a codebase, the agent helps teams identify risks before they become production incidents.
What it does
Duo Orbit Architect is an AI-powered GitLab Duo Agent that automatically performs blast-radius analysis whenever a Merge Request is opened.
The agent uses GitLab Orbit relationships to understand how modified files connect to services, modules, APIs, and workflows across the repository.
For every Merge Request, the agent:
Detects changed files and impacted components Maps downstream dependencies using Orbit context Evaluates testing coverage across affected areas Calculates a risk score based on blast radius Generates architectural impact summaries Recommends additional validation and testing Produces developer-friendly reports directly within the review workflow
Instead of manually tracing dependencies across a complex codebase, developers receive an automated assessment of potential risk before code is merged.
How we built it
The project was designed on top of the GitLab Duo Agent Platform and built around GitLab Orbit's repository intelligence capabilities. Agent Layer We defined agent behavior and workflow orchestration through native GitLab Duo configuration files, including: AGENTS.md SKILL.md These configurations establish the agent's responsibilities, execution flow, and interaction boundaries. Orbit Context Layer To provide architectural awareness, the solution leverages GitLab Orbit and Knowledge Graph relationships to understand how files, modules, and services are connected. This allows the agent to move beyond simple code review and perform dependency-aware analysis. Analysis Engine A lightweight Python service processes Orbit relationship data and performs: Dependency mapping Blast-radius analysis Risk assessment Test coverage evaluation Recommendation generation Developer Experience Results are presented as structured Merge Request reports, making architectural insights immediately actionable for reviewers.
Challenges we ran into
One of the biggest challenges was preventing the AI from making assumptions about dependency relationships. Large language models are powerful, but they can sometimes infer connections that do not actually exist within a codebase. To address this, we designed the workflow to prioritize deterministic Orbit relationship data rather than speculative reasoning. Another challenge was presenting complex dependency information in a concise format that developers could quickly understand during code review. Balancing technical depth with usability was essential to creating a practical developer experience.
Accomplishments that we're proud of
Built a GitLab Duo Agent focused on architectural impact analysis. Created a structured blast-radius assessment workflow. Developed a risk-based Merge Request review process. Demonstrated practical use of GitLab Orbit repository intelligence. Produced realistic low-risk, high-risk, and critical-risk review scenarios. Designed a solution aligned with GitLab's vision for AI-native software development. Most importantly, we transformed Merge Requests from simple code reviews into architecture-aware reviews powered by repository context.
What we learned
Through this project we gained a deeper understanding of: GitLab Duo Agents GitLab Orbit repository intelligence Knowledge Graph-driven software analysis Dependency mapping strategies Risk assessment methodologies AI-assisted code review workflows We also learned that AI becomes significantly more reliable when grounded in structured repository context rather than relying solely on natural language reasoning.
What's next for Duo Orbit Architect: Blast-Radius AI Engine
Our vision is to evolve Duo Orbit Architect into a comprehensive architectural intelligence platform for software teams. Future enhancements include: Interactive dependency visualization Historical regression prediction CI/CD pipeline integration Security impact analysis Service ownership mapping AI-generated integration tests Multi-repository blast-radius analysis Intelligent merge approval recommendations Ultimately, we want every Merge Request to come with a clear understanding of its architectural impact, enabling teams to deploy faster and with greater confidence.
Log in or sign up for Devpost to join the conversation.