Start hereTry itAgentsArchitectureMechanismsResultsGlossaryRelated workSpikeChangelogContributingSecurity

Related work

Research published in 2026 covers several of these parts on its own, and FireTrident's newest checks come from what it measured:

On 2026-10-13 Anthropic described Scion, the version control system it built when its monorepo passed 30,000 merged changes a day (Redesigning source control at Anthropic). Its conclusions are FireTrident's assumptions: at agent scale a merge queue stops making sense, so test after merging and before deploying; commits, merges and history belong on the server, behind an API that jobs can ask without a local copy; a change is the list of files it changed with pointers to their contents; and everything that can be derived from that log (blame, path history) is derived data, computed incrementally. The post asks git platforms to bring these ideas to git without leaving it. FireTrident does: its trunk writer builds every trunk commit and moves trunk with compare-and-swap, lineage, blame, certification and review are server-side queries, inline changes carry their contents, derived indexes share one mechanism, culprit finding names the landings behind a red trunk, and any git client can still clone what the colony builds. Scion serves a repository with almost 100 GB of history, checked out on the order of 25 million times a day for CI, a scale FireTrident has not faced; FireTrident adds what Scion leaves to fixing conflicts afterwards: many agents choosing their work from a shared field, and read sets validated before a change lands.

Of the research systems above, Agensh ran the most agents: 1,024 model-driven agents on one repository, 12.8 times the 80 FireTrident has run at once; the others ran 2 to 128. None of them measures what FireTrident measures on a live service, in one repository at a time: read-set validation when a change lands, returns, rework, review and certification, with 80 model-driven agents at once in production (whose changes never overlapped: each intent edits its own file), contention in scripted runs built for it, and load tests on a preview that started 5,000 synthetic agents (no model calls, review off; up to 4,959 joined) to measure the platform's load alone, since each of their changes adds one new file and reads nothing. From the same literature: a repair now counts only when the tests it was declared for pass (arXiv:2606.18168, 2610.12822), a model's approval counts only when it saw the whole change (arXiv:2610.10961), only people and rules can waive a danger gate (arXiv:2605.29178, 2608.02693, 2606.13757), and the person asked to decide sees the change itself (arXiv:2607.29516). With review on, no model authorizes a change that touches secrets or authentication (unless a person allowed that class), what decides on agents, or a protected path: deterministic rules send each to a person, because model gates over-block and under-block such classes, as AuthGateBench (arXiv:2610.16426) found when models blocked 80 to 97% of the credential use and external sharing a request explicitly authorized and let through up to 17% of destructive calls on guessed targets.

Four results from 2024 to 2026 argue for the same choices: