Ask HN: How are you all ensuring your AI code isn't slop?

demo.mp4 #

Pando is an open-source, self-hosted platform for running the apps your team builds, including ones written with AI. Point it at a git repo or image and it builds the app, scans it for vulnerabilities, runs it on its own isolated network, and puts it behind your company's SSO, shared only with the people who need it.

Built for IT and platform teams who want employees to deploy internal tools without those tools living on laptops or personal cloud accounts. Also works on a home server.

**Status: alpha.** Expect breaking changes; see the [CHANGELOG](https://github.com/trypando/pando/blob/main/CHANGELOG.md) before upgrading.
Needs Docker and Docker Compose. [Quickstart →](https://trypando.ai/quickstart)

Install Pando with the [quickstart](https://trypando.ai/quickstart).

On [trypando.ai/docs](https://trypando.ai/docs):

- [API](https://trypando.ai/docs/api) ,[CLI](https://trypando.ai/docs/cli) and[MCP server](https://trypando.ai/docs/mcp)
- [Errors](https://trypando.ai/docs/errors) and[Events](https://trypando.ai/docs/events)
- [Adapters](https://trypando.ai/docs/adapters) and[Configuration](https://trypando.ai/docs/configuration)

In this repository:

• docs/identity-providers.md : connecting Okta, Microsoft Entra ID, Google Workspace, Keycloak, Authentik or another provider, and SCIM.

• docs/rootless.md : running Pando on rootless Docker or Podman on Linux.

• docs/reference.md : running on several hosts or on Kubernetes, host policy at startup, and what an app receives from Pando.

• CHANGELOG.md : what changed in each release, and whether you need to act.

• A bug , or something that doesn't work as documented:open an issue .

• A security vulnerability : privately, throughthe advisory form , not as an issue. SeeSECURITY.md for what to include and what response to expect.

• A question :Discussions . Bug reports and pull requests are welcome. See CONTRIBUTING.md for how the project is organized, how to build it, and what a change needs before it can be merged. CODE_OF_CONDUCT.md applies everywhere the project happens.

AGPL-3.0, with a commercial license available for embedding Pando in a proprietary product or offering it as a hosted service without publishing modifications. See LICENSING.md for which applies to you, and LICENSE for the full text. Contributors sign the Contributor License Agreement once, by posting a comment on their first pull request.