{"slug": "ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop", "title": "Ask HN: How are you all ensuring your AI code isn't slop?", "summary": "Pando, an open-source, self-hosted platform for deploying AI-written internal apps, has launched in alpha under the AGPL-3.0 license, with a commercial license available for embedding it in proprietary products or hosting it as a service. Pando builds an app from a git repo or image, scans it for vulnerabilities, runs it on an isolated network, and places it behind company SSO so it is shared only with the people who need it. The project targets IT and platform teams whose employees deploy internal tools without hosting them on laptops or personal cloud accounts, requires Docker and Docker Compose, and warns of breaking changes before upgrading.", "body_md": "## demo.mp4\n\nPando is an open-source, self-hosted platform for running the apps your team builds, including ones written with AI. Point it at a git repo or image and it builds the app, scans it for vulnerabilities, runs it on its own isolated network, and puts it behind your company's SSO, shared only with the people who need it.\n\nBuilt for IT and platform teams who want employees to deploy internal tools without those tools living on laptops or personal cloud accounts. Also works on a home server.\n\n**Status: alpha.** Expect breaking changes; see the [CHANGELOG](https://github.com/trypando/pando/blob/main/CHANGELOG.md) before upgrading.\nNeeds Docker and Docker Compose. [Quickstart →](https://trypando.ai/quickstart)\n\nInstall Pando with the [quickstart](https://trypando.ai/quickstart).\n\nOn [trypando.ai/docs](https://trypando.ai/docs):\n\n- [API](https://trypando.ai/docs/api) ,[CLI](https://trypando.ai/docs/cli) and[MCP server](https://trypando.ai/docs/mcp)\n- [Errors](https://trypando.ai/docs/errors) and[Events](https://trypando.ai/docs/events)\n- [Adapters](https://trypando.ai/docs/adapters) and[Configuration](https://trypando.ai/docs/configuration)\n\nIn this repository:\n\n- [`docs/identity-providers.md`](https://github.com/trypando/pando/blob/main/docs/identity-providers.md) : connecting Okta, Microsoft Entra ID,\nGoogle Workspace, Keycloak, Authentik or another provider, and SCIM.\n- [`docs/rootless.md`](https://github.com/trypando/pando/blob/main/docs/rootless.md) : running Pando on rootless Docker or Podman on Linux.\n- [`docs/reference.md`](https://github.com/trypando/pando/blob/main/docs/reference.md) : running on several hosts or on Kubernetes, host policy at\nstartup, and what an app receives from Pando.\n- [`CHANGELOG.md`](https://github.com/trypando/pando/blob/main/CHANGELOG.md) : what changed in each release, and whether you need to act.\n\n- **A bug** , or something that doesn't work as documented:[open an\nissue](https://github.com/trypando/pando/issues/new/choose) .\n- **A security vulnerability** : privately, through[the advisory\nform](https://github.com/trypando/pando/security/advisories/new) , not as an issue. See[`SECURITY.md`](https://github.com/trypando/pando/blob/main/SECURITY.md) for what to include and what response to expect.\n- **A question** :[Discussions](https://github.com/trypando/pando/discussions) .\n\nBug reports and pull requests are welcome. See [`CONTRIBUTING.md`](https://github.com/trypando/pando/blob/main/CONTRIBUTING.md) for how the\nproject is organized, how to build it, and what a change needs before it can be merged.\n[`CODE_OF_CONDUCT.md`](https://github.com/trypando/pando/blob/main/CODE_OF_CONDUCT.md) applies everywhere the project happens.\n\nAGPL-3.0, with a commercial license available for embedding Pando in a proprietary product or\noffering it as a hosted service without publishing modifications. See\n[`LICENSING.md`](https://github.com/trypando/pando/blob/main/LICENSING.md) for which applies to you, and [`LICENSE`](https://github.com/trypando/pando/blob/main/LICENSE) for the full text.\nContributors sign the [Contributor License Agreement](https://github.com/trypando/pando/blob/main/CONTRIBUTOR_AGREEMENT.md) once, by posting a\ncomment on their first pull request.", "url": "https://wpnews.pro/news/ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop", "canonical_source": "https://github.com/trypando/pando", "published_at": "2026-10-17 14:29:57+00:00", "updated_at": "2026-10-17 15:03:03.104319+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools", "ai-infrastructure", "agent-protocols"], "entities": ["Pando", "Docker", "Docker Compose", "Okta", "Microsoft Entra ID", "Google Workspace", "Keycloak", "Authentik"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop", "markdown": "https://wpnews.pro/news/ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop.md", "text": "https://wpnews.pro/news/ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop.txt", "jsonld": "https://wpnews.pro/news/ask-hn-how-are-you-all-ensuring-your-ai-code-isn-t-slop.jsonld"}}