I built an open MVP for deploying AI-built software without giving agents unrestricted server access

Description and use

Guardian Cloud is an open MVP that enables secure deployment of AI‑generated Node.js applications from public GitHub repositories without giving agents unrestricted server access. It provides a deployment plan, requires explicit approval, and automatically provisions domain and HTTPS.

Problem

Deploying AI-generated applications to production servers is difficult: either a human does all steps manually, which doesn't scale, or the AI agent is given unrestricted shell access, risking mistakes.

Outcome

Guardian Cloud successfully deployed two external Node.js repositories: one reached a public HTTPS URL with GET / returning 200, the other failed honestly at the build step, demonstrating fail‑closed behavior.

Workflow

• Paste public GitHub repo URL
• Guardian analyzes the app and detects Node.js (user provides port if needed)
• Guardian presents deployment plan
• User explicitly approves deployment
• Guardian performs controlled infrastructure actions, monitors deployment, provisions domain and HTTPS
• Application is deployed, validated, and exposed via public URL

Evidence

Here is what the last validation round actually showed: an external Node.js sample repository was deployed and later served GET / = 200 publicly; another external Node.js repository (openshift/nodejs-ex) reached the deployment stage and failed honestly at the build step; the final end‑to‑end LIVE test used a small public Node.js test repository (AndersonVitaease/guardian-cloud-e2e) and reached a public HTTPS URL with GET / = 200.