Open-source background coder that admits it’s not safe for SaaS

What it does

Open-Inspect hosts persistent AI coding agents inside sandboxed development environments on Modal, orchestrated by a Cloudflare control plane. You can dispatch them from a web UI, Slack, GitHub PR comments, Linear issues, or webhooks to write code, open PRs, and collaborate in real-time multiplayer sessions. The system snapshots filesystem state after each prompt and proactively warms sandboxes so sessions start quickly instead of cold-booting every time.

The interesting bit

The project is admirably upfront about its own security boundaries: it is explicitly single-tenant only, because every user shares the same GitHub App credentials and the system does not validate per-user repository access before spinning up a session. That honesty is refreshing, and it means the architecture is intentionally designed for trusted internal teams rather than public SaaS.

Key highlights

• Multiplayer sessions with real-time presence, streaming, and per-prompt git commit attribution.
• Pluggable model providers: Anthropic Claude, OpenAI Codex (via existing ChatGPT subscription OAuth), and OpenCode Zen, with per-session reasoning controls.
• Rich client integrations: Web UI, Slack bot, GitHub bot (auto-review and @mentions), Linear bot, and generic webhooks.
• Scheduled automations including cron jobs, Sentry alert triage, and webhook triggers.
• Fast session startup via filesystem snapshots, pre-built repo images refreshed every 30 minutes, and proactive sandbox warming that begins as soon as you start typing.

Caveats

• Single-tenant by design: all users share the same GitHub App scope, and the system does not verify individual repository permissions before creating a session. Multi-tenant use would require significant architectural changes.
• The README warns that deployment should sit behind organizational SSO or a VPN, which limits its utility for public or loosely coupled teams.

Verdict

Engineering teams already living in Slack, Linear, and GitHub who want a self-hosted, asynchronous coding assistant will find this a credible starting point. Solo developers or anyone hoping to run a public multi-tenant service should look elsewhere.