High-Assurance Autonomous Engine
Nimbus implements a Hexagonal (Ports & Adapters) architecture separating lightweight control-plane orchestration from isolated, sandboxed execution planes.
Zero-Trust Sandboxing
Untrusted code runs inside ephemeral subshells and Docker containers. The entire workspace directory is created dynamically per task and purged immediately upon completion to avoid host file leakage.
3-Tier Resilient LLM Routing
Hierarchical fallback strategy spanning Google Gemini 3.6 Flash (Primary), Groq (gpt-oss-120b Secondary), and OpenRouter (Tertiary) with automatic exponential backoff retry on transient 503/429 spikes.
Real-Time Flight Recorder
Immutable event-sourced logging. Every shell execution, stdout/stderr chunk, tool choice, and status transition is broadcast over WebSockets and stored in PostgreSQL for complete post-execution auditability.
Automated Git & Draft PRs
Isolates all code modifications into a dedicated nimbus/task-{id} branch, verifies passing assertions, and pushes a GitHub Draft Pull Request ready for human code review.
Execution Lifecycle Flow
Task Ingestion
User submits natural language prompt & target repository into FastAPI control plane.
Sandbox Provision
Clones repository into ephemeral sandbox and creates dedicated task branch.
Reasoning Loop
3-Tier LLM router executes multi-turn tool commands ($ls, $cat, $edit, $pytest).
Draft PR Delivery
Computes git diff, commits changes, and opens a GitHub Draft Pull Request for review.