Pattern

GitHub Agentic Workflows substrate

Contain a coding agent running inside GitHub Actions by isolating it in its own container on the runner VM, routing its network, tool and model traffic through trusted proxies, and letting it change the repository only through vetted outputs.

Classification Layered sandbox: agent container inside a runner VM, with mediated egress and staged writes.