Autonomous coding agents2026Shipped
Opportunity Studio
Autonomous coding-agent pipeline. Finds and verifies bounties and hackathons, plans a build, runs Claude Code or Codex in E2B sandboxes, reviews the output and reports progress to Telegram.
At a glance
6 days
- Built and deployed to production on Railway in 6 days
- 107 application tests plus a container and PostgreSQL restart test
- 1,037 real opportunities imported and checked
What it is
Run an agent from 'find an opportunity' to 'submitted', with separate builder and reviewer agents and hard budget limits.
Why it exists
Coding agents can now build real projects, but running them unattended raises three problems: they execute arbitrary code, they can spend money without limit, and a crash halfway through leaves work in an unknown state.
How it works
A persistent worker imports opportunities, has them verified independently and plans a build. Each build runs Claude Code or Codex inside an E2B sandbox, and a separate reviewer agent checks the exact source and artifacts before anything is submitted. All state lives in PostgreSQL, and every Telegram update comes from the same state transitions the dashboard shows.
Decisions worth explaining
Generated code never runs on the control server
Every build runs in an E2B sandbox with a temporary broker credential. In subscription mode, model credentials stay in a private service and only generated source is sent to the sandbox.
Leases and short row-locked transactions
Workers hold leases on jobs, and a result from an expired lease is rejected. A crash can repeat work, but it can never apply a stale result or submit twice.
A legitimacy gate agents can't talk past
An opportunity passes only when independent reviewers cite current evidence. Self-certified, stale or model-only claims are rejected, because a model saying a bounty is real proves nothing.
Results
- Deployed on Railway with 1,037 imported opportunities and a private dashboard.
- 107 application tests plus a production container and PostgreSQL restart test.
- Secrets encrypted with AES-GCM; no subscription credentials ever enter a sandbox.