OpenAI Builds Custom Git Backend 'Pando' to Scale Codex-Driven Development Infrastructure
OpenAI engineered a new Git backend called Pando after Codex-driven agentic development overwhelmed the infrastructure behind its internal monorepo, with merge reliability at times falling below 90%. Pando departs from traditional Git scaling approaches by using per-branch updates, causal consistency, packfile reuse via a caching layer called Express, limited ref advertisement, and background pack compaction. OpenAI reports Pando served over 57 TB of Git packs in a single hour with 99%+ cache hit rates, cutting median push latency by nearly 80% and raising post-merge reliability to 99.99%. The article is primarily an infrastructure engineering story but notes that agent-scale development widens the attack surface around source control, citing the GitSpawn vulnerability class, Git-hooks-to-code-execution research, and the Aokigahara infostealer targeting Codex credentials, Git credential files, and SSH keys.
Linha do tempo
-
OpenAI Builds Custom Git Backend 'Pando' to Scale Codex-Driven Development Infrastructure
ler a análise desta fonte ocultar
OpenAI engineered a new Git backend called Pando after Codex-driven agentic development overwhelmed the infrastructure behind its internal monorepo, with merge reliability at times falling below 90%. Pando departs from traditional Git scaling approaches by using per-branch updates, causal consistency, packfile reuse via a caching layer called Express, limited ref advertisement, and background pack compaction. OpenAI reports Pando served over 57 TB of Git packs in a single hour with 99%+ cache hit rates, cutting median push latency by nearly 80% and raising post-merge reliability to 99.99%. The article is primarily an infrastructure engineering story but notes that agent-scale development widens the attack surface around source control, citing the GitSpawn vulnerability class, Git-hooks-to-code-execution research, and the Aokigahara infostealer targeting Codex credentials, Git credential files, and SSH keys.