All work

The in-house toolchain

La Boucherie

La Boucherie is the workshop where we build the tools we ship and run software with. Every product on this site goes through them, and the same tools can be set up for your team. PigletStash is one of many projects that left the workshop to become a product of its own.

Status
In-house
Platforms
Web apps and GitHub Actions
Our role
Everything: these are our own tools

Interface recreated from the product's own styles, with made-up data.

PigletFactoryAI coding agents

Many coding agents, one reviewer

A local app that runs many AI coding agents at once, each on its own branch of the code, on one developer's machine. Their changes are reviewed like pull requests, piece by piece, before anything is merged.

  • Plan first — the agent drafts a plan as an editable graph before touching any code
  • In parallel — independent steps run side by side, each checked by a verifier
  • One inbox — every permission an agent asks for, in one place
  • Across repositories — a change spanning an API and its client, finished as one

PigletRegistryPrivate container registry

Every build, kept and accounted for

Where every product's builds are stored. Each person and each server gets exactly the access it needs, every download is recorded, and any earlier version can be brought back by its fingerprint.

  • Precise access — permissions per person and per repository, narrow tokens for servers and pipelines
  • Rollback — the full history of every version, with the one line that restores it
  • Tidy — clean-up rules you preview before switching them on
  • Accountable — an audit log of every change of access

Piglet VPS ManagerServer provisioning & audit

Servers set up, then audited

One workflow turns a bare rented server into one our products deploy onto, then audits it against 151 security checks and publishes a report anyone can read.

  • Generated — every key and password created by the workflow, never typed by a person
  • Locked down — password logins switched off once provisioning is done
  • Read-only audits — the same audit on demand, on any server, changing nothing

Built with

  • Python
  • FastAPI
  • React
  • TypeScript
  • GitHub Actions
  • Ansible
  • Docker
  • Claude Agent SDK
Next projectPigletStash