Synced from Hive. This page is pulled from hivecommons/hive@v5 during the docs build. Edit the canonical source in the Hive repository.

Hive introduction

Hive helps maintain a GitHub project. It watches reports and tasks (issues), proposed code changes (pull requests, or PRs), failed automated build and test checks (CI), known security vulnerabilities (CVEs), and Dependabot alerts. It sends AI coding agents to sort reports, make fixes, review changes, and prepare releases. See Integrations for supported agent backends.

For example, Hive can spot a missing test, record the finding on its dashboard, and — if the configured permissions allow it — ask the quality agent to propose a test in a pull request. At lower levels, a person reviews and merges that change. Autonomous merging is optional, not the starting goal.

You decide what agents may do. The AI Codebase Maturity Model (ACMM) ties permissions to the project’s safeguards: tests, coverage, review practice, and security posture. It is not a checklist for turning every issue into a PR.

Get started

Choose how to obtain a running hive before configuring its agents:

Your situationStart hereExpected result
You want a hosted hive, without running a clusterHosted onboarding; request at hive.hivecommons.dev/get-startedAfter admin approval and provisioning, My Hives links to your dashboard.
You want to run one hive yourselfDocker Compose, Podman, or KubernetesYour own running container and dashboard, with storage and authentication configured.
Someone has already given you dashboard accessGetting startedConnect the GitHub App, authenticate a model backend, set a budget, then enable agents conservatively.

You need a GitHub identity and a repository on GitHub.com or GitHub Enterprise. For the App route, have permission to install/authorize the GitHub App for that repository, or help from someone who can. Hosted requests need admin approval; requesting a hive does not itself install the App. Self-hosting also requires the chosen runtime, deployment privileges, and repository credentials; the Compose guide supports a PAT as well as an App. An agent separately needs its supported backend login, subscription, or model-gateway credentials.

Once you can open a dashboard, follow Getting started for the first session and its success checks. Operating a fleet is a separate task: see self-hosted hub deployment.

How Hive is organized

A terminal agent is a power tool: you hold it, aim it, and it stops when you stop. Hive is the workshop that runs the power tools for you on three rules:

  1. Short-lived agents. Every task starts a fresh agent with a clean context and ends it.
  2. External context. What the agent needs to know lives outside the model and is re-injected each time.
  3. Prompts driven by deterministic facts. Instructions are templates filled from real data, not hand-tuned prose.

Core concepts

  • Hive and spoke: a spoke is the running hive that serves repositories; a hub can register, provision, and observe multiple spokes.
  • Agents: AI workers assigned a job, model, schedule (cadence), and permissions.
  • Governor: the scheduler that checks for work and sends an agent a task (a kick).
  • ACMM levels: the AI Codebase Maturity Model — six levels that map how mature a codebase’s tests, reviews and security posture are to what agents may observe, propose, open, review, or merge (paper).
  • Hub: the service that registers hives, receives their periodic status reports (heartbeats), and shows the fleet.
  • Contributors and ClankeR relay: a way for trusted contributors to donate compute and run delegated work with permissions checked by the hub.

How it works

  1. Connect a repository through the Forge App and configure the project, agents, model backends, and desired ACMM level.
  2. The Governor enumerates actionable work and applies deterministic filters before any agent sees a task.
  3. Agents receive bounded kicks, work in their configured lanes, and use Hive relays for audited writes such as issues, pull requests, reviews, or merges.
  4. Dashboards, logs, fleet health, and hub heartbeats show what happened and what still needs human attention.

Where to go next

Current docs target branch v5; use the documentation map for v2 → v4 and v4 → v5 migration pointers.

Contributor reference: maintaining security documentation

SECURITY.md, every src/docs/security*.md / ioscan*.md page, and landscape.md must score Flesch-Kincaid grade 11 or lower (src/scripts/check-security-docs-readability.sh). The same pages need a Last reviewed: YYYY-MM-DD line in their first 15 lines, no older than 120 days, and must not describe a closed issue as “tracked in”, “in progress”, or “planned” (src/scripts/check-security-docs-rot.sh).