Rodon Workspace / Engineering
Designing execution without trusting the model
The architectural distinction between trusted coding tools and isolated agent compute.
Code generation changes what a model can produce
A model that can execute code can inspect datasets, create charts, transform files, test assumptions, and return artifacts rather than prose alone. This is one of the highest-leverage additions to an intelligence workspace. It is also a direct expansion of authority.
Not every console has the same trust level
A development tool such as a trusted Codex MCP server may have access to repositories, SSH targets, Docker, credentials, and production workflows. That access is appropriate only because a person invokes it deliberately within an operational process. Model-generated analysis should not inherit the same environment.
Rodon Compute is a separate abstraction
The browser talks to Rodon. Rodon creates canonical sessions and runs, applies policy, issues a narrow internal grant, and asks a configured provider to create an isolated sandbox. Provider credentials and raw identifiers remain behind the gateway. This keeps the product model stable while providers evolve.
Isolation must be a fact, not a label
A container named “sandbox” is not automatically safe. Production execution depends on the actual boundary: filesystem isolation, secret handling, network policy, process controls, resource limits, retention, and termination behavior. If a required control is unavailable, the provider should be disabled or marked degraded.
Cancellation must be truthful
Asynchronous systems often report the user’s request rather than the provider’s result. Rodon distinguishes cancellation requested from cancellation confirmed. If an upstream API cannot verify termination, the interface should not pretend the process is gone.
Operations complete the model
Execution is not just an endpoint returning stdout. It is a lifecycle with files, processes, expiry, errors, retry rules, cancellation, and cleanup. Representing it through Operations allows the person to leave the initiating chat without losing visibility.
Power through restraint
The best execution system is not the one that can reach the most infrastructure. It is the one that enables useful analysis while making every expansion of authority explicit, temporary, and reviewable.