Skip to main content

Self-hosted AI SDLC orchestration

What it is, who needs it, and how to evaluate governance requirements for AI agents in your software delivery pipeline.

What is self-hosted AI SDLC orchestration?

Self-hosted AI SDLC orchestration means running AI agents on your own infrastructure, connected to your own tools, governed by your own rules, to automate the steps of your software delivery lifecycle. It is not a cloud service. It is not a SaaS platform. It is infrastructure you own and control.

The agents in these pipelines handle tasks like pull request creation, code review, test execution, and deployment. The orchestration layer defines how those agents compose into end-to-end workflows, what humans need to approve, and what can run autonomously.

The key word is governance. Without it, you have autonomous agents writing code that ships without review. With it, you have agents that earn autonomy incrementally, with human approval at every gate and a full audit trail of every decision.

Who needs this?

Engineering teams at organisations of 50 to 1,000 engineers who are already using coding agents (Cursor, Copilot, Claude Code) and need governance before they can expand usage. The agents are already in the codebase. The missing piece is control.

  • DevX and Platform Engineering teams building the internal infrastructure for AI-powered development.
  • Engineering leadership who need to show auditors that AI-generated code follows the same review and approval processes as human-written code.
  • Security and compliance teams in regulated industries (defence, finance, healthcare, government) who need data sovereignty, air-gap capability, and full audit trails.
  • Organisations that want to scale their use of AI coding agents without scaling their risk.

What governance requires

Governance is not a single feature. It is a set of controls that work together to answer three questions: who can do what, what did they do, and who approved it.

SSO/SAML

Single sign-on with SAML 2.0 integration. Centralises authentication through your identity provider, eliminates password sprawl, and enforces session policies across the organisation.

Why it matters: SOC 2, ISO 27001, and most enterprise security frameworks require centralised authentication. A tool that runs AI agents on your codebase without SSO creates a credential-management blind spot.

RBAC

Role-based access control defines who can create pipelines, who can approve changes, who can view audit logs, and who can modify governance policies.

Why it matters: Not everyone on the team should have the same permissions. A junior engineer should not be able to approve their own code changes. RBAC enforces separation of duties without manual oversight.

Audit log

An immutable record of every action taken by every agent and every human. Hash-chained and tamper-evident. Covers pipeline executions, gate decisions, configuration changes, and access events.

Why it matters: When something goes wrong at 2am, you need to know what happened, who approved it, and whether the process was followed. An audit trail is the difference between a root-cause analysis and a guessing game.

HITL gates

Human-in-the-loop approval gates that pause pipeline execution until a designated human approves the next step. Configurable per pipeline, per step, per change-class.

Why it matters: Autonomous agents that write code without human review are a liability, not an asset. HITL gates let you start with full human oversight and gradually reduce it as agents earn trust.

Cost controls

Budget limits and spend tracking at the pipeline and organisation level. Prevent runaway LLM API costs from an agent that loops or a model that scales unexpectedly.

Why it matters: LLM API costs are metered. An agent that loops unexpectedly can burn hundreds of dollars in hours. Cost controls cap the damage and alert you before the invoice arrives.

Capability scopes

Granular permissions that define what each agent can do: which repos it can access, which actions it can take, which environments it can deploy to.

Why it matters: An agent that can read your code should not automatically be able to push to production. Capability scopes enforce least-privilege access for every agent in the pipeline.

Why self-host?

Self-hosting keeps your code, your prompts, your model configurations, and your audit trail on infrastructure you control. No telemetry by default. No data leaves your network unless you explicitly send it.

For organisations in regulated industries, self-hosting is often a compliance requirement. SOC 2, ISO 27001, and sector-specific frameworks (FedRAMP, HIPAA, GDPR) expect data sovereignty. A cloud-hosted SaaS that sends your code to a third-party server creates audit and compliance complications that self-hosting avoids entirely.

Self-hosting also means no vendor lock-in. If the vendor changes pricing, changes direction, or shuts down, your infrastructure keeps running. You own the platform and the data on it.

How it differs from adjacent categories

vs CI/CD tools (GitHub Actions, GitLab CI)

CI/CD tools run deterministic workflows: if condition X, do action Y. They execute scripts and pipelines with no reasoning. AI SDLC orchestration adds agents that can read code, understand context, make decisions, and take actions within governance constraints.

vs general automation (n8n, Zapier)

General automation connects SaaS tools and runs business workflows. AI SDLC orchestration composes AI agents into software delivery pipelines with typed schemas and governance gates. The two categories serve different problems.

vs LLM app builders (Dify, Flowise)

LLM app builders create AI applications for end users: chatbots, document Q&A, conversational agents. AI SDLC orchestration governs the agents that write, review, and ship code. Different direction, different audience, different governance requirements.

vs AI coding assistants (Copilot, Cursor)

AI coding assistants help individual engineers write code faster. AI SDLC orchestration governs how agents interact across the entire delivery pipeline: who can create PRs, who reviews, who approves, who deploys. The assistant is a tool. The orchestration is the process.

Frequently asked questions

What is agent governance?
Agent governance is the set of controls that determine what AI agents can do, where humans need to approve, and what can run autonomously. It covers access control, audit trails, approval gates, cost limits, and progressive autonomy. Without governance, AI agents are an uncontrolled liability.
Why self-host instead of using a cloud service?
Self-hosting keeps your code, your prompts, your model configurations, and your audit trail on infrastructure you control. No data leaves your network. For organisations in defence, finance, healthcare, or government, self-hosting is often a compliance requirement, not a preference.
How does Modulo differ from CI/CD tools like GitHub Actions?
GitHub Actions runs deterministic workflows: if condition X, do action Y. Modulo runs AI agents that can reason about code, make decisions, and take actions within governance constraints. The two are complementary. Modulo handles the parts of the SDLC where an agent needs to think; GitHub Actions handles the parts where a workflow needs to execute.
How does Modulo differ from general automation tools like n8n?
n8n connects everything to everything: CRM to invoicing, Slack to Jira, database to spreadsheet. Modulo composes AI agents into typed pipelines that automate software delivery. n8n is a Swiss Army knife. Modulo is a governed agent runtime. The use cases overlap only at the level of "both automate things."
How does Modulo differ from LLM app builders like Dify?
Dify builds AI applications for end users: chatbots, document Q&A, conversational agents. Modulo governs the AI agents that write, review, and ship your code. Dify faces outward toward your customers. Modulo faces inward toward your SDLC.
What does the pricing include?
The Team tier costs $8,000/year flat. No per-seat, no per-run, no usage metering. It includes SSO/SAML, SCIM provisioning, RBAC, audit logging, HITL gates, eval-gated autonomy, cost controls, and capability scopes. LLM API costs are separate and under your control.
Is Modulo open source?
Modulo is source-available under the Business Source License (BUSL). The farnalabs/modulo repository is public and inspectable. The licence restricts the field of use (you cannot offer Modulo as a competing hosted service) but does not restrict internal use. It is not OSI-approved open source.
Can I try Modulo before buying?
The Community edition is free and self-hosted. You can evaluate the full platform without talking to anyone. The Team tier is a self-service purchase with an offline signed licence key.

Try Modulo

Modulo is self-hosted. You can evaluate it without talking to anyone.

Questions? Open a discussion on GitHub.