OctoGuardian

OctoGuardian is an enterprise autonomous MCP GitHub operations engine. It is a Model Context Protocol orchestrator that bridges large language models with GitHub REST APIs and includes Human-in-the-Loop execution interceptors, cryptographic state validation, and non-repudiation audit logging. The system addresses the mismatch between non-deterministic AI generation and deterministic software version-control systems by classifying destructive actions statically and intercepting them before GitHub API invocation. It converts conversational intentions into validated JSON schemas for GitHub REST endpoints and handles GitHub App authentication, installation access tokens, and multi-tenant organization boundaries. The orchestrator uses Google Gemini with an MCP-compliant tool catalog inside a bounded agentic loop. Non-destructive tools route directly to the Octokit client, while destructive tools such as delete_branch, delete_repository, and delete_file are diverted to the HITL interceptor and require a confirmation token. Every operation is persisted in an audit log collection with metrics including latency, target repository, action, IP address, and status. Chat and conversation memory are stored separately from the audit log, scoped to the authenticated user.