---
schema: 1
type: video
title: 'Realtime multiplayer, automation, and you! — Idan Gazit, GitHub'
description: >-
  Idan Gazit's personal site runs on Astro, which ships often enough to keep him
  permanently on the upgrade treadmill, so he wrote an agentic workflow in about
  three lines of plain English, the kind of message you would send a teammate.
  Copilot expanded it into a full playbook: check for new releases, read the
  changelog and upgrade guide, apply the changes, open a pull request. It then
  carried him from Astro 5 to Astro 7, two major versions at once, found and
  fixed the code that broke, verified the build, and flagged the manual steps it
  could not take itself. The workflow is a Markdown document. The YAML actions
  file is a compiled artifact nobody reads, so changing how the automation
  behaves means editing the English. The guardrails are the part he wants
  remembered. Prompting an agent to behave is not a guardrail, because anyone
  who can prompt inject it can undo the instruction, and you have let the fox
  into the henhouse. Permissions, allowed tools, reachable network destinations
  and safe outputs get declared deterministically in front matter instead. His
  upgrade workflow may open exactly one pull request, and is explicitly allowed
  to do nothing at all, since an automation that cannot stay quiet turns into a
  denial of service against its own owner. Secrets stay outside the agent's jail
  entirely, because a secret an agent can see should be treated as already
  compromised. The second prototype, ACE, runs every session in a cloud microVM
  and deliberately resembles a chat app, on the theory that what belongs in the
  shared surface is everything not already in the code: the political
  constraints, the infrastructure deal that quietly picks your cloud provider,
  the plan two people edit together before telling the agent to go make the
  document true. He ends on a study of around a hundred developers over
  thousands of hours which found that hands on keyboard typing is about 5% of
  the work, and that is the only 5% the tools have helped with so far. Speaker
  info: - https://twitter.com/idangazit - https://linkedin.com/in/idangazit -
  https://githubnext.com
canonical: >-
  https://liquidgold.cc/channel/aidotengineer/explore/video/realtime-multiplayer-automation-and-you-idan-gazit-b774df9e74e0
markdown: >-
  https://liquidgold.cc/channel/aidotengineer/video/realtime-multiplayer-automation-and-you-idan-gazit-b774df9e74e0.md
llms: null
parent: 'https://liquidgold.cc/channel/aidotengineer.md'
channel: aidotengineer
updated: '2026-10-24T05:41:12.444Z'
language: null
children: []
videoId: iQ5xldZ9StU
durationSeconds: 1301
publishedAt: '2026-08-08T21:30:06.000Z'
searchChunks:
  - ordinal: 0
    text: null
    startSeconds: 24
    endSeconds: 107
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=24'
    heldReason: rights
  - ordinal: 1
    text: null
    startSeconds: 117
    endSeconds: 206
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=117'
    heldReason: rights
  - ordinal: 2
    text: null
    startSeconds: 117
    endSeconds: 206
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=117'
    heldReason: rights
  - ordinal: 3
    text: null
    startSeconds: 117
    endSeconds: 206
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=117'
    heldReason: rights
  - ordinal: 4
    text: null
    startSeconds: 206
    endSeconds: 217
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=206'
    heldReason: rights
  - ordinal: 5
    text: null
    startSeconds: 217
    endSeconds: 296
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=217'
    heldReason: rights
  - ordinal: 6
    text: null
    startSeconds: 217
    endSeconds: 296
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=217'
    heldReason: rights
  - ordinal: 7
    text: null
    startSeconds: 296
    endSeconds: 306
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=296'
    heldReason: rights
  - ordinal: 8
    text: null
    startSeconds: 306
    endSeconds: 434
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=306'
    heldReason: rights
  - ordinal: 9
    text: null
    startSeconds: 306
    endSeconds: 434
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=306'
    heldReason: rights
  - ordinal: 10
    text: null
    startSeconds: 434
    endSeconds: 444
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=434'
    heldReason: rights
  - ordinal: 11
    text: null
    startSeconds: 444
    endSeconds: 546
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=444'
    heldReason: rights
  - ordinal: 12
    text: null
    startSeconds: 444
    endSeconds: 546
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=444'
    heldReason: rights
  - ordinal: 13
    text: null
    startSeconds: 556
    endSeconds: 659
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=556'
    heldReason: rights
  - ordinal: 14
    text: null
    startSeconds: 556
    endSeconds: 659
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=556'
    heldReason: rights
  - ordinal: 15
    text: null
    startSeconds: 659
    endSeconds: 670
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=659'
    heldReason: rights
  - ordinal: 16
    text: null
    startSeconds: 670
    endSeconds: 750
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=670'
    heldReason: rights
  - ordinal: 17
    text: null
    startSeconds: 670
    endSeconds: 750
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=670'
    heldReason: rights
  - ordinal: 18
    text: null
    startSeconds: 750
    endSeconds: 762
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=750'
    heldReason: rights
  - ordinal: 19
    text: null
    startSeconds: 762
    endSeconds: 870
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=762'
    heldReason: rights
  - ordinal: 20
    text: null
    startSeconds: 762
    endSeconds: 870
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=762'
    heldReason: rights
  - ordinal: 21
    text: null
    startSeconds: 880
    endSeconds: 962
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=880'
    heldReason: rights
  - ordinal: 22
    text: null
    startSeconds: 962
    endSeconds: 973
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=962'
    heldReason: rights
  - ordinal: 23
    text: null
    startSeconds: 973
    endSeconds: 1063
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=973'
    heldReason: rights
  - ordinal: 24
    text: null
    startSeconds: 1073
    endSeconds: 1161
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=1073'
    heldReason: rights
  - ordinal: 25
    text: null
    startSeconds: 1073
    endSeconds: 1161
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=1073'
    heldReason: rights
  - ordinal: 26
    text: null
    startSeconds: 1171
    endSeconds: 1301
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=1171'
    heldReason: rights
  - ordinal: 27
    text: null
    startSeconds: 1171
    endSeconds: 1301
    watch: 'https://liquidgold.cc/watch/iQ5xldZ9StU?t=1171'
    heldReason: rights
---


# Realtime multiplayer, automation, and you! — Idan Gazit, GitHub

Idan Gazit's personal site runs on Astro, which ships often enough to keep him permanently on the upgrade treadmill, so he wrote an agentic workflow in about three lines of plain English, the kind of message you would send a teammate. Copilot expanded it into a full playbook: check for new releases, read the changelog and upgrade guide, apply the changes, open a pull request. It then carried him from Astro 5 to Astro 7, two major versions at once, found and fixed the code that broke, verified the build, and flagged the manual steps it could not take itself. The workflow is a Markdown document. The YAML actions file is a compiled artifact nobody reads, so changing how the automation behaves means editing the English. The guardrails are the part he wants remembered. Prompting an agent to behave is not a guardrail, because anyone who can prompt inject it can undo the instruction, and you have let the fox into the henhouse. Permissions, allowed tools, reachable network destinations and safe outputs get declared deterministically in front matter instead. His upgrade workflow may open exactly one pull request, and is explicitly allowed to do nothing at all, since an automation that cannot stay quiet turns into a denial of service against its own owner. Secrets stay outside the agent's jail entirely, because a secret an agent can see should be treated as already compromised. The second prototype, ACE, runs every session in a cloud microVM and deliberately resembles a chat app, on the theory that what belongs in the shared surface is everything not already in the code: the political constraints, the infrastructure deal that quietly picks your cloud provider, the plan two people edit together before telling the agent to go make the document true. He ends on a study of around a hundred developers over thousands of hours which found that hands on keyboard typing is about 5% of the work, and that is the only 5% the tools have helped with so far. Speaker info: - https://twitter.com/idangazit - https://linkedin.com/in/idangazit - https://githubnext.com

Canonical: https://liquidgold.cc/channel/aidotengineer/explore/video/realtime-multiplayer-automation-and-you-idan-gazit-b774df9e74e0 · Channel: [AI Engineer](https://liquidgold.cc/channel/aidotengineer.md)

> Search chunk text is held until public-source provenance is verified.

## Document chunks

> Missing: no stored document chunks are available.