LAB STATUS // ACTIVE
BACK TO ALL BUILDSSYSTEM_DOSSIER // 04
IBM Dev Day Sprint
HACKATHONSUBMITTED

OnboardBob

Autonomous repository cartographer & onboarding copilot with injection defense

Key Metrics: 3-Layer Injection Defense • 3 Parallel Subagents

System Overview

An autonomous codebase topology cartographer and onboarding copilot built with 3 parallel subagents (Env Auditor, Repo Mapper, Runtime Checker). Features a 3-layer prompt injection defense against poisoned repositories.

Architectural Decisions & Build Log

Built for IBM Dev Day to turn massive unfamiliar codebases into instant, navigable architectural maps within seconds.

ENGINEERING SPECIFICATIONS

Decoupled subagents running concurrent AST analyses for package graphs, environment variables, and execution paths.
Adversarial prompt sanitizer stripping hidden LLM instructions from READMEs and issue comments.

LESSONS LEARNED & TAKEAWAYS

▸Codebase agents must verify ASTs directly rather than hallucinating from filenames alone.

TECHNOLOGIES & RUNTIMES

Node.jsTypeScriptAST ParsingSubagent OrchestrationPrompt Injection Defense