OpenAI builds Pando Git backend with Codex agents and continuous security testing

OpenAI◼'s November 2 technical report describes Pando, a Git backend in Rust that stores packfiles in blob storage and tracks branch versions in a separate metadata store, serving all monorepo development since April 2026. Updates are ordered per branch, but multi-branch reads may show different points in time, so there is no repository-wide atomic snapshot. Testing combined differential checks against standard Git, Lean and TLA+ modelling, and agent red-teaming, but the report gives no vulnerability count or CVEs. Defenders should not assume agent-built infrastructure is free of flaws, and no specific fixed versions were published.

For security analysts · Written by AI from 1 source · Wrong?