Autonomous operations · homelab

The homelab that runs itself.

One Proxmox box, a rack of self-hosted services, and a fleet of agents that watch, triage, rehearse, and repair. Below is every fix they've made — the symptom, what actually went wrong, and how it was resolved — generated from the system's own records and redeployed within a minute of each one.

All systems nominal ·12 agents on watch ·162 fixes logged ·refreshed 17 Jul 2026, 13:11 UTC
162
Fixes logged
25
Self-resolved
136
Root-caused
12
Autonomous agents
Every fix, in full

What it handled — and exactly how.

Each entry is a real fix, pulled from the system's own issue log. Click any one to read the symptom, what actually went wrong, and how it was resolved. Internal specifics are scrubbed; the reasoning is not.

Loading the feed…

The roster

Twelve agents, each with one job.

Small, single-purpose, and boring by design — the interesting behaviour is in how they compose.

log-triageclusters error logs into deduplicated, root-caused issues
failure-watcherturns silent failures into auto-closing issues
drift-checkpinned-vs-running container digests, every day
dep-updatewatches the version layer, proposes safe upgrades
resource-watchhost load & memory; right-sizes and alerts
renovatedependency & container-image bumps, digest-pinned
recording-watchdogre-arms a stalled DVR recording within 2 min
seerr-reconcilerevery request ends fulfilled — or flagged
autohealrestarts a container the moment it goes unhealthy
malware-sweepquarantines non-media payloads in the library
smoke-test gateblocks a bad deploy before it ever lands
healthcheck-triagewatches the watchers, and pages when one goes quiet
How it decides

Autonomous where it’s safe. Gated where it isn’t.

The system is deliberately not a black box that changes things on a whim. Four rules keep it trustworthy.

01

Git is the source of truth

Every change is a branch, a review, a merge. Nothing is configured by hand and forgotten. The repository can rebuild the box from scratch.

02

Rehearse before prod

Anything destructive is replayed on a throwaway clone of production first. The dangerous surprises get caught on a copy, not on the live system the household depends on.

03

Diagnose, don’t blind-fix

Agents find root causes and propose. A human approves anything that changes state. Confident-but-wrong auto-fixes were tried once — and deliberately removed.

04

Defense in depth

Secrets are scrubbed at the log shipper and again before the repository. A leaked credential is a bug to fix at the source, at multiple layers — never a fire drill.