I build taracode, an open-source DevOps agent that runs on local models through Ollama. It is read-only by default, and every change goes through a policy first. I also publish a scoreboard of which open models can actually do infrastructure work: https://code.tara.vision/evals
Code: https://github.com/tara-vision/taracode
Earlier posts here as taravision.