The Coe Lab
← Back to Blog

Anthropic Replaced Git: What Agent-Scale Source Control Changes

By October 14, 202611 min read
AIDevOpsSource ControlInfrastructureSoftware Engineering
A technology notebook with visual symbols for AI, cybersecurity, infrastructure, and automation

Anthropic's Scion shows how AI coding agents are forcing source control, CI, code review, and infrastructure to evolve beyond human-scale assumptions.

Git did not suddenly become obsolete this week. But Anthropic's decision to move its enormous monorepo from Git to a new in-house system called Scion is a warning flare for the rest of the software industry. The company says its merge volume climbed from roughly 2,500 changes per day in May 2026 to more than 30,000 per day in September. At that pace, familiar source-control assumptions—local clones, branches, packfiles, centralized merge queues, and CI jobs that repeatedly check out a repository—stop looking like sensible defaults and start looking like infrastructure taxes.

The headline is not that one AI company built a proprietary version-control system. Large technology companies have created specialized source-control systems before. The important part is why Anthropic needed Scion: coding agents increased the rate of software production faster than the surrounding delivery pipeline could absorb it. This is an early, unusually visible example of a broader shift. When code generation gets cheap, coordination, verification, storage, review, and deployment become the scarce resources.

The Scale Problem That Pushed Anthropic Beyond Git

Anthropic describes a workload far outside normal enterprise development. Its main-branch history is nearly 100 GB, a compressed working copy exceeds 25 GB, and CI plus agent workloads perform about 25 million checkouts per day. A naive implementation would move hundreds of petabytes of Git data daily. Anthropic tried the established remedies: shallow clones, sparse checkouts, promisor remotes, snapshots in object storage, and hundreds of internal mirrors. Those techniques bought time, but they did not change the basic cost model.

Git is designed around a powerful promise: a clone can be a complete repository. A developer can inspect history, calculate diffs, create commits, switch revisions, and work offline without asking a central server for every answer. That decentralized model remains one of Git's greatest strengths. It is also unnecessary overhead when almost every client is an ephemeral, network-connected agent sandbox or CI job that needs only a narrow slice of the tree for a few minutes.

Scion starts from the opposite assumption. Clients are online. The server handles history, merge bases, blame, rebases, and commit creation. Clients keep bounded caches and materialize only the files they request. This is not merely Git with a faster cache in front of it; it moves computation and repository intelligence into a horizontally scalable service. Anthropic reports that the resulting infrastructure footprint is 200 times smaller in CPU and memory than its previous Git mirror fleet, while checkouts fell from minutes to seconds and CI gained 25 percent in CPU capacity.

How Scion Changes the Source-Control Data Model

Scion's core unit is a changeset stored in a write-ahead log. Instead of pointing to a complete repository tree in the way a Git commit does, a changeset records files changed relative to its first parent and content-addressed references to compressed file contents. Creating a change does not require assembling a packfile, moving a branch pointer, or coordinating a lock across the fleet. Work scales mostly with the size of the change, not the entire repository.

The tradeoff is that a compact changeset cannot instantly answer every historical question. Scion therefore computes derived data for operations such as blame, path history, copy detection, and commit-graph traversal. These structures can be generated eagerly or lazily and changed behind the service API without forcing client upgrades. This design resembles modern data platforms: preserve a minimal authoritative log, then build purpose-specific indexes and materialized views around it.

File delivery is similarly object-oriented. Clients request immutable trees and blobs, and regional cache layers can answer those requests without negotiating a giant delta-compressed packfile. Node-level daemons share objects across jobs on the same machine. Anthropic says each cache tier exceeds a 99 percent hit rate. Just as importantly, every tier speaks the same retrieval protocol, while enforced topology prevents a regional cache failure from stampeding the authoritative service.

  • Always-online clients trade offline independence for much smaller local state.
  • Server-side APIs let CI and automation ask repository questions without cloning anything.
  • Immutable, content-addressed objects make distributed caching straightforward.
  • Sparse and virtualized working copies materialize only files a task actually reads.
  • Derived indexes make expensive history operations scalable without bloating every client.

These choices are not universally better. They create deep dependence on a central service, network availability, identity controls, and careful multi-region engineering. Scion also requires replacement tooling for review, search, permissions, and CI integration. Anthropic explicitly says it is not a general replacement for Git. The architecture makes sense because the company's workload is unusually centralized, its monorepo is enormous, and its dominant clients are disposable agents rather than laptop-bound humans.

The Real Story Is the Bottleneck Moving Downstream

For years, discussion about AI coding focused on how quickly a model could produce a function or fix a ticket. Anthropic's numbers show why that benchmark is becoming less useful. If an organization can create ten times as many plausible patches, it does not automatically deliver ten times as much value. Every patch still competes for test capacity, review attention, deployment windows, observability, and operational risk budget.

Traditional delivery systems encode human-scale scarcity. Branches represent long-lived units of human work. Merge queues serialize changes because concurrent edits are expensive to reconcile. CI frequently rebuilds broad portions of a project because developers submit tens or hundreds of changes, not tens of thousands. Code review presents line-by-line diffs because a person is expected to understand most of what changed.

Agent-scale development reverses those constraints. Producing another candidate patch becomes nearly free, while proving that it is safe becomes comparatively expensive. Anthropic says engineers review every change, but increasingly focus on intent instead of every line. It also describes moving toward post-merge and pre-deploy testing because a global merge lock cannot keep up. This is a profound operational change: the control point moves from preventing every questionable merge to containing, detecting, and rapidly reversing bad outcomes.

That model only works with stronger safeguards. High-throughput repositories need hermetic tests, production-like simulations, fuzzing, rate limits, granular permissions, deployment rings, excellent telemetry, and reliable rollback. Otherwise, speed simply converts latent software defects into production incidents faster. AI can help build those safeguards, but organizations must measure whether verification capacity is rising alongside code-generation capacity.

Security and Governance Get Harder, Not Easier

A centralized source-control service can enforce controls that are awkward in a fully replicated repository. Scion supports directory-level permissions inside a monorepo and semantic approval rules that distinguish low-risk edits from sensitive logical changes. For organizations with regulated code, secret-bearing infrastructure, or multiple agent identities, that fine-grained policy layer is attractive.

Centralization also concentrates risk. The repository service becomes a high-value authorization and availability boundary. A compromised agent token could potentially create changes at machine speed. A flawed policy engine could expose sensitive directories. A cache-isolation failure could amplify into a fleet-wide outage. The security question is therefore no longer only who may push to a branch. It includes which agent may read which path, invoke which tool, submit which class of change, consume how much compute, and trigger which deployment stage.

Teams adopting coding agents should treat them like privileged automation, not unusually fast interns. Each agent needs a workload identity, minimal repository scope, short-lived credentials, immutable audit records, bounded concurrency, and explicit deployment authority. Generated changes should carry provenance: model and tool versions, instructions, input sources, test evidence, reviewer decisions, and the exact artifact promoted. These controls matter even if a team stays on Git, because the risk comes from autonomous throughput rather than the brand of version control.

What This Means for Developers, IT Leaders, and Homelabbers

Most teams should not build a Scion clone. Anthropic's system addresses a workload that very few organizations have today, and replacing Git would create an enormous ecosystem migration. The practical lesson is to profile the delivery pipeline before buying more AI seats or launching more autonomous agents. Find the first shared resource that saturates when patch volume doubles: clone traffic, build executors, integration tests, review latency, package registries, staging environments, or deployment approvals.

  1. Measure repository and CI economics: clone volume, checkout time, cache hit rate, build minutes per merged change, and queue latency.
  2. Make workspaces sparse and disposable. Use partial clones, sparse checkouts, remote caches, and prebuilt development images where they genuinely reduce transfer and setup time.
  3. Expose narrow server-side operations to agents. An agent that needs a diff or ownership lookup should not always need a full clone.
  4. Separate change creation from deployment authority. Require policy checks and staged promotion for high-impact services.
  5. Invest in verification throughput: deterministic tests, selective test execution, preview environments, fuzzing, canaries, and automated rollback.
  6. Track outcomes rather than generated code. Lead time, escaped defects, rollback rate, and operator load matter more than commits per day.

For individual developers and homelabbers, the same principle applies at smaller scale. A local coding agent can create more simultaneous worktrees, containers, and CI runs than a modest server expects. Put ceilings on agent concurrency, disk consumption, and build time. Keep reusable dependency caches, but isolate untrusted execution. Back up the authoritative repository rather than assuming every agent workspace is durable. The goal is not maximum patch output; it is reliable improvement per unit of compute and attention.

IT leaders should also resist copying Anthropic's headline metric. Thirty thousand merges per day is evidence of a unique workload, not a universal productivity target. A company can increase merge volume while adding maintenance cost, security exposure, and low-value churn. Establish a value model before scaling agents: what business outcome does a class of changes improve, what failure rate is acceptable, and which human remains accountable?

What to Watch Next

The most likely near-term outcome is not a mass migration away from Git. It is a wave of server-side acceleration around Git: smarter object services, better partial-clone behavior, standardized repository query APIs, virtual filesystems, remote execution, semantic merge tooling, and CI systems designed for continuous streams of small machine-generated changes. Git can remain the user-facing compatibility layer even as servers stop behaving like ordinary Git clients internally.

Watch whether GitHub, GitLab, and cloud CI providers expose more repository intelligence through efficient, portable APIs. Also watch how merge queues evolve. Systems may group compatible changes, validate them against predicted dependency boundaries, and rely more heavily on post-merge detection. Finally, expect provenance and agent identity to become first-class source-control concepts rather than metadata buried in commit messages.

Scion matters because it makes the AI productivity debate concrete. The limiting factor is no longer just whether a model can write code. It is whether the rest of the engineering system can safely absorb machine-scale output. Organizations that benefit most from coding agents will not be those that generate the most patches. They will be the ones that redesign feedback loops, policy, testing, and infrastructure so that useful changes can move quickly without turning velocity into chaos.

Source: Anthropic, “Redesigning source control at Anthropic,” published October 13, 2026. The post was among the top Hacker News discussions on October 14, with more than 700 points at the time of selection.

Related Posts

When Hackers Defrost the Food Supply: The Hidden Risk in Smart Refrigeration

A cyberattack on European supermarket refrigeration shows how connected operational technology can turn a routine IT breach into food loss and physical disruption.

Oct 13, 2026• 9 min read

The Zod 4.6.6 Scare: A Practical npm Supply-Chain Response

A suspicious Zod commit triggered malware fears without proof of a poisoned npm release. Here is how teams should investigate, contain, and improve dependency security.

Oct 12, 2026• 10 min read

Talorys Turns Cloudflare’s Free Tier Into a Personal AI Agent

Talorys runs a private personal AI assistant on Cloudflare Workers, Durable Objects, and Workers AI. Here is what its architecture gets right—and its limits.

Oct 11, 2026• 9 min read