Optio is a self-hosted, Kubernetes-native orchestration platform for AI coding agents (Claude Code, OpenAI Codex, GitHub Copilot, Gemini, Cursor, OpenCode). In production it runs three task tiers — repo tasks (issue/request → agent pod → PR), standalone jobs (parameterized agent runs without repo checkout), and persistent agents (long-lived, message-driven agents with turn-based execution) — plus an autonomous PR review loop. The core loop is driven by ~15 BullMQ workers (task, PR watcher, review, webhook, ticket sync, reconcile, workflow trigger) against a Postgres database, with Redis pub/sub powering a real-time event bus and WebSocket log/terminal/chat streaming to the Next.js dashboard and CLI. Agents execute in ephemeral pods built from per-language Docker images; a K8s-style reconciliation control plane (world snapshot + pure decision functions + CAS-gated executor) converges four run kinds and catches drift. The architecture is a pnpm/turbo monorepo: a Fastify 5 API with Drizzle ORM and Zod-validated OpenAPI schemas; a Next.js 15 admin dashboard (tasks, jobs, reviews, sessions, agents, cluster, analytics); a Commander-based CLI (login, task/repo/session/secret commands over REST + WebSocket); and a static docs site. Shared packages provide a clean AgentAdapter interface (`validateSecrets` → `buildContainerConfig` → `parseResult`), a Docker/Kubernetes container runtime abstraction, ticket provider adapters (GitHub, GitLab, Jira, Linear, Notion), and shared types/utilities (task state machines, repo URL parsing, SSRF guards, cost arithmetic). Workspace-scoped multi-tenancy with admin/member/viewer RBAC, AES-256-GCM secret encryption with AAD binding, WebSocket upgrade tokens, HMAC-signed internal calls, and a security-focused audit trail (optio_actions) are enforced throughout. Engineering strengths: the test suite is unusually thorough for a project this size — nearly every route, service, worker, and shared utility has a unit test, with per-file Postgres/Redis isolation for integration tests, real-server E2E tests using a deterministic fake container runtime (with mock directives like [[mock:pr]]), and Playwright smoke tests. The reconcile pattern, generic state machine utilities, and pure decision functions in `packages/shared/src/reconcile/` are the highest-craftsmanship code. Known debt: five near-duplicate NDJSON event parsers (one per agent, with drift risk), hardcoded model pricing tables in the Codex/Gemini adapters, scattered duplicated workspace-scoping checks, a 60+ file migration history with historical prefix collisions (now script-enforced), and raw SQL in the analytics service. The project moves fast (v0.1 → v0.4.1 within months, last commit 2026-08) and some surface area (OpenCode/OpenClaw adapters, skills marketplace) is explicitly experimental, but the core architecture is coherent and production-oriented.