pay-as-you go on openrouter. use latest DeepSeek or Gemini.
I created my own minimalist/task based harness that checks out a jira issue, downloads attachments, runs sandbox docker containers with configurable gh/local repo as volume mounts depending on jira labels, can load agent instructions from local/remote depending on jira type (triage-bug, dev task, reproduce-bug, security) has scoped/temporary access to targets (e.g. dev k8s cluster, aws/gcp/azure account, ssh, splunk). dynamic secrets loaded from external secret management system/env vars. since a lot of the corp repos are littered with skills, rules and other crap that bloated the context, I also set enabled a way to ignore repo/org agent instructions.
I have 2 repos for storing my personal/corp agent instructions and I 2 separate harness configurations.