From a plain GitHub issue to a reviewed, secure and traceable pull request: one label opens an isolated workspace where agents and humans take turns on the work. Episode one: the problem, and the big picture of the solution.