Your agent writes code.
Your infrastructure follows.

As your coding agent builds a feature, it identifies the infrastructure the code needs. Latifold creates or updates those resources in your cloud, then returns the configuration so the agent can connect and test the feature.

Your agent connects through MCP or API. Changes run within your permissions and policies, with approval when required. AWS, Azure and Google Cloud are supported; available resources and operations vary by provider.

Your agent writes the image upload code.

Image uploads need private storage.

  1. DeveloperFeature goal
  2. Coding agentCodex · Claude Code · Cursor
  3. LatifoldMCP / API
  4. Your cloudAWS · Azure · Google Cloud

01 / 09 · CodeCoding agent · Editing app code

You ask for image uploads. The coding agent adds an upload handler to your application.

await uploads.save(file);

Your agents propose.
Your rules decide.

Humans set accounts, permissions, budgets and approval rules. Latifold is designed to evaluate changes with deterministic policies before execution. An agent can propose a correction; it cannot override a denied policy.

Approval belongs to a plan
Tie approval to the exact plan, configuration and policy revision. Revalidate when the plan or relevant environment changes.
Cost estimates have limits
An estimated cost increase can trigger approval. Actual spending limits need separate runtime enforcement; an estimate is not a hard budget guarantee.
Record the actual outcome
Keep agent identity, human authorisation, provider results and verification together. Surface concurrent changes, partial failures and unresolved drift.

From request to recorded outcome

  1. Request

    Your coding agent asks for a cloud change.

  2. Inspect ownership

    Identify the resource owner, dependencies and current state.

  3. Plan

    Draft a versioned diff with cost impact and risk.

  4. Validate

    Evaluate deterministic policies against the proposed configuration.

  5. Approve when required

    An authorised person approves this precise plan and revision.

  6. Execute

    Use the cloud API or the resource owner's existing IaC workflow.

  7. Verify

    Check actual state and record partial failures or unresolved drift.

  8. Record

    Keep initiator, approval, provider results and verified outcomes together.

Policy outcomes: allow, warn, require approval or deny. Return the policy, affected resource and explanation. Security-critical missing data must not silently count as compliant.