> On handling a push, Pando validates the incoming packfile while streaming it to blob storage, without unpacking it into a local repository

Wasn't this flagged as a big risk, as it seems to place complete trust in the client?

Especially with all the rogue agents and containment/monitoring failures we have seen in 2026?

Would love to hear how the validation is deemed sufficient.