> ## Documentation Index > Fetch the complete documentation index at: https://ona.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # How Ona Works > Understand how Ona combines environments, agents, and runners to deliver a complete development platform. Ona is the platform for running background agents at scale. It provides secure, isolated environments pre-configured with your code, tools, and dependencies, the same environments human developers use. Ona runs background agents that write code, fix bugs, run tests, and open pull requests autonomously, triggered by schedules, issues, errors, or messages from your team. ## Your code stays in your infrastructure Ona has a two-plane architecture: * **Management plane** (hosted by Ona): authentication, organization settings, guardrails, and coordination. This is the dashboard, CLI, and API. * **Runners** (your cloud or Ona Cloud): provision environments, access source code, inject secrets, and execute agents. The split is a security boundary. Source code, credentials, and build artifacts are handled by runners. They never reach the management plane. With a [runner in your VPC](/ona/runners/overview), everything stays in your network. With [Ona Cloud](/ona/runners/ona-cloud), Ona manages the runner infrastructure for you. High-level architecture For the full data flow, see the [architecture overview](/ona/understanding/architecture). ## Environments Every task gets its own environment: an isolated VM with dedicated compute, storage, and networking, provisioned from a [Dev Container](/ona/configuration/devcontainer/overview) configuration. Dependencies install, services start, and the workspace is ready. With [prebuilds](/ona/projects/prebuilds), this takes seconds. Environments are ephemeral. Create one from a branch, do the work, discard it. One environment per task means no file conflicts and straightforward rollback. ## Agents [Ona Agent](/ona/agents/overview) runs inside environments with the same tools a human developer uses. Give it a task (a bug to fix, a feature to build, a test to write) and it works autonomously: reading code, making changes, running tests, iterating on failures, and opening a pull request. Agents are guided by [AGENTS.md](/ona/agents-md) (your codebase conventions) and [skills](/ona/skills) (reusable prompts your team encodes). Multiple agents run in parallel across different environments and projects. ## Automations [Automations](/ona/automations/configure-automations) turn agents into background workers. Trigger them from Linear issues, Sentry errors, webhooks, or cron schedules. Each automation runs in its own environment with full access to your codebase and integrations. Examples: pick up the top Linear ticket every morning and open a draft PR. Triage new Sentry errors automatically. Scan for CVEs and submit dependency updates. See [templates](https://ona.com/templates) for ready-made workflows. ## Guardrails Agents operate under the same [guardrails](/ona/guardrails/overview) as human developers. Organization admins control what agents can and cannot do: * **[Command deny list](/ona/command-deny-list)**: block risky commands across the organization * **[Veto](/ona/guardrails/veto)**: kernel-level enforcement that blocks unauthorized executables, below the agent's reach * **[Audit logs](/ona/audit-logs/overview)**: track every action for compliance and incident response * **[SSO](/ona/sso/overview) and [OIDC](/ona/configuration/oidc)**: identity integration and short-lived cloud credentials ## Next steps * [Quickstart](/ona/quickstart): get your first environment running in 5 minutes * [Best practices](/ona/best-practices): prompting, planning, and workflows that work * [Core components](/ona/understanding/core-components): what each part of Ona does * [Architecture overview](/ona/understanding/architecture): how the management plane and runners interact in detail