Permissions & Safety

The agent’s write access is bounded in three ways. Together they mean the agent can propose anything but decide nothing.

It acts as you

The agent authenticates with your personal access token and can never do more than you can — every permission check runs under your user. Revoking the token revokes the agent.

Its changes are marked

All changes carry an “via agent” marker in the audit trail.

It never saves on live, and never merges

The agent can co-edit the shared draft with you on any branch, including live — you see its changes on the canvas as it makes them. What it cannot do is persist: on live it cannot save, so when you co-edit there you save what you want to keep. On a working branch it commits its own work, and you promote it to live through the normal branch diff → human review → merge flow. It never saves on live and never merges — you decide what gets kept.