CategorysafetyManual1.9EvidencereportedAttributed toPaul Klay
ProblemAn agent with repository access will merge or deploy something at the first ambiguous moment.
TechniqueStanding rule in the description: it does not commit, push, merge or deploy, ever. It gathers context, stages the prompt, hands the job to the build system, verifies, and reports with evidence.
Why it worksMerges and deploys are the irreversible actions in a development workflow, so they are exactly where the boundary belongs.
When to useEvery Bot with repository or infrastructure access.