Permissions
Workflow and job permissions, trust boundaries, and review gates.
Reliability review · One bounded workflow
One workflow. A visible reliability trail.
A manual review loop for technical founders who need one coding-agent GitHub Actions workflow to stay least-privileged, cost-bounded, and review-gated as it changes.
Enrollment is paused. Live checkout is disabled, so no new checkout can be started.
Review trailState, not theater
- 01Proposed
- 02Awaiting intake
- 03Under review
- 04Delivered
The review surface
Small enough to inspect. Specific enough to act on.
Secret handling
Exposure risks and safer patterns—without asking for secrets or tokens.
Cost controls
Model, budget, and run-level controls that keep inference spend bounded.
Recent reliability
Up to 20 recent runs in the baseline, using customer-authorized evidence.
Zero-credential boundary
No repository credentials. No persistent write access.
- We do not run, rerun, cancel, or modify your workflows.
- We do not push, merge, administer settings, or rotate secrets.
- Recommendations and patches are advisory and customer-applied.
- Private code, raw logs, and customer artifacts stay out of this app and out of AI providers.
No manufactured urgency
First, inspect the exact boundary.
One plan and a visible set of exclusions. Enrollment remains closed while customer-support and billing operations are finalized.
Read the full scope