Evaluated whether GitHub CLI can mint an agent-safe token and mapped the necessary GitHub permissions and enforcement boundaries for opening pull requests while observing CI.
Lessons Learned: Pitfalls
Fine-grained token and GitHub App permissions do not divide pull-request creation from merge operations, and branch writes can naturally start CI or sometimes enable repository-dispatch integrations.
Lessons Learned: Improvements
A reusable infrastructure SOP on agent GitHub credentials could document the recommended GitHub App permissions, mandatory branch ruleset, and use of an operation-filtering broker when an absolute no-merge/no-dispatch guarantee is required.
