Guardrails for Coding Agents on GitHub
A coding agent that opens pull requests needs the same controls as a new colleague with commit rights, and a few more. A plan in every PR, a read-only token, a human approval gate, allowlisted MCP tools and hooks that say no, all with GitHub's own settings.