Evidence hold Security-review before pilot; use a test workspace, no production data, separate credentials, deployment approval, rollback, and audit trail.
Evidence hold
App-building and deployment capabilities are high power because they can create code and may reach hosting, secrets, databases, or deployment surfaces.
Decision depth: Preliminary monitored record. Not yet launch-audited for a rollout decision.
Evidence audit: automated extraction
Level 4: controls external systems or deployment
Highest-risk evidenced power: deployment access
least-privilege permissions, separate test credentials, deployment approval, audit logs, data-retention controls
security docs
native sandbox, permission system, audit logs, branch isolation, admin console, SSO
Task class: App builder and deployment agent
Environment: staging
Maximum access: deployment access
Reviewer: platform engineer and application owner
Success criteria: generated app deploys only to staging with rollback and no production data
Stop conditions: requires production secrets, database admin, or uncontrolled deploy permissions
Prohibited: production databases, unapproved deploy targets, persistent secrets in generated apps
Blockers: Record has not been launch-audited for rollout use.; reads repository is not explicitly evidenced in the current source set.
Unknowns: Deployment target and secret/database access must be validated per workspace.
Limitations: App-builder convenience can hide infrastructure and data-access risk.
Replit Agent: reads repository
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for reads repository; treat as an evidence gap.
Replit Agent: edits files
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for edits files; treat as an evidence gap.
Replit Agent: runs commands
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for runs commands; treat as an evidence gap.
Replit Agent: opens pull requests
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for opens pull requests; treat as an evidence gap.
Replit Agent: comments on issues or PRs
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for comments on issues or PRs; treat as an evidence gap.
Replit Agent: accesses secrets or environment variables
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for accesses secrets or environment variables; treat as an evidence gap.
Replit Agent: makes network/API calls
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for makes network/API calls; treat as an evidence gap.
Replit Agent: supports sandboxing
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports sandboxing; treat as an evidence gap.
Replit Agent: supports permission controls
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports permission controls; treat as an evidence gap.
Replit Agent: provides audit logging
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for provides audit logging; treat as an evidence gap.
Replit Agent: supports enterprise administration
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports enterprise administration; treat as an evidence gap.
Replit Agent: supports branch isolation
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: Replit official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports branch isolation; treat as an evidence gap.
Last successful source check: 2026-07-15T05:34:48.576Z
Generate a receipt that inherits this record depth, unsupported claims, inferred claims, source health, and expiry.
Check this agent for your environment