Verdict: Conditional pilot · Last editorial review: not reviewed
Evidence: Inspect diffs, run checks, and catch problems before you merge
Limitations: IDE/team configuration changes risk.
Required controls: least-privilege permissions, isolated branch, protected branches, mandatory human review, sandbox, audit logs
Verdict: Conditional pilot · Last editorial review: not reviewed
Evidence: Hooks allow you to execute custom shell commands at key points during agent execution, enabling you to add validation, logging, security scanning, or workflow automation.
Limitations: GitHub permissions determine actual blast radius.
Required controls: least-privilege permissions, protected branches, mandatory human review, audit logs