AI agents can merge code to main unattended but can't send an email: a paradox of safety boundaries
themaxthule · reddit · 2026-08-01
The author shares a thought-provoking engineering practice: his AI coding agents can merge code to main branch unattended, but their permissions are so restricted they can't even send an email. He admits merging unreviewed code is more dangerous than sending an email, yet maintains this seemingly contradictory permission setup.
During an audit, he discovered his monitoring tool had blind spots: tagging rules based on branch prefixes (like claude/ or codex/) missed some agent operations because agents run under a normal account. The fix was an allowlist file, but the directory containing it was gitignored due to a private key, so the fix itself couldn't be version-controlled.
He poses an open question: what would have to be true for you to let one of your workflows write more autonomously than it does today?
More from coding & agent
- Benchmark Showdown: Google Opal Beats Devin in Full-Stack App Dev in 45 Seconds — SimplyAnnisa · 2026-08-01
- Kastor: Open-Source Terraform-Style Source-of-Truth Layer for AI Agents — ctjlewis · 2026-08-01
- ChainStrip: Hardening npm Supply Chain by Stripping Unused Dependencies — ctjlewis · 2026-08-01
- Agents Work Because Your Tasks Are Boring, Not Because of Your Skills — MarcJSchmidt · 2026-08-01
- UniFace: Open-Source Library Unifies Face Detection, Recognition, and Tracking — tom_doerr · 2026-08-01
- AI Agent Reliability Hinges on Clear Instructions and Tool Metadata — arpit_bhayani · 2026-08-01