AI agents can merge code to main unattended but can't send an email: a paradox of safety boundaries

themaxthule · reddit · 2026-08-01

The author shares a thought-provoking engineering practice: his AI coding agents can merge code to main branch unattended, but their permissions are so restricted they can't even send an email. He admits merging unreviewed code is more dangerous than sending an email, yet maintains this seemingly contradictory permission setup.

During an audit, he discovered his monitoring tool had blind spots: tagging rules based on branch prefixes (like claude/ or codex/) missed some agent operations because agents run under a normal account. The fix was an allowlist file, but the directory containing it was gitignored due to a private key, so the fix itself couldn't be version-controlled.

He poses an open question: what would have to be true for you to let one of your workflows write more autonomously than it does today?

Original post →

More from coding & agent

coding & agent channel →