Locked steel hatch in a dark factory floor β€” the landing gate that will not lift without a stamp

The last click is still yours

Companion to GitHub tokens for agent fleets and the agent production system series. Words I use below Agent β€” a program that writes and lands code for you, in a chat session Pull request (PR) β€” a proposed change waiting for review; on GitHub it has its own page, with a button to accept it Merge β€” accepting that proposed change so it becomes part of the main project GitHub App β€” a robot you install on a GitHub project so it can click buttons as itself β€” not as you; it can approve, and it can merge; people treat this robot as the β€œreal” setup, and it is not β€” it is extra (this post does not tell you how to install one; if you later want that robot, read the token post) Lock β€” a program that says no when a rule is broken; the agent cannot talk it into a yes; I also call this the landing floor Stamp β€” a review that applies to one exact version of the code; β€œlooks good” in chat is not a stamp Automatic tests β€” checks that run by themselves when you propose a change; green means they passed Those seven words are the whole toolkit. Now the point. ...

August 21, 2026 Β· Dave Voyles
A long-lived access key left exposed on an open laptop in a dark ops room

Don't paste your GitHub key in chat

Companion to The last click is still yours and the agent production system series. Words I use below Agent β€” a program that writes code for you in a chat session Pull request (PR) β€” a proposed change waiting for review; on GitHub it has its own page, with a button to accept it Merge β€” accepting that proposed change so it becomes part of the main project Personal login β€” you, signed in as yourself; when you type commands, GitHub sees your name GitHub App β€” a robot you install on a GitHub project so it can click buttons as itself β€” not as you; it can approve, and it can merge Short-lived token β€” a temporary key the robot gets to prove it may click; it dies in about an hour, and after that it is junk PAT (personal access token) β€” a long-lived key tied to you; if it leaks into a chat log, it keeps working until someone turns it off Broker β€” a small program that hands out a short-lived token when the rules say yes; the agent asks, the broker decides, and the agent does not invent a key Automatic tests β€” programs that run by themselves when you propose a change; green means they passed Those nine words are the toolkit. Now the point. ...

August 18, 2026 Β· Dave Voyles