GitHub tokens for agent fleets — safe automation without paste-a-PAT
Most agent demos treat GitHub as “paste a PAT in the env and hope.” That works until the token shows up in a transcript, the rate limit collides with the work you are doing by hand, or the bot opens a PR and GitHub refuses to let it approve its own change. I use two identities on purpose: you for creating the PR, a short-lived App token for approve/merge after the gates. Agents call a broker. They do not each own a secret. ...