Agents

Read-only adversarial code-review agent. Reads diffs, grep'd context, files findings. Cannot exec, cannot reach network.

DevOps runbook execution agent. bash exec + scoped writes + outbound HTTP, gated by per-command user approval and container isolation.

Reference template demonstrating safe agent configuration: minimal capabilities, explicit role boundaries, security policy floor, and strict isolation. Use as the starting point for any new agent definition.