Who should own the keys when writing code through an agent?
The amount and speed of code generated by the agent make manual review a bottleneck; the team needs to use tools as a substitute; the agent is only responsible for writing code without deployment permissions, deployment is controlled by pipelines; all data read by the agent is considered untrusted, the pipeline must ensure security through hash verification and short-term identity, and continuously monitor permission changes.

