Development record
Agents can work under a forge account of their own
Press Release
Agents can work under a forge account of their own, as an optional setup. Today an agent acts with the person's own forge login, so the forge cannot tell an agent's push, pull request or review from the person's, and the person cannot approve on the forge a pull request their agent opened under their name. With an account of its own, an agent pushes and opens pull requests as itself, and the person's approval is a forge review from a different account, which the merge gate already counts. The design is chosen from a primary-source review of current practice for machine identities on a forge, and works the same in a cloud session and on a local machine, whether the agent reaches its model through an API key or a subscription. It stays optional: a repository that does not set it up works as it does now.
Why This Matters
Why this matters to the user — replace before planning.
Mechanism
Prompted (the claim-recording gradient): why the authors expect this to work, as a falsifiable "we expect X because Y" — not the outcome restated. Replace this line with the claim, or with the exact token
None stated.alone on its line to record the claim as considered and declined.
Scope Conditions
Required (the claim-recording gradient): the population, platform, scale, or assumptions this claim holds under, one per top-level bullet —
abcd intent planstamps each with a persistent identity. Replace this line with those bullets, or with the exact tokenNone stated.alone on its line.
Acceptance Criteria
Required (the itd-1 discipline): add at least one Given-When-Then bullet describing the verifiable bar for "shipped" before this draft can be planned.
Open Questions
None recorded yet.
Audit Notes
Empty. Populated by intent-auditor when intent moves to shipped/.
Frontmatter
| id | itd-2610300955026531 |
|---|---|
| type | intent |
| lifecycle | drafts |
| severity | minor |
.abcd/development/intents/drafts/itd-2610300955026531-agents-can-work-under-a-forge-account-of.md
open on GitHub ↗ · commit history ↗
mentions3
- dcn-26103009551548512026-10-30 — Merge approval and pull-request check rulings. Human mode's merge approval is a rule agents keep, not a proof of who approved: it stops an agent merging by mistake, not one set on getting round it, abcd says so wherever it describes the mode, and no proof mechanism enters this release. The person approves in the terminal through an abcd command (abcd land --approve today, or a dedicated verb), so the current act stands; the dashboard or a web app is one more channel for the same approval (itd-2610300955049260), not a gap. Agents working under a forge account of their own is optional work, designed from current practice to run in the cloud and locally, through an API key or a subscription (itd-2610300955026531). Requiring a security key touch for an approval is later work (itd-2610300955031405). The three checks every pull request runs, the change labeller, the dependency review and the vulnerability scan, stay non-blocking, and a failure in any of them is fixed without being asked until it passes.
- itd-1Every Intent Has Acceptance Criteria; Every Audit Verifies Them
- itd-2610301850454860abcd records how each change landed