No GitHub token in the room
Arrows leave the sandbox only toward the model gateway and the package mirror. The arrow toward GitHub is marked no.
Security docket
The sandbox is the untrusted room.
The agent runs in a container created for one run and deleted at the end. It receives a copy of the repository, a terminal, and a file editor. It does not receive a GitHub token, a Kubernetes credential, or a route to the database.
One writer
The only arrow that reaches GitHub leaves from Anadolu. The git service is the only writer.
The record is a row
Every decision is a row: who reported, what the run cost, who approved, which pull request. Not a guess from the chat log.
Revert, then pause
If the same error returns after deploy, a revert pull request is opened and that category is paused. Anadolu does not roll production back itself.
Console sign-in follows the company's chat: Microsoft for Teams, Slack for Slack, email and a password for a Mattermost company. The session is ours. The thread never asks anyone to leave the chat to press Approve.