
The First Real Delegation: An Agent, a Worktree, and a Judge With No Key
A real agent can work in a clean worktree without a signing key. See the delegation boundary that yields a candidate, never a self-issued PASS.
7 articles

A real agent can work in a clean worktree without a signing key. See the delegation boundary that yields a candidate, never a self-issued PASS.

If your agent can author its own success, your checks are decoration. Learn the structural split that keeps a harness from grading itself.

A session report describes a run. Re-run the command against the artifact on disk before you let that description decide anything.

A valid credential is not proof of what it was about. Learn how six false PASS paths exposed one weak observation boundary.

Mutation testing exposed 59 refusal paths no test executed. Learn how to measure the safety net instead of trusting a green suite.

A citation can be fabricated from memory. Fetch and record the source bytes before you let a design claim borrow their authority.

Better models don’t remove the need to bound an agent’s authority: they increase it. The case for treating AI as delegated labour that needs an accountability apparatus outside itself.