The agent does not hand itself the keys
An agent that works well moves fast. It writes, it fixes, it proposes. Then comes the moment to go live — to touch the real site, the one the world sees. There, a simple rule: the agent does not cross that door alone.
It cannot even forge its own key
The most striking part: when the agent tried to write the very guard that would let it publish, the tool refused. An agent that grants itself permission to publish is a safety that means nothing anymore. Even disguised as a button, the key stays forbidden to it. That is intended, and it is healthy.
The key stays a human code
To publish, you need a code only the owner knows. The agent prepares everything — the text, the checks, the review — then it asks for the code. Without the right code, the guard refuses. The code is never kept in the clear: only its fingerprint, a trace that cannot be reversed.
And the other way: no more chore
Since the agent must sometimes ask the human for a gesture, let it be easy. Each request becomes a button on a page. You click, the thing runs, the button turns green once done. No command to retype, nothing forgotten: you see at a glance what remains and what is done.
The right split
The agent keeps the speed: it does all the work. The human keeps control: the last door, the real going-live, is their hand and their code. Neither does the other's job. That is how you move fast without ever losing the house.