# First agent authorization pilot team brief

This manual planning template does not grant preview access or authorize an operation. Gated's controlled private preview covers one uniquely named GitHub branch at an exact existing commit in a selected non-critical repository.

**Keep private:** use an approved team location. Never include tokens, passkey material, private source code, or customer data. Redact repository identifiers, people, and evidence links before external sharing.

## What we want to learn

- One question this pilot should answer: __________
- Current workflow and source of confusion: __________
- Observation period: __________
- Criteria for continuing, fixing, or stopping: __________

## People and target

- Pilot owner: __________
- Repository owner: __________
- Human reviewer with required passkey: __________
- Person responsible for provider verification: __________
- Selected repository and why consequences are non-critical: __________
- Existing commit verification approach: __________
- Unique branch naming approach: __________
- Repository automation and downstream effects reviewed: __________

## Boundary we will evaluate

- Explicit route from agent request to Gated execution: __________
- Applicable policy requirement: __________
- Independent provider credentials or tools available: __________
- Open credential questions and owners: __________
- Evidence location: __________
- Owner for timeouts or mismatches: __________
- Owner for any later cleanup through existing GitHub processes: __________

Policy, human passkey approval, explicit execution, and provider readback are separate. Approval alone does not create a branch. Skills do not automatically intercept other tools; direct credentials can bypass Gated. Runtime safe-mode rehearsals do not prove live writes.

## Scope and final decision

- Evaluation evidence: live provider operation / safe-mode rehearsal / both, separately recorded
- Known limitations to include in our conclusion: __________
- Review meeting date and owner: __________
- Next decision: continue same scope / fix a named issue / stop

Branch updates, deletion, merges, force pushes, and deployments are outside the supported operation. Joining the preview update list does not grant immediate access. This pilot does not establish security effectiveness or production readiness.