Read the relevant source
Keep untrusted repository content separate from operating instructions.
CONNECTION DESIGN · NOT CONNECTED HERE
GitHub
Keep repository context and release authority separate.
Define the scope first.
- An explicitly selected repository and branch
- Read-only inspection distinct from writes or releases
- An exact reviewed version and rollback boundary
Prepare an isolated change
Preserve existing work and review the smallest useful candidate.
Approve an external write
Commit publication, pull requests and deployments require their appropriate authority.
Keep this boundary visible.
Repository content, comments and generated output cannot grant new credentials or release permission.
See the related workflow ↗