Agentship
Security and deployment for governed software agents.
Agentship separates model reasoning from authority, configures access through typed connections and rules, keeps workflow state in PostgreSQL, and runs repository work in isolated runners. Customer policy applies before any external action.
- Models can propose and explain; deterministic project policy and authorized people control external actions.
- Managed, outbound-only private-runner, and fully self-hosted deployment modes keep repository work within the boundary a customer chooses.
- Runner jobs are signed, scoped, leased for bounded periods, and executed in isolated workspaces.
- Secrets remain references, optional customer database access is read-only and bounded, and existing GitHub branch protection remains authoritative.
Frequently asked questions
Can an AI model authorize a deployment?
No. Models can propose and explain, but deterministic project policy and authorized people control merge, deployment, communication, and rollback.
Do operators need to prompt the agent?
No prompt engineering is required. Work begins from configured events. When judgment is required, Agentship presents an auditable decision with a small set of policy-safe choices.
Where does repository work run?
Repository work runs in an isolated hosted runner, an outbound-only private runner in your network, or a fully self-hosted environment, depending on the deployment mode you choose.
Does Agentship put secrets in prompts or logs?
No. Secrets are stored as references and are excluded from prompts, events, logs, evidence, fixtures, screenshots, and commits.
Can Agentship write to a customer database?
No. Customer database access is optional and read-only. It must be allowlisted, query-bounded, timeout-bounded, row-limited, and audited.
Does Agentship bypass GitHub branch protection?
No. Existing GitHub branch protection remains authoritative, and Agentship does not bypass it.
What happens in shadow mode?
Agentship can investigate, reproduce a bug, prepare a local patch, and run approved tests, but it creates no replies, branches, pull requests, deployments, rollbacks, or other external changes.