Skip to content
Agent Trust Cloud
ConsoleEngineering

Code Review Agent

ATC-AGT-0009140

RestrictedApproved

47

moderate risk

Identity

Who owns it, and what it is for

Declared purpose
Review pull requests for defects and policy violations, and comment on them.
Business owner
Anders Kohl · Platform Engineering
Technical owner
Anders Kohl · Platform Engineering
Provider and model
Anthropic · claude-sonnet-4-5
Framework
Custom
Environment
production
Data classes reached
Internal, Source code
Last activity
18 minutes ago

Risk

Why the score is 47

Every point is accounted for. Remove a factor and the score moves by exactly that much.

  • +14

    Data

    Reads proprietary source across every repository

  • +12

    Tool

    Shell execution requested and withdrawn after review

  • +9

    Privilege

    Merge rights removed; the agent still requests them

  • +6

    Behaviour

    Repeated refusals against the same withdrawn grant

  • +6

    Compliance

    Restriction in place pending a scope decision

  • 47Total

Access

What it may do, action by action

Permissions are held at the level of the action, so reading a record and changing its banking details are separate grants that can be decided separately.

  • read_repositoryGitHub
    L0 ReadGranted
  • comment_pull_requestGitHub
    L2 Execute, low riskGranted
  • merge_pull_requestGitHub
    L3 SensitiveWithheld
  • run_shellShell
    L4 CriticalWithheld

Dependencies

MCP servers it is bound to

  • GitHub MCP

    GitHub

    approved
    read_repositorycomment_pull_request

Execution identity

What it authenticates as

An agent does not reach anything by itself. It runs as a machine identity, and that identity is what actually holds the credential — so the agent's permissions are only ever a subset of what this can do.

Supply chain

Bill of materials

What this agent is assembled from. It is also the answer to the blast-radius question when one of these is compromised.

Model

claude-sonnet-4-5

Framework

Custom

Tools

Repository readerComment publisher

MCP servers

GitHub MCP

Databases

None

Packages

anthropichttpx

Runtime

Decisions taken on its behalf

Every governed action produces one of these, and each records the rule that decided it.

  • 15:44:02read_repositorygithub:platform
    Allowed

    rule: engineering.read.source

  • 15:44:31comment_pull_requestgithub:pr-882
    Allowed

    rule: engineering.write.comments

  • 15:45:10run_shellci-runner
    Denied

    rule: tool.level-4.prohibited

Back to the fleet · The modules behind this view