GitHub

Issues, comments, commits, pull requests, reviews and gists — in your account, under your name.

mainnettestnet

Skill:

You install the OutLayer app on the repositories you choose; that is the outer fence. Your policy narrows it: which actions, branches and paths, how many writes a day, and whether it may ever merge.

The owner’s policy

Stored as GITHUB_POLICY, checked inside the enclave before any request leaves. nothing is allowed yet — the agent can only ask for the connection’s status

What may it do?

actionsActionsa set of choices: Each is one operation of the connector. The agent can run only what is ticked; a new operation added later is NOT included until you tick it. Empty: Nothing ticked: the agent cannot read or write anything.

Where?

reposRepositoriesa list: owner/name, or owner/* for every repository of an account. This narrows what you already chose on GitHub when installing the app; it cannot add a repository the app was not installed on. Empty: None: nothing that names a repository will run. Write "any" for every repository the app reaches.
branchesBranches it may write toa list: Where files may be written and pull requests opened from. A pattern such as agent/* never reaches a repository’s default branch — to allow writing to main, name it exactly. Empty: None: no file is written and no pull request opened. agent/* is the usual choice.
pathsPaths it may writea list: Patterns for the files it may create or change, e.g. docs/*. A * matches anything, slashes included. The .github/ directory is never written, whatever is here. Empty: Any path on the branches above — except .github/, which is never written.

How much?

max_writes_per_dayWrites a daya number, writes, all kinds together: Every issue, comment, commit, review and gist counts as one. Counted per calling agent, in UTC days. A write GitHub refused does not count. Empty: Not set: nothing is written at all. Reading is not limited by this.

The three things that are off unless you say so

allow_mergeMerge pull requestson or off: A merge puts the agent’s work into a branch nobody re-read. GitHub would let it; only this switch stops it. Empty: Off: the agent opens pull requests and you merge them.
allow_approveApprove pull requests in your nameon or off: An approval under your name can satisfy a branch protection rule. Without this a review can still comment or request changes. Empty: Off: a review comments or requests changes, and never approves.
allow_public_gistsPublic gistson or off: A public gist is readable by anyone and indexed by search engines, and cannot be made secret again. Empty: Off: every gist the agent creates is secret.

How are its words told from yours?

markerLine added to what it poststext: Everything the agent posts appears under YOUR name. This line is added to each issue, comment and review so a reader can tell it was not you. Empty: The default line: “— posted by an AI agent via OutLayer”.

Operations

Every call names one in operation; the other fields are the parameters listed under it.

Reading the deployed version…