Governed Agent Starterv0.1

00 — the outcome

Agents open the PRs. You still merge.

Comment @claude on a GitHub issue. A few minutes later there is a pull request with a plan, passing checks and screenshots, waiting for your review.

  • setup |←— 60 min —→|
  • API keys stored: 0
  • merges without you: 0
Get the starter kit See the agent's pull requests
claude[bot] opened #122 min ago

Add a FAQ section with three questions

  • Plan in the description done
  • Design check 0 problems
  • Screenshots, desktop and phone attached
  • Your review required

01 — how it works

From issue to reviewed change in four steps

  1. You write an issue

    Plain words, with @claude in it: "add a FAQ section".

  2. The agent works

    In GitHub Actions. It reads CLAUDE.md, DESIGN.md and its skill before it touches a file.

  3. It opens the PR

    With the plan, the design check result and before and after screenshots.

  4. You decide

    Review, ask for changes with another @claude, or merge. Merging publishes the site.

02 — guardrails

What the agent can't do

  • Use a stored API key

    GitHub's short-lived OIDC token is swapped for a 10-minute Claude token. No secret in the repo.

    0 keys

  • Run from anywhere else

    One federation rule: this repository, the main branch, comment and issue events only.

    1 rule

  • Spend without a ceiling

    A monthly spend limit on its own workspace, 40 turns and 20 minutes per run.

    US$20 cap

  • Rewrite its own rules

    Edits to .github/, .claude/ and CLAUDE.md are denied in its settings.

    denied

  • Merge its own work

    A ruleset on main requires a human review and a passing design check.

    next step

03 — faq

Cost, limits and how to stop it

  • What does it cost?

    A monthly spend limit of US$20 on its own workspace. Each run stops after 40 turns or 20 minutes.

  • What can't it do?

    It can't merge, approve or push to main. It can't change its own rules in .github/, .claude/ or CLAUDE.md.

  • How do I stop it?

    Cancel the run in the Actions tab. To stop every run, disable the workflow there. To revoke its access, remove the Claude GitHub App from the repository.

04 — try it

Comment one of these on an issue

@claude add a FAQ section with three questions a team lead would ask
@claude add a dark mode that follows the system setting
@claude make the guardrails section easier to scan on a phone

Maintainers and people on the allowlist start the agent. Anyone else's request waits for a maintainer to approve it. Use the kit in your own repository to try it yourself.