Give each agent the access its task requires, instead of your personal credentials. Scope repository access and read or write permissions for each session.
Choose which repositories agents can access and whether they can read or write.
Run agent code in a separate cloud machine, away from developer laptops and other sessions.
Ellipsis revokes the GitHub credentials it creates for a session when its sandbox is torn down.
Saved tasks with triggers
Run and continue tasks
Repos, tools, and compute
Respond to mentions
Credentials for agents
Signed session events
Frontier and open models
Transcripts and cost
SOC 2 and audit trail
Spend caps per session