Agent merged a broken pull request
Auto-merge with no human gate let the agent merge a PR that looked green but was not safe.
What happens
A PR loop is allowed to merge on green checks. A flaky or incomplete check passes, and the agent merges a change that breaks production.
Why it happens
No human approval gate before the highest-risk, least-reversible action: the merge.
The loop engineering fix
Require human approval before merge, deploy, delete, purchase, or external communication.
Treat “merge” as out of bounds for the agent — drive the PR to mergeable, then stop.
Do not rely on a single green signal; confirm the right checks actually ran.