It's absolutely ridiculous that in late 2026, in the age of agentic coding, my agents are still committing as me on GitHub. I'm not reviewing the majority of code by hand anymore. I'm defining the invariants and the outcomes. So why is it still using my username?

Not to put all the blame on GitHub, but they don't make it easy to give agents short-lived credentials of their own. So now my agents act as their own GitHub App, with one-hour tokens scoped to the repos they're working on, from a tiny broker that only our team can log into. Every token is logged against the agent session that asked for it. We run on it ourselves.

I've published it as a template at github.com/openprose/agen…: you make your own App and run your own broker. This is deliberately not a product. The whole point is to have fewer trusted parties involved, not more.

I hope this makes your October slightly less black.