# Let coding agents review PRs without giving them unrestricted merge access

DevFeed: [Let coding agents review PRs without giving them unrestricted merge access](<https://devfeed.tech/articles/let-coding-agents-review-prs-without-giving-them-unrestricted-merge-access-27008.md>)

Original publisher: [Read original article](<https://workos.com/blog/ai-coding-agent-github-merge-policies>)

Author: WorkOS

Published: 2026-09-15T15:29:00Z

Content type: tutorial

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>)

Tags: [ai-code-review](<https://devfeed.tech/tags/ai-code-review.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [code-review](<https://devfeed.tech/tags/code-review.md>), [coding-agents](<https://devfeed.tech/tags/coding-agents.md>), [github](<https://devfeed.tech/tags/github.md>), [reviews](<https://devfeed.tech/tags/reviews.md>)

## AI overview

This guide explains how to let coding agents review GitHub pull requests without granting unrestricted merge access. It recommends separate review and merge credentials, explicit merge assignments governed by WorkOS Airlock, required checks and reviews, and reapproval when the reviewed commit changes.

## Source excerpt

Set GitHub permissions for AI code review, govern merges with Airlock, and prevent agents from merging code that changed after approval.