How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Autonomous Agent Change Control Constraints
Agents can't bypass branch protection
Verify that autonomous agents cannot bypass branch protection, required reviews, required status checks, signed-commit requirements, or merge queues. Any attempt by an agent to change these settings raises a security alert.
OWASP AISVS v1.01, requirement AC.8.3
In plain English
Agents must not be able to get around branch protection, required reviews, status checks, signed commits or merge queues, and any attempt to change those settings should raise an alert.
What good looks like
- Agent identities have no bypass rights.
- Settings changes by agents trigger alerts.
- Rules apply to administrators too.
How teams usually do it
- Repository rulesets with no bypass for bot accounts, plus audit log alerts.
Evidence an auditor would accept
- Rulesets and alert rules.
Common mistakes
- Bot accounts added to the bypass list for convenience.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.