PullPlane gives agents room to investigate and implement without giving them authority to merge into the repository's default branch.
Contain execution
Each run gets an isolated sandbox and works on the card's repository branch. The team can watch the terminal, files, diff, and preview without running agent-generated code on a teammate's machine or in production.
Review through the pull request
Coding runs can push the card branch and open a pull request. Repository checks, branch protection, and the forge's review state remain part of the normal delivery path, and merge is a separate human-approved action.
Add role gates where the risk warrants them
Project admins can require Reviewer, QA, and Security attestations for selected card priorities. Those merge-gate runs inspect the exact pull-request commit in read-only mode and surface pass, warning, or fail for the human decision.