Who runs the agent
Workspace scopes billing and repos. The bot is the service account on your timeline. Runtime and model pick the sandbox and weights for each run.
Trylle pairs models, bots, and workflow automations so you move faster without giving up ownership. Signals stay tied to the branch; runs stay attributable; credits stay beside the pull.
You detect breaking changes in a pull request and label it accordingly.
Resolve the PR number from /workspace/CONTEXT.json at .trigger.event.data.target.number.
try pr diff <number> --json — get the changed files and hunks.try issue label <number> --add breaking-change (the issue-labels endpoint covers PRs as well).try pr comment <number> --body "<summary>" with a 1–3 bullet summary of the specific breaks (file + symbol + what changed).internal/ or _internal/) do not count as breaking.this might break X) — if you cannot point to the line, do not flag it.Workspace scopes billing and repos. The bot is the service account on your timeline. Runtime and model pick the sandbox and weights for each run.
Repositories and triggers decide when a run starts. Permissions trim the toolkit—inherits from the bot or tighten per automation.
Frequency
Time - UTC
Optional cron beside event triggers—hourly checks, weekly sweeps—without wiring a second scheduler outside the repo.
Agents enhance Trylle—appearing in timeline comments, automations, and Settings. No extra "AI app" required.
7f3c9a218m agoL42Potential secret in build context — Dockerfile promotes a bearer token via ENV; prefer BuildKit secrets (RUN --mount=type=secret) or CI-injected ephemeral creds before this lands on default.
- ENV DEPLOY_TOKEN="gh…" +# prefer: RUN --mount=type=secret…
Kick off service accounts on `pr.opened`, `ci.failed`, or a `@bot` mention to surface secrets drift, flaky touchpoints, or policy gaps—where maintainers already ship.
Assist, CI, and policy cues stay in one strip—reviewers skim signals before they decide, instead of bouncing through extra panels.
Confidence, scope locks, and check status stay in the review footer so reviewers skim signals before they decide—not after three extra tabs.
| Member | Role | Actions |
|---|---|---|
SA sasha-ortizOwner Maintainers — default branch protections on | Admin | |
DE delivery-ci-botBot Service identity • restricted to merge queue writes | Write | |
EX external-contributorInvite revoked No longer meets workspace rules for this repo | — |
Automations inherit organization and repository grants. Bots cannot wander into projects you never connected or approved.
Summarizes each new PR in one comment.
PR Review, CI Failure Fixer, Issue Triage, Release Notes Drafter, Dependency Updater—install one beside your repo and it runs on real events, with permissions you control.
Bots (service accounts), automation templates that call models, and assist features in review. They share repo scope, permissions, and a credit ledger—not a separate AI product.
Migrate a repo from GitHub or push a new one, invite reviewers, and keep diffs, issues, and automation on the same timeline as the code.