Does my GitHub token go into the agent's sandbox?

No. Private repositories are cloned through AOZUMI's read-only proxy, which uses the AOZUMI Agents GitHub App's read access. The sandbox gets access to that one repository only, and it cannot push.

Can the agent push to my main branch?

No. Pushing from the sandbox is refused. Open pull request pushes the agent's changes to a new room/… branch and opens a draft pull request for you to review.

How long does an agent keep access to a private repository?

Until it has gone 30 days without using it, and 90 days at most. Access also ends when the agent is deleted, the GitHub App is removed from the repository, or you lose access to it on GitHub. AOZUMI rechecks your access every hour.

Repositories and pull requests

Cloud agents read your repository and hand changes back as a draft pull request. No GitHub credential ever enters the sandbox.

Install the GitHub App

Private repositories and pull requests need the AOZUMI Agents GitHub App installed on the repository. When it is missing, Hachi offers Install AOZUMI Agents or Open GitHub settings at the point where it is needed.

This is a different app from the AOZUMI GitHub App that Cloud uses to deploy; see Deploy from GitHub.

How agents get your code

A new cloud thread, Teleport to Cloud and cloud standby all copy your project into the agent:

Public repositories are cloned from github.com.
Private repositories are cloned through AOZUMI's read-only proxy, using the AOZUMI Agents app's read access. The sandbox gets access to that one repository only. Later fetches work; pushes through the proxy are refused.

Each thread works on its own room/<name> branch in its own folder.

Open a pull request

Choose Open pull requestOn a cloud thread in Hachi. You need write access to the repository on GitHub.
Check the previewHachi shows what will be pushed before anything is sent.
Acknowledge workflows that would runIf the repository's GitHub workflows would run the pushed code with secrets, Hachi says so, and you must agree before it pushes.
Review the draftAOZUMI reads the changes out of the sandbox, pushes them with the AOZUMI Agents app to a room/… branch, and opens a draft pull request.

A push can carry up to 50 MB, with no file over 10 MB.

When a pull request is refused

The refusal says what to do. The common ones:

“The agent hasn't changed anything yet.”: There is nothing new to push.
“Push its base branch first.”: The work starts from a commit that exists only on your Mac. Push that branch to GitHub, then try again.
“Someone else pushed to this branch.”: The room/… branch changed on GitHub. Look at the pull request before you push again.
“Install AOZUMI Agents on …”: Select Install AOZUMI Agents. If it is installed but cannot see the repository, select Open GitHub settings and add it.
“You need write access …”: Ask a repository admin for write access on GitHub.
“This change is over 50 MB”: Split the work, or leave large generated files out. Single files can be up to 10 MB.

Questions

Does my GitHub token go into the agent's sandbox?: No. Private repositories are cloned through AOZUMI's read-only proxy, which uses the AOZUMI Agents GitHub App's read access. The sandbox gets access to that one repository only, and it cannot push.
Can the agent push to my main branch?: No. Pushing from the sandbox is refused. Open pull request pushes the agent's changes to a new room/… branch and opens a draft pull request for you to review.
How long does an agent keep access to a private repository?: Until it has gone 30 days without using it, and 90 days at most. Access also ends when the agent is deleted, the GitHub App is removed from the repository, or you lose access to it on GitHub. AOZUMI rechecks your access every hour.

Checked against the product on 1 November 2026.