1 min lesson
Expand access after evidence
Explain which review, defect and audit evidence should support any increase in agent access.
Step 1 of 2
Add autonomy after the pilot
Do not begin with automatic merge in a regulated repository. Track review results, escaped defects and audit coverage while people approve every change. Cursor's February 2026 Box case study reports more than 85% daily adoption, a 30 to 50% increase in roadmap throughput and a 75% rise in usage during a six-week mentorship program. Treat those as vendor-reported results, not a forecast for every team.
For a SOXSarbanes-Oxley Act. A US law that forces companies to keep auditable controls over any system that affects their financial reporting. Press Enter for the full definition. pilot, I would start with read-only external context, narrow command approval, hooks for secrets and protected paths, sandboxed local execution and dedicated cloud VMs. The agent can propose a change, but a person reviews it and a separate approver controls merge.