DL-588
Server-side forge tools replace every agent use of gh (comment lists, shallow open-PR lists with path and commit filters, changed-file lists without patches, per-check rows, CI job log tails, thread resolution, the PR body, and approval coverage), each routed through the repository owner’s installation, and gh leaves the agent image; the agent egress allowlist keeps api.github.com for Nix fetchers rather than for gh reads, superseding that clause of T9 of the agent VCS tools design
Status: Active (Matt, 2026-10-19)