Every bot that reads your pull requests is executing code it did not write. A field guide to sandboxing, secret isolation, and least privilege for AI and CI pipelines.
