Gave the Soren assistant read-only, hourly-refreshed access to seven repositories across GitHub and GitLab, with every push provably refused.

Soren is the single assistant behind Terrell Technology, and until this week it could not read a line of code from any project. This change gives it eyes without hands: one script clones an approved list of repositories onto the server using path-scoped tokens that can only read, disables the push URL on every clone, and proves the boundary by attempting a push and confirming the refusal. A systemd timer fetches hourly. GitLab-first projects (Soren itself, the HR platform, the innovation league, this record) and GitHub team projects (Coordi, Apothik, the consultancy site) are both covered, so the assistant sees one view across two platforms. The eighth repository waits on an organization owner’s token approval.