Small, sourced,
and approved.
An agent that can edit a public website is only as trustworthy as the limits it runs inside, so the limits are enforced in code rather than written into a prompt and hoped for. The model only ever edits content. Redirects, links, registry entries and restores are mechanical operations, and the live site re-checks that a draft changed exactly what it declared.
The drafting runner holds none of the keys it does not need and cannot reach the production database. The step that checks a draft has no secrets and no open internet. Only the step that opens the pull request can push, and it never runs model output. Approving a draft merges the exact version reviewed: if it changed after review by so much as a byte, the merge is refused.
And it is slow on purpose. A few changes a week, one change per page, then a month of measurement before that page is touched again. That pace is what makes a verdict mean something.
ENFORCED, NOT INTENDED
- Pace
- At most three page changes and two articles a week, and one new page a month. One change per page, then a 28-day cooldown — never while that page is still being measured.
- Size
- No change rewrites more than 35% of a section or 20% of a page. Small changes can be measured; a rewritten site cannot.
- Facts
- A new number or year must appear in the existing page or a source the research fetched. External links go only to those sources.
- Off limits
- Legal pages, the homepage, pricing, contact and the regulatory pages are never edited by the agent, and neither are the files that hold prices, credentials or the team.
- Approval
- Every content change starts as a suggestion and is approved by a named editor. Only mechanical changes such as a redirect can ever graduate further, after ten clean approvals.
- Money
- Paid APIs run under a monthly cap with a limit per provider. Ads are research only: nothing creates, changes or spends on an ad account.