Dependable GitHub access for AI agents: plain git over SSH as the default path, plus scoped API use for the actions git cannot perform (PR review, comment, label, merge). Covers per-repo author identity, branch policy, commit hygiene, token handling, and the failure modes that silently return wrong answers.