Notes from the mint.
Practical writing about the environments, controls, and evidence that make integration work safe to delegate.
Keep the settings shared by every Preview deployment in Vercel, then let Instaship add only the provider values created for one branch.
Read article →Policy belongs up front. Credentials should arrive on demand, inside a contract the agent cannot exceed.
Mocks lie: why integration branches need real providersShared staging and local mocks hide failures in scopes, signatures, callbacks, and provider policy.
Evidence-backed provisioning across providersAutomation is trustworthy when every ordered step carries a status, artifact, duration, and next action.
One-way ejection: custody made explicitCustomer ownership deserves a hard technical boundary, not a promise hidden in account copy.
Credits, limits, and the economics of delegationUsage-based capacity makes more sense than seats when humans, agents, and CI all create environments.