Ask for evidence with the result.
A confident completion message is not enough. Review the actual change, relevant check results, and the application behavior. Ask the agent to state what it could not verify.
Keep business and technical judgment present.
The project owner checks usefulness and business rules. The technical reviewer checks implementation quality and release readiness. Agents can assist those checks, but the working arrangement still needs accountable people.
Match permissions to the work.
Use an appropriate development environment, grant the access needed for the task, and configure release procedures. An unattended agent run does not itself establish round-the-clock incident support.
Understand where information goes.
Review the hosted board, agent runtime, connected tools, and model provider together. Self-hosting one component does not mean that every part of the workflow stays on your infrastructure.