In other words: the security boundaries of coding agents are very porous and not where you expect. Handle with extreme care until they have a proper security model.

Little reminder that a got forge doesn't and shouldn't need much. Sprinkle gitolite if you need to manage rights, maybe gitweb and then you're all set.

Wondering about the landscape of email encryption? This gives a good historical tour.