Decide per-repo how aggressively CARTIE may act. Default is T3 (draft PR + Slack) + 14-day shadow mode. Graduate out of shadow once you trust our judgment. See how CARTIE works with your team.
repo, user scopes. Token is encrypted server-side. Detect-only (T4) works without this.No policies yet.
Repos with no policy fall back to T3 + Shadow. You can lock that in explicitly or pick a different tier per repo.