Pi Agent is restrcted from the ngit key which is Amber signing only. Sll ngit actions taken in the project page are requests sent to Amber. This means Pi agent has local git but not ngit actions in the app. That keeps you in the loop and manually approving. On the project page there is: ngit command run which allows you to run any ngit command there as well.