AI agents run your projects — but the xDev platform itself only updates on a human’s signed order.
Updates are never automatic — an admin orders them from the production site.
A private key that exists only there signs “version N, machine M, 10 minutes”.
Signature, name, version and expiry checked — only then does it install.
AI agents can read the public key, but a public key only verifies — without the private key, nothing an agent forges can install anything, anywhere.