- Agent may write tests/agent/** only. No playwright.config.ts, no .github/workflows.
- MCP is explore-only. The merge gate is npx playwright test.
- Every agent PR gets label ai-authored and a named reviewer.
- Reject status-only asserts. Same bar as testing AI generated code.
## Agent PR template
- Prompt / ticket:
- Files touched (must be tests/agent/**):
- MCP used? yes/no (session discarded: yes)
- Reviewer:
- Contract assert (business number, not HTTP 200):
# .github/CODEOWNERS
/tests/agent/ @qa-leads
/playwright.config.ts @qa-leads
/.github/workflows/ @qa-leads
If the team needs this as a factory with auditability, use the Enterprise page or AI quality engineering services. Check your current governance gaps with the free QA maturity assessment before scoping the rollout.