You let the agent merge its own PR. CI was green. That's the problem.

When a coding agent has self-merge rights, green CI becomes a trap: green means the assertions still hold, not that the change is correct. The cheap fix is to keep the merge intent as a separate, human-gated decision.