Security policies

Organization admins open Organization → Settings → Security to review and change organization-wide safeguards.

Policy	What it requires
Require Replicas account	Slack and Linear users must belong to the Replicas organization before they can start work.
Require code host connected	Dashboard, Slack, and Linear users must connect a personal GitHub or GitLab account.
Require PR user attribution	Commits, pushes, and pull or merge requests use the triggering user’s code-host identity. This also enables and locks the two requirements above.
Block agent PR/MR merges	Agents cannot merge pull or merge requests or push directly to protected default branches.

See PR attribution and PR merge blocking for identity resolution, automation behavior, and blocked commands. The same tab manages the organization’s static egress IP.