A seat gets hands through the repo's own Actions token: list/read/write files on branch time/card-N via the contents API, run shell on a checkout, open the PR. Same contract as the Cursor worker (PR body says Closes #N), so review, landing and next-card are unchanged. Workflow files are refused to the seat. Needs only VENICE_API_KEY; no Cursor key. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UpT7eWzeLhRwuYmsSQnbRb