Push and pull
Also called Fetch
Push sends your commits to the remote. Pull fetches the remote's commits and brings them into your branch. Fetch only downloads, and changes none of your work. Nothing travels until you do one of these.
A push is where a local mistake becomes everyone's, so it deserves more care than anything else an agent runs in a normal day. You can't quietly take back what others have already pulled. Decide in advance whether your agent may push at all.
Say it to your agent
“Push this branch to origin and open a draft pull request. Don't push to main, and don't use any form of force. If the push is refused, stop and tell me what it said.”