{
  "id": 19964889,
  "title": "GitHub Next's Ace runs agents with your privileges: 7 facts from its trust model, and 6 checks before you share a channel",
  "url": "https://urgent.news/2026/11/14/github-nexts-ace-runs-agents-with-your-privileges-7-facts-from-its",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-14T10:35:13.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/piekwerk/github-nexts-ace-runs-agents-with-your-privileges-7-facts-from-its-trust-model-and-6-checks-53hh"
  },
  "original_language": "en",
  "account": "Ace is an open-source collaborative coding environment created by GitHub Next. It allows people and agents to work together in channels that run on individual machines. The trust model of Ace is straightforward: the host process runs on your machine, using Bun 1.4 or later, or as a Mac app for Apple Silicon devices running macOS 15 or later. Channels are stored under $ACE_HOME on the machine and default to ~/.local/state/ace. Each channel is a chat with an agent, plus lanes for isolated work.\n\nTo use Ace, you need Tailscale running and an Anthropic or OpenAI key in the Settings → Providers section. Ace agents run with your user privileges, meaning they can execute any shell command and read, change, or delete files beyond the project directory. There is no sandbox between the agent and your user account, and channels are not security sandboxes. A channel is more like granting a teammate an SSH session on your machine than sharing a document.\n\nAce's trust model is built around the tailnet, which is the sole authority for team membership and collaboration access. There are no separate accounts, invitations, or team access controls within Ace. Adding someone means adding them to the tailnet in the Tailscale admin console. Your GitHub login is linked to Ace, but it sits on top of the tailnet access control, not instead of it. Two default-off capabilities allow other people to spend your privileges: Agent access (if teammates can ask the agent to run commands) and Desktop tools (if agents can operate the Mac's apps).",
  "summary": "GitHub Next released Ace this week, an open-source collaborative coding environment where people and agents work together in channels that run on your own machines. It is MIT-licensed, it has shipped 98 releases since the repository appeared on October 2, and the README opens with a warning box instead of a feature list. That warning is the most honest paragraph I have read in an agent tool this…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}