oz0 changes

Usage and flags for oz0 changes.

For: Operators and developers looking up a command.

An agent that declares changes: ends its session with a changeset instead of writing to its target: the diff of its work directory against the base it started from, stored by digest. A person approves it, or the agent's policy does, and then the function the agent names applies it, such as oz0_github.push_changes, which opens a draft pull request. The approval is bound to the patch's digest: a different patch is refused.

A changeset that touches a protected path or the plugin's own outcome files is refused, never offered. One that touches a plugin's tests or rules (its evals, its agents' outcome checks, its policy files, CODEOWNERS or CI workflows) waits, after its changes approval, for a second approval by another person who holds governance.write: no policy, key or agent gives it. Seeing a diff takes the content permission.

Usage

oz0 changes [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026