From bdcd6bca63b8b45463c987becb4ea2a3bec50c5b Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 15:06:17 +0000
Subject: [PATCH] docs: note that Autopilot commits are signed and verified

---
 autopilot.mdx | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/autopilot.mdx b/autopilot.mdx
index 4777d01640..2b25155929 100644
--- a/autopilot.mdx
+++ b/autopilot.mdx
@@ -64,6 +64,8 @@ Autopilot can also run when an event happens in a connected shared integration,
 
 Autopilot usually commits its changes to a new branch and opens a pull request. It never pushes directly to your deploy branch or to the repository's default branch.
 
+Autopilot creates its commits through the GitHub API, so GitHub signs them and shows them as **Verified**. Autopilot's commits work with branch protection rules that require signed commits.
+
 Pull requests target your deploy branch by default. If your team merges changes into a different branch than the one your site deploys from, tell Autopilot in a chat, and it targets that branch instead.
 
 ### Feature launches