Trust layer for human and agent code changes