I just tell it to open a PR when it's done. I check the diff, and I give it feedback.
I run it containerized with --dangerously-skip-permissions and let it run wild.