What changed
Anthropic released `ant` CLI 1.30.0 with `ant apply`, which plans and creates or updates agents, environments, skills, memory stores and deployments from repository files. A committed `claude-lock.json` binds later local or CI runs to the same resources instead of silently creating replacements.
Why it matters
Agent definitions and deployment state can now pass through ordinary code review, change history and repeatable CI, reducing configuration drift and accidental duplicate infrastructure.
What to do
Start with a non-production agent, review the printed plan, commit the lockfile, give CI a least-privilege identity, test concurrent and failed applies, and document how to revert both configuration and remote resources.
Caveat
The release and workflow are documented by Anthropic, not independently evaluated. A lockfile reduces identity drift but does not by itself prove safe permissions, atomic rollback or compatibility across every resource change.