Issues

• Reconcile all 70 protocol topics and historical technique applicability

  sodejm/copilot-operation-plugin-for-security#215 · Filter by author sodejm opened on Oct 5, 2026

• Establish Kubernetes context and runtime destination allowlists

  sodejm/copilot-operation-plugin-for-security#214 · Filter by author sodejm opened on Oct 5, 2026

• Bound messaging recipients, destinations, and retention

  sodejm/copilot-operation-plugin-for-security#213 · Filter by author sodejm opened on Oct 5, 2026

• Add disposable-network acceptance harness for active discovery

  sodejm/copilot-operation-plugin-for-security#212 · Filter by author sodejm opened on Oct 5, 2026

• Document engagement-workbench installation and supported hosts

  sodejm/copilot-operation-plugin-for-security#211 · Filter by author sodejm opened on Oct 5, 2026

• Reconcile public capability counts with the enforced catalog

  sodejm/copilot-operation-plugin-for-security#210 · Filter by author sodejm opened on Oct 5, 2026

• Record licensing decisions and resolve provenance guidance mappings

  sodejm/copilot-operation-plugin-for-security#209 · Filter by author sodejm opened on Oct 5, 2026

• Complete legacy Attack Path report completion and output-race tests

  sodejm/copilot-operation-plugin-for-security#206 · Filter by author sodejm opened on Oct 5, 2026

• Test deterministic CVE descriptor rename and symlink races

  sodejm/copilot-operation-plugin-for-security#205 · Filter by author sodejm opened on Oct 5, 2026

• Add incident-response verification receipts and retention/emergency guidance

  sodejm/copilot-operation-plugin-for-security#203 · Filter by author sodejm opened on Oct 5, 2026

• Complete threat-intelligence provenance, historical replay, and edge tests

  sodejm/copilot-operation-plugin-for-security#202 · Filter by author sodejm opened on Oct 5, 2026

• Supply three complete Microsoft 365 evidence-correlation fixtures

  sodejm/copilot-operation-plugin-for-security#201 · Filter by author sodejm opened on Oct 5, 2026

• Test expired connector credentials through refresh and failure

  sodejm/copilot-operation-plugin-for-security#200 · Filter by author sodejm opened on Oct 5, 2026

• Prove Attack Path ingestion and graph-search bounds

  sodejm/copilot-operation-plugin-for-security#199 · Filter by author sodejm opened on Oct 5, 2026
  2

• Complete telemetry proof duplicate/delay handling and source guidance

  sodejm/copilot-operation-plugin-for-security#198 · Filter by author sodejm opened on Oct 5, 2026

• Treat stale Entra exports as unknown and document evidence requirements

  sodejm/copilot-operation-plugin-for-security#197 · Filter by author sodejm opened on Oct 5, 2026

• Complete privilege-change review records and impact/confidence fields

  sodejm/copilot-operation-plugin-for-security#196 · Filter by author sodejm opened on Oct 5, 2026

• Document exposure-triage privacy and input permissions

  sodejm/copilot-operation-plugin-for-security#195 · Filter by author sodejm opened on Oct 5, 2026

• Complete detection-quality edge-case acceptance coverage

  sodejm/copilot-operation-plugin-for-security#194 · Filter by author sodejm opened on Oct 5, 2026

• Test SOC intake rejection of missing required object IDs

  sodejm/copilot-operation-plugin-for-security#193 · Filter by author sodejm opened on Oct 5, 2026

• Resolve specialist handoffs to actual skills and registered capabilities

  sodejm/copilot-operation-plugin-for-security#192 · Filter by author sodejm opened on Oct 5, 2026

• Verify laboratory observations and require executable-adapter gates

  sodejm/copilot-operation-plugin-for-security#190 · Filter by author sodejm opened on Oct 5, 2026

• Persist cleanup recovery journals and test restart/failure boundaries

  sodejm/copilot-operation-plugin-for-security#189 · Filter by author sodejm opened on Oct 5, 2026

• Complete scoped credential resolution and execution-evidence lifecycle

  sodejm/copilot-operation-plugin-for-security#188 · Filter by author sodejm opened on Oct 5, 2026

• Verify adapter executables and bound partial-result/output handling

  sodejm/copilot-operation-plugin-for-security#187 · Filter by author sodejm opened on Oct 5, 2026