chore: configure Copilot - #568

Bugbot: review complete

Current status: No active findings on 74bdb19.

Pull request · Verified commit · Workflow run

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.37%. Comparing base (5b0dd52) to head (74bdb19).

@@            Coverage Diff             @@
##           master     #568      +/-   ##
==========================================
- Coverage   93.38%   93.37%   -0.01%     
==========================================
  Files         897      897              
  Lines       27930    27930              
  Branches     8126     8126              
==========================================
- Hits        26082    26081       -1     
  Misses        733      733              
- Partials     1115     1116       +1     

Real #556 dogfooding completed the reviewed batch Apply and recovered the same prepared commits after superseding older installer PRs. This PR remains unmerged and blocked: #570 reproduces that the source workflow validator rejects the setup-generated {group, labels} runner route, including with current develop. Published master additionally predates the credential-health routing exception. Checks have not been weakened or bypassed.

The exact generated route passed in GitHub for platform: provisioning run, runner group vypdev, runner ubuntu-runner-2. Configuration and Codex runner authentication also passed.

The before/after comparison found all six organization/repository Variable and Secret metadata inventories unchanged. Both installation manifests, complete commit parents, branch heads and PR identities matched their private operation receipts. No permission-cleanup journal or operation lock remains. The local setup session is closed and the temporary PAT copy has been removed; the operator has been told it can be revoked.

A separate dogfood bug, #569, records normal automation triggered by the disposable permission-probe refs. Seven exact owned probe runs were cancelled after checking their actor, branch, commit and creation time. No unrelated run was cancelled. These findings must be handled through the normal issue/Action-managed branch flow; this installer branch contains only its reviewed setup assets.

Copilot approval · Human review needed

Status: Only open, non-draft, complete same-repository pull requests are eligible.
Completed: 0/1 observed checks succeeded; Bugbot complete.
Action required: Ask a human reviewer to decide.
Impact: No new approval is confirmed for this revision.
See checks

Superseded by the reviewed v3.6.0 dogfooding operation b0260a9e-59ee-40a1-b904-0a9214564a84. The original immutable head 74bdb19 and installation receipt were verified before closure. The branch and commit are retained; no merge or branch deletion is requested.