feat(apmx): run packaged contracts through native Copilot by danielmeppiel · Pull Request #2935 · microsoft/apm

Daniel Meppiel (danielmeppiel) · 2026-09-10T07:08:08Z

Summary

Add apmx as a bundled APM entrypoint for one packaged job, one explicit contract, one native harness, and an artifact with independent assessment evidence. Recovers the bounded execution engine from closed #2837 and completes package preparation and companion distribution without introducing a second engine.

apm experimental enable contracts
apmx --from PACKAGE_REF contracts/job.contract.md \
  --on copilot --model gpt-6-astra --allow-host-access

Changes

Add local and Git-package contract selection, private preparation of one supported direct skill, and offline planning.
Separate caller inputs and governance from package contracts/checkers; retain artifacts, original/prepared source identities, and assessment records under the caller's .apm/runs/.
Honor matching caller locks consistently across planning and execution; reject revision/hash drift without mutable-reference fallback.
Bundle apmx in Python and frozen distributions, including ownership-safe installers that preserve foreign executables.
Gate contracts behind apm experimental enable contracts; name per-run consent --allow-host-access to explain the permission rather than the internal execution profile.
Show an ASCII spinner during quiet terminal work, stream public Copilot messages/tool activity/errors above it, and provide five-second liveness updates for quiet piped subprocesses. Restore the terminal on completion or interruption; keep animation out of retained logs.
Preserve legacy apm run script behavior; add examples, consumer/reference documentation, and regression coverage.

Previously completed evidence

408 contract and installed-package lifecycle tests passed.
547 packaging/installer tests passed; 3 native Windows PowerShell cases skipped on macOS.
76 legacy compatibility tests passed.
Actual rebuilt macOS frozen apmx fetched the original Git-hosted example at f906a748e1f021218cfe19d43429bdc12046d8c7, ran native Copilot, and finished VERIFIED / exit 0 with 1/1 original checks passing.
Installed and frozen local-package runs also completed successfully, including private missing-skill preparation.

Host-access and progress follow-up evidence

557 contract, installed-package, install-TUI, onboarding-boundary and resolution tests passed on the updated branch after merging current main; 11 CLI/docs contract tests passed.
Real PTY tests demonstrate public streamed text, tool activity and stderr before subprocess exit, an active spinner, terminal restoration on success/Ctrl+C, and clean retained transcripts. The Copilot process is a deterministic fixture, not new live inference.
A quiet real subprocess produced its first plain liveness update within six seconds.
Full local lint and architecture gates passed. GitHub CI status is not asserted here.

Boundaries and trade-offs

Native execution is Copilot/POSIX and advisory, not sandboxed. --allow-host-access permits Copilot and checks to use host files, network and available login details for this run; it does not override policy. The earlier --allow-advisory spelling belonged to this unmerged experimental feature and is replaced, not retained as an alias. Internal outcomes and record fields are unchanged.

Check success is not factual correctness, signed provenance, or merge authorization. No full graph/factory scheduler, retries/resume, or delivery automation is added. Global Copilot configuration remains unchanged; native proof used an invocation-local COPILOT_HOME. Windows native runtime/signing was not exercised locally.

This is a new PR; #2837 remains closed. No release or version bump is included.

How to try

Follow examples/contracts/packaged-job/README.md from an independent caller directory, then inspect the reported artifact and record.json. Use --plan for offline inspection; missing unmaterialized sources/imports refuse without fetching. During a run, observe Copilot's public activity above the spinner; NO_COLOR or APM_PROGRESS=never disables animation.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

Recover the bounded contract engine from closed #2837 and add the bundled apmx entrypoint, private package preparation, locked source replay, independent assessment, companion distribution, and documented lifecycle coverage. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot

Copilot review overview

🟡 Changes recommended

Critical security findings and multiple moderate correctness and distribution issues remain unresolved.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review tier: Lite
Findings: 2 · 3

New issues introduced by this change (5)

Severity	Finding
	`src/apm_cli/contracts/process.py` — This bypasses the repository's trusted Git boundary: `shutil.which("git")` can select a…
	`src/apm_cli/contracts/records.py` — `package_ref` is copied verbatim into the durable run record. Git/HTTPS references can contain…
	`install.ps1` — This probe only protects the `apmx` launcher, but `pip install --user apm-cli` also installs the…
	`install.sh` — The pip fallback installs the package that provides both `apm` and `apmx`, but this ownership probe…
	`src/apm_cli/contracts/engine.py` — Exceptions from `logger.close()` or the preceding `store.update()` escape before…

What changed in this PR

Adds the bundled apmx entrypoint for packaged native Copilot contract execution, including preparation, planning, evidence capture, distribution, and documentation.

Changes:

Adds package selection, validation, lock handling, and contract execution.
Records artifacts, assessments, source identities, and run state.
Bundles apmx with frozen builds and ownership-safe installers.
Adds examples, documentation, signing, and regression coverage.

Unresolved findings include critical Git trust-boundary and credential-retention issues, moderate signing, installer, execution, finalization, and lock-validation issues, plus two nits.

File	Reviewed change
`tests/unit/test_windows_signing_contract.py`	Windows signing contract coverage
`tests/unit/test_windows_installer_launchers.py`	Windows launcher coverage
`tests/unit/test_unix_installer_checksums.py`	Unix archive integrity coverage
`tests/unit/test_pip_companion_ownership.py`	Pip launcher ownership coverage
`tests/unit/test_enterprise_bootstrap_installers.py`	Bootstrap installer coverage
`tests/unit/test_build_spec.py`	Frozen build layout coverage
`tests/unit/install/test_unix_install_ownership.py`	Unix installer ownership coverage
`tests/unit/contracts/test_terminal_pty.py`	Terminal PTY behavior
`tests/unit/contracts/test_pty_lifecycle.py`	PTY lifecycle behavior
`tests/unit/contracts/test_example_checks.py`	Example checker behavior
`tests/unit/contracts/test_dispatch.py`	Contract dispatch behavior
`tests/unit/contracts/test_contract_policy.py`	Contract policy checks
`tests/unit/contracts/test_cli_lifecycle.py`	CLI lifecycle behavior
`tests/unit/contracts/test_architecture.py`	Architecture enforcement
`tests/unit/contracts/test_apmx_optimized.py`	Optimized `apmx` launcher behavior
`tests/unit/contracts/test_apmx_acquisition_validation.py`	Acquisition validation
`src/apm_cli/utils/yaml_io.py`	Bounded YAML and frontmatter handling
`src/apm_cli/utils/console.py`	Contract console output helpers
`src/apm_cli/utils/atomic_io.py`	Durable atomic writes; wording nit remains
`src/apm_cli/runtime/registry.py`	Runtime registration
`src/apm_cli/runtime/copilot_runtime.py`	Native Copilot adapter
`src/apm_cli/runtime/base.py`	Runtime interface
`src/apm_cli/policy/discovery.py`	Policy discovery
`src/apm_cli/policy/contract_prerequisite.py`	Contract prerequisites
`src/apm_cli/models/validation.py`	Package validation models
`src/apm_cli/install/contract_source_validation.py`	Contract source validation
`src/apm_cli/deps/github_downloader.py`	GitHub package acquisition
`src/apm_cli/deps/artifactory_orchestrator.py`	Artifactory source orchestration
`src/apm_cli/contracts/records.py`	Durable records; critical secret-retention finding remains
`src/apm_cli/contracts/process.py`	Process supervision; critical executable-boundary finding remains
`src/apm_cli/contracts/models.py`	Contract data models
`src/apm_cli/contracts/events.py`	Contract lifecycle events
`src/apm_cli/contracts/engine.py`	Contract lifecycle; moderate environment, finalization, and lock-validation findings remain
`src/apm_cli/contracts/__init__.py`	Contract package initialization
`src/apm_cli/commands/run.py`	Legacy run behavior
`src/apm_cli/commands/plan.py`	Contract planning
`src/apm_cli/commands/contracts.py`	Contract command dispatch
`src/apm_cli/cli.py`	CLI integration
`src/apm_cli/apmx.py`	Bundled `apmx` entrypoint
`scripts/windows/sign-binary.ps1`	Windows binary signing
`scripts/windows/build-binary.ps1`	Windows binary packaging
`scripts/build-binary.sh`	Unix binary packaging
`scripts/architecture_linter/groups/contracts_tests.py`	Contract test architecture group
`scripts/architecture_linter/checks/contract_leaf_runtime.py`	Contract runtime boundary checks
`pyproject.toml`	Adds the `apmx` script
`packages/apm-guide/.apm/skills/apm-usage/package-authoring.md`	Contract authoring guidance
`packages/apm-guide/.apm/skills/apm-usage/commands.md`	Command usage guidance
`install.sh`	Unix installation and ownership checks; moderate finding remains
`examples/contracts/reuse-contract/handoff.contract.md`	Reusable contract example
`examples/contracts/reuse-contract/apm.yml`	Reusable example configuration
`examples/contracts/README.md`	Contract examples guide
`examples/contracts/packaged-job/skills/handoff-style/SKILL.md`	Packaged skill example
`examples/contracts/packaged-job/skills/handoff-style/apm.yml`	Packaged skill configuration
`examples/contracts/packaged-job/README.md`	Packaged execution walkthrough
`examples/contracts/packaged-job/notes.md`	Packaged fixture notes
`examples/contracts/packaged-job/contracts/handoff.contract.md`	Packaged contract
`examples/contracts/packaged-job/checks/check_handoff.py`	Packaged checker
`examples/contracts/packaged-job/caller/notes.md`	Caller input fixture
`examples/contracts/packaged-job/apm.yml`	Packaged job configuration
`examples/contracts/handoff-style/SKILL.md`	Handoff skill example
`examples/contracts/handoff-style/apm.yml`	Handoff skill configuration
`examples/contracts/first-contract/notes.md`	First contract fixture notes
`examples/contracts/first-contract/handoff.contract.md`	First contract example
`examples/contracts/first-contract/checks/check_handoff.py`	First contract checker
`examples/contracts/first-contract/apm.yml`	First contract configuration
`docs/src/content/docs/reference/cli/run.md`	Run command documentation
`docs/src/content/docs/reference/cli/plan.md`	Plan command documentation
`docs/src/content/docs/reference/cli/apmx.md`	`apmx` documentation; CLI index nit remains
`docs/src/content/docs/consumer/run-contracts.md`	Consumer contract walkthrough
`docs/astro.config.mjs`	Documentation navigation
`build/apm.spec`	Frozen `apm` and `apmx` packaging
`.gitignore`	Contract run-state exclusions
`.github/workflows/build-release.yml`	Release build and signing workflow; moderate finding remains
`.apm/docs-index.yml`	Documentation indexing
`.apm/architecture/owners/contracts-tooling.json`	Contract tooling ownership

Suppressed comments (5)

.github/workflows/build-release.yml:142

This signing invocation is unreachable when the certificate secret is configured: the step's preceding condition reads env.WINDOWS_CERT_PFX, but that variable is only declared inside the step's env block and is therefore empty when if is evaluated. Since the build step also does not receive the certificate, Windows release artifacts can never be Authenticode-signed through this workflow. Let the script run for every Windows build (it already exits successfully when no certificate is present), or move the secret to a scope available to the condition.

        run: |
          uv run pwsh scripts/windows/sign-binary.ps1

docs/src/content/docs/reference/cli/apmx.md:9

The new apmx page is not represented in the authoritative docs/src/content/docs/reference/index.md CLI table: its run row still lists only run. Although the autogenerated sidebar exposes the page, users following the reference landing page cannot discover the bundled entrypoint from the canonical command overview; add it there as part of this CLI documentation change.

Bundled with APM, `apmx` runs one explicit contract on one harness, captures one
output, runs independent checks, and retains a record.

src/apm_cli/contracts/engine.py:81

Frozen apmx runs pass PyInstaller's rewritten LD_LIBRARY_PATH/DYLD_* variables to every checker because this ProcessRequest leaves env as None. A checker such as the documented python3 command can then fail to load against bundled libraries on affected hosts; use the existing external_process_env() helper here, as the Copilot adapter already does.
src/apm_cli/contracts/engine.py:149
Package preparation validates the caller's direct lock only before invoke_contract; this re-plan reuses the already-prepared ContractSource and never re-reads that caller lock. plan_contract hashes the prepared package lock, not the caller lock that selected the package, so a caller lock/declared-reference change between preparation and execution can be missed while the run proceeds on stale source identity. Carry the caller pin identity into the plan and compare it here, or reacquire/revalidate the package source before launching.
src/apm_cli/utils/atomic_io.py:94
The final guarantee is inaccurate for durable=True: a directory-sync failure is raised after os.replace, so the destination has already changed. Qualify this statement to failures before replacement; otherwise callers are given an incorrect atomicity guarantee for the new durable path.

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Repair legacy downloader and Windows fixture setup, register the shipped CLI and architecture surfaces, and bind caller-lock replay to req-rs-015 without weakening the conformance gate. Address Copilot and panel findings by preserving both pip launchers, redacting retained references, using trusted system Git, and repairing transcript finalization failures. Regression mutations prove the changed guards. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Daniel Meppiel (danielmeppiel) · 2026-09-10T13:23:22Z

APM Review Panel: `ship_with_followups`

One packaged job, one native engine. CI recovery is complete without expanding the product.

cc Sergio Sisternes (@sergio-sisternes-epam) -- the bounded advisory pass is complete.

The supply-chain ownership gap and finalization failure were concrete, bounded fixes and are folded. The driver also verified that credentialed URLs are accepted by the dependency parser, contradicting the auth review's dismissal: retained references now use the existing redactor, and local Git uses canonical executable/environment helpers. Real req-rs-015 replay evidence fixes the spec citation without a waiver. Wrapper extraction, tiny manifest parsing costs, and CLI wording polish do not justify another development theme.

Dissent. The auth no-regression conclusion was overruled by direct parser and frozen-environment evidence. The proposed post-preparation caller-lock transaction is not a demonstrated supported CLI regression: each invocation freshly reads and prepares its lock, and no persisted plan/resume contract exists. It is deferred, not added as a new guarantee.

Aligned with: existing lock identity, ownership-safe installation, honest retained evidence, and KISS delivery.

Panel summary

Persona	B	R	N	Takeaway
python-architect	0	1	1	Sound single-owner design with bounded leaf-runtime guardrails; a small wrapper-duplication nit is not a shipping fault.
cli-logging-expert	0	1	0	Finalization OSError can be mislabeled as package preparation failure.
devx-ux-expert	0	2	1	Documented bounded CLI; harness-choice hint and companion discoverability could improve.
supply-chain-security-expert	0	1	0	Pip ownership guard protects apmx but omits the sibling apm launcher.
oss-growth-hacker	0	0	0	Scoped example docs are honest about limits; no conversion or release work needed.
auth-expert	0	0	0	Reviewer found no auth regression and considered local_git remote-free.
doc-writer	0	0	0	No additional high-confidence documentation ship regressions beyond the known index omission.
test-coverage-expert	2	0	0	Raised post-prepare lock drift and credential retention coverage concerns.
performance-expert	0	0	1	No high-confidence performance regression in one bounded packaged job.

B/R/N are original finding strengths, not shipping gates. Concrete items below are already folded; speculative/cosmetic items stay out of this recovery.

Recommendation

All 21 latest-head checks are successful, neutral or intentionally skipped at 126d83488c9b4a0a79959ef4b753416d7ae037e6. Two bounded recovery pushes converged. No additional product or architecture work is recommended. No merge or auto-merge was performed or authorized.

Per-persona findings and disposition

python-architect

Downloaded-package validation wrappers are duplicated. Both call the canonical validate_apm_package owner; suggested extraction is minor DRY cleanup.
The new contracts leaf-runtime static guard and tests are well targeted. Positive finding: concrete bypass shapes are guarded.

cli-logging-expert

Handle logger.close and record-update failures through the finalization owner. These fail after native execution; the existing generic OSError message names the wrong phase.

devx-ux-expert

Make --on enumerate copilot or improve the invalid-harness hint. Current generic unknown-runtime message omits the supported choice.
Link apmx from the reference index. Standalone companion is otherwise absent from the command landing table.
Replace raw OSError text in commands/contracts.py with stable wording. Small diagnostic polish.

supply-chain-security-expert

Check ownership of both console scripts before pip fallback. pip installs apm and apmx into the selected user scheme; either foreign launcher must be preserved.

oss-growth-hacker

No additional finding.

auth-expert

No additional finding.

doc-writer

No additional finding.

test-coverage-expert

No caller lock recheck between prepared plan and engine execution. Reviewer proposes mutating the caller lock after internal preparation; driver must distinguish supported CLI plan/run reuse from an internal-object TOCTOU scenario.
Persisted package_ref needs credential redaction coverage. Record construction copies raw reference; established redactor should be reused.

performance-expert

A small installed skill manifest is parsed twice. Sub-millisecond redundant computation; optional cleanup, not shipping risk.

Folded in this run

Frozen system Git needs trusted executable lookup and external-process library-path cleanup. -- 3b41322daf.
The dependency parser accepts credentialed URLs; raw retained references could expose those values. -- 3b41322daf.
pip installs both launchers; the Windows fallback must protect foreign apm as well as apmx. -- 3b41322daf.
pip installs both launchers; the Unix fallback must protect foreign apm as well as apmx. -- 3b41322daf.
Transcript close and record-phase update failures must repair the incomplete finalization record. -- 3b41322daf.
Repair downloader/Windows fixtures, rule inventory, and CLI reference parity including apmx. -- 3b41322daf.
Bind package consumer lock replay to existing req-rs-015 and regenerate conformance artifacts without a waiver. -- 3b41322daf.
Correct the apm ownership target to shipped cli:main and derive test entrypoint metadata from pyproject.toml. -- 126d83488c.

Copilot signals reviewed

src/apm_cli/contracts/process.py:234 -- LEGIT, fixed in 3b41322daf; answered in-thread and resolved.
src/apm_cli/contracts/records.py:108 -- LEGIT, fixed in 3b41322daf; answered in-thread and resolved.
install.ps1:336 -- LEGIT, fixed in 3b41322daf; answered in-thread and resolved.
install.sh:1334 -- LEGIT, fixed in 3b41322daf; answered in-thread and resolved.
src/apm_cli/contracts/engine.py:265 -- LEGIT, fixed in 3b41322daf; answered in-thread and resolved.

Deferred (out-of-scope follow-ups)

Extract downloader validation wrappers -- Cosmetic call-site DRY cleanup, not a demonstrated regression; both already route through the validation owner.
Cache the second small skill-manifest parse -- Microoptimization outside actual CI recovery; one bounded skill, no measured delivery regression.
Change harness choices and generic filesystem wording -- Diagnostic polish is outside the explicit CI/high-confidence-regression filter; no new CLI behavior is needed to ship.
Add a post-prepare caller-lock transaction guarantee -- Speculative internal-object/concurrent-edit scenario, not supported persisted-plan reuse; would add a new transaction contract.

No backlog issues were created for these suggestions.

Regression-trap evidence (mutation-break gate)

Removing the new behavioral guards caused 9 failures; restoring them passed.
Disabling the registered contract-owner guard caused 14 bypass-rejection failures; restored.
Final-head functional evidence: 64 passed, 3 skipped, covering all 13 detected owners, the real PowerShell stable-path consumer, source-lock replay, CLI reference parity, and every recovery guard. The broader first recovery suite passed 900 tests (19 skipped, 2 subtests passed).
Final consistency review caught and corrected an incorrect apm ownership target before completion: the fixture now reads actual pyproject.toml metadata; using :cli instead of shipped :main causes its owned-launcher test to fail.
Spec suite: 204 passed, 2 skipped. Actual docs build: 127 pages / 1,056 links, no broken relative links; all 35 CLI reference pages matched live commands.
Version-2 canonical-owner schema and semantic verifier passed for all 13 touched decisions, using executed exact-head test IDs.

Lint contract

Full ruff check/format, pylint R0801, auth/architecture boundaries, YAML I/O, portable paths and 2,100-line guards passed. Used the existing .venv without syncing dependencies or changing uv.lock; latest main was already integrated.

CI

All 21 latest-head checks observed SUCCESS/NEUTRAL/SKIPPED. Runs: https://github.com/microsoft/apm/actions/runs/34482816821; https://github.com/microsoft/apm/actions/runs/34482816847; https://github.com/microsoft/apm/actions/runs/34482816951; https://github.com/microsoft/apm/actions/runs/34482816955; https://github.com/microsoft/apm/actions/runs/34482816959; https://github.com/microsoft/apm/actions/runs/34482817047; https://github.com/microsoft/apm/actions/runs/34482817088. Full snapshot: latest-pr.json.

Mergeability status

PR	Head	Advisory	Iterations	Folds	Deferrals	Copilot rounds	CI	Mergeable	GitHub state	Note
#2935	`126d834`	ship_with_followups	1	8	4	2	green	MERGEABLE	BLOCKED	GitHub metadata reported verbatim; no merge action

The pip ownership fixture now reads actual pyproject console-script metadata, so it catches an incorrect ownership target instead of repeating that mistake. Preserve existing owned APM launchers while still refusing foreign replacements. The owned-launcher test fails with the incorrect mapping and passes with the shipped apm_cli.cli:main entrypoint. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Require 'apm experimental enable contracts' before local or packaged contract planning and execution, while leaving legacy script runs unchanged. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> # Conflicts: # .apm/architecture/owners/contracts-tooling.json # CONFORMANCE.md # src/apm_cli/models/validation.py

Daniel Meppiel (danielmeppiel) requested a review from Sergio Sisternes (sergio-sisternes-epam) as a code owner September 10, 2026 07:08

Copilot AI lite review requested due to automatic review settings September 10, 2026 07:08

Copilot started reviewing on behalf of Daniel Meppiel (danielmeppiel) September 10, 2026 07:08 View session

Copilot AI reviewed Sep 10, 2026

View reviewed changes

Comment thread src/apm_cli/contracts/process.py Outdated

Comment thread src/apm_cli/contracts/records.py Outdated

Comment thread install.ps1 Outdated

Comment thread install.sh Outdated

Comment thread src/apm_cli/contracts/engine.py Outdated

Daniel Meppiel (danielmeppiel) and others added 5 commits September 10, 2026 15:26

feat(apmx): gate contracts behind experimental opt-in

c7bc249

Require 'apm experimental enable contracts' before local or packaged contract planning and execution, while leaving legacy script runs unchanged. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix(contracts): tolerate portable stat timestamps

e8e0202

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

feat(contracts): clarify host access and animate live output

98f32f0

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge main into apmx feature

d90ba60

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> # Conflicts: # .apm/architecture/owners/contracts-tooling.json # CONFORMANCE.md # src/apm_cli/models/validation.py

Navigation Menu

Uh oh!

feat(apmx): run packaged contracts through native Copilot - #2935

feat(apmx): run packaged contracts through native Copilot#2935
Daniel Meppiel (danielmeppiel) wants to merge 7 commits into
mainfrom
danielmeppiel-apmx-entrypoint-plan

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Previously completed evidence

Host-access and progress follow-up evidence

Boundaries and trade-offs

How to try

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

APM Review Panel: ship_with_followups

Panel summary

Recommendation

Folded in this run

Copilot signals reviewed

Deferred (out-of-scope follow-ups)

Regression-trap evidence (mutation-break gate)

Lint contract

CI

Mergeability status

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 •

edited

Loading

Daniel Meppiel (danielmeppiel) commented Sep 10, 2026 •

edited

Loading

APM Review Panel: `ship_with_followups`