chore: [DO NOT MERGE] evaluate Copilot SDK main by vs-code-engineering[bot] · Pull Request #342463 · microsoft/vscode

vs-code-engineering · 2026-10-19T01:15:38Z

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This rolling draft must never be merged. Published dependency pins remain unchanged; ordinary PR CI does not validate the private overlay. This is not release or adoption approval.

Linux evaluation — 2026-10-24, run 40084486494

Assessment: validated-adaptations; disposition: human-review-required. The mandatory fresh first complete gate passed source-publication policy, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. Duration: 20m59s, 10:16:42–10:37:41 UTC. Pending tests are not counted as passes. No failure groups or suspected flakes were observed, so failure-specific baseline controls and targeted repetition were unnecessary. No new compatibility edits or fixture updates were required; existing compatibility work and functional assertions are preserved.

Integrated the exact frozen VS Code baseline b3ce41974e82428b77417f6654976737e4d0b2a7 without conflicts. The validated candidate is committed as one merge with exactly the trusted original PR head and frozen baseline as parents; signed publication is requested through the trusted merge publisher, not an ordinary branch push. Independent captures before and after committing match gate tree 7324f104792a36ebe47c475445bb8f6d8a5ff323. The worktree is clean. All four root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline, the driver-written candidate identity is unchanged, and the private SDK/runtime overlay was neither edited nor replaced.

Detailed provenance, logs, and the tree-bound investigation are retained only in private evaluation evidence. No private source, prompt bodies, binaries, packages, or logs were added to the public diff. Next action: trusted signed publication of the validated baseline merge, followed by human review of this Linux-only assessment. Keep this PR draft and never merge it; do not dispatch product validation, package publication, or release adoption. Earlier evaluation history below is preserved.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 43.8 AIC · ⌖ 19.7 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE - Linux upstream-main source evaluation only. This rolling PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval; ordinary PR CI does not validate this overlay.

Linux evaluation - 2026-10-24, run 40081917264

Assessment: validated-adaptations; disposition: human-review-required. The mandatory fresh first complete gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. Execution took 21m54s, from 09:37:20 to 09:59:14 UTC. No failure groups or suspected flakes were observed during this invocation. No new compatibility changes or fixture updates were needed; existing functional assertions and prior compatibility work were preserved. Pending tests are not counted as passes. With no observed failing scenario, failure-specific published-baseline controls and targeted repetitions were unnecessary.

Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 is already an ancestor of evaluation head 6b131da31e189a74f92710b2dec10306c3fd1c09; no new merge, source commit, or branch publication is necessary. Final source tree 45ed35651b4bb746a09a6649a4cedefec0c924d5 matches the gate and independent post-validation capture. Candidate provenance matches trusted setup and the reference checkout. The worktree is clean, the driver-written candidate manifest is unchanged, and all four root/remote published dependency manifests and lockfiles remain byte-identical to the frozen baseline, with trusted digests verified. The private SDK/runtime overlay was neither edited nor replaced.

Exact provenance, validation logs, and tree-bound investigation remain in private evaluation evidence; no private SDK/runtime source, prompt text, packages, binaries, or logs are added to the public diff. Next action: human review of this Linux-only source assessment. Keep this PR draft and never merge it; do not request product validation, package publication, or release adoption from this result. Earlier evaluation history below is preserved.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 51.4 AIC · ⌖ 17.5 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE - Linux upstream-main source evaluation only. This rolling PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval; ordinary PR CI does not validate this overlay.

Linux evaluation - 2026-10-24, run 40079560640

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first complete gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. Execution took 18m42s, from 09:00:32 to 09:19:14 UTC. No failure groups or suspected flakes were observed, so no new compatibility edits, fixture updates, failure-specific baseline controls, or targeted repetitions were needed. Existing functional assertions and prior compatibility work were preserved; pending tests are not counted as passes.

Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 is already an ancestor of evaluation head ea8df40b1bcfb1a5b18094a274175dccd46b1df5; no new merge, source commit, or branch publication is necessary. Final source tree 37599b6a2f15e95aeab22c4e7a222b3fbb79c3a1 matches the gate and independent post-validation captures. Candidate provenance matches trusted setup and the reference checkout. The worktree is clean, the driver-written candidate manifest is unchanged, and all four root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline.

Private validation logs and exact provenance remain in this evaluation's retained evidence; no private SDK/runtime source, prompt text, packages, binaries, or logs are added to the public diff. Next action: human review of this Linux-only source assessment. Keep this PR draft and never merge it; do not request product validation, package publication, or release adoption from this result. Earlier evaluation history below is preserved.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 53.7 AIC · ⌖ 17.3 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE - Linux upstream-main source evaluation only. This rolling PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval. Published dependency pins remain unchanged; ordinary PR CI does not validate the overlay.

Linux evaluation - 2026-10-24, run 40074687254

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first complete gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. Execution took 22m52s, from 07:46:03 to 08:08:55 UTC. No failure groups or suspected flakes were observed, and no new compatibility changes or fixture updates were required. Failure-specific baseline controls and unchanged-input repetitions were therefore unnecessary. Existing functional assertions and prior compatibility work were preserved.

Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 is already an ancestor of evaluation head a7f6ce3a3359ecb8f6b00e0d551862a99b102dfd; no new merge, source commit, or branch publication is needed. Final source tree 58ee55e37c41341544010789079334b27bc2ef5d matches the gate and independent post-validation capture. Candidate provenance matches trusted setup and the reference checkout. The worktree is clean, the driver-written candidate manifest is unchanged, and all four root/remote published dependency manifests and lockfiles remain byte-identical to the trusted baseline. The isolated SDK/runtime overlay was not edited or replaced. No private source, binaries, packages, unpublished prompt bodies, or logs were added to the public diff.

Remaining requirement and exact next action: human review of this never-merge draft and its tree-bound private evaluation evidence in run 40074687254. No observed Linux integration blocker remains. Cross-platform packaging and signed-release readiness are not established. No branch push, CI retry, product build, package publication, or ready promotion is requested. Prior evaluation history below is retained and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 50 AIC · ⌖ 19.8 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE - Linux upstream-main source evaluation only. This PR must remain draft and must never be merged. The private-overlay gate is not adoption or release approval. Published dependency pins are unchanged; ordinary PR CI does not validate this candidate.

Linux evaluation - 2026-10-24, run 40067155515

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first gate passed source publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. The complete gate took 18m21s, from 05:50:44 to 06:09:05 UTC. No failure groups or suspected flakes were observed, and no new compatibility changes or fixture updates were needed. Failure-specific baseline controls and repetitions were therefore unnecessary; existing functional assertions and prior compatibility work were preserved.

Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 is already an ancestor of evaluation head 532681383afd186f4feb2ef173edf1a7af2f6fac; no new merge, source commit, or branch publication is needed. Final tree 01486507fdb7a114b2012acfa809f43a68d8340f matches the gate and post-validation capture. Candidate provenance matches trusted setup. The worktree is clean, the driver-written candidate manifest is unchanged, and all four root/remote published manifests and lockfiles are byte-identical to the frozen baseline. The isolated SDK/runtime overlay was not replaced or modified. No private source, binaries, packages, unpublished prompt bodies, or logs were added to the public diff.

Remaining requirement and exact next action: human review of this never-merge draft and its tree-bound private evaluation evidence in run 40067155515. No observed Linux integration blocker remains. Cross-platform packaging and signed-release readiness are not established. No branch push, CI retry, product build, package publication, or ready promotion is requested. Prior evaluation history below is retained and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 52.7 AIC · ⌖ 19.7 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval. Published dependency pins remain unchanged; ordinary PR CI does not validate this overlay.

Linux evaluation — 2026-10-24, run 40055397374

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. It took 22m03s, from 02:54:58 to 03:17:01 UTC. No failure groups, suspected flakes, compatibility edits, or fixture updates were observed in this invocation; failure-specific baseline controls and repetitions were therefore unnecessary. Existing functional assertions and prior compatibility work were preserved.

Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 is already an ancestor of evaluation head b011279401c09f9936342e73bf8cd82346d1e163; no new merge, source commit, or branch publication is needed. Final tree dd45c87135c4ac62067d140fb4c7878c8e452f06 matches both the gate and post-validation capture. The worktree is clean, the candidate provenance manifest is unchanged, and all four root/remote published dependency manifests and lockfiles are byte-identical to the trusted baseline. The private SDK/runtime overlay was not modified or replaced. No private source, binaries, packages, unpublished prompt bodies, or logs were added to the public diff.

Remaining requirement and exact next action: human review of this never-merge draft and the tree-bound private evaluation evidence in run 40055397374. No observed Linux integration blocker remains. Cross-platform packaging and signed-release readiness are not established. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Prior evaluation history below is retained and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 59.5 AIC · ⌖ 17.4 AIC · ⊞ 25.9K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval. Published dependency pins are unchanged; ordinary PR CI does not validate this overlay. (Written by Copilot)

Linux evaluation — 2026-10-24, run 40040687376

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. The complete gate took 22m02s, from 2026-10-23 23:51:58 to 2026-10-24 00:14:00 UTC. No failure groups, suspected flakes, new compatibility edits, or fixture updates were observed in this invocation. Failure-specific diagnostic contrasts and unchanged-input repetitions were therefore unnecessary. Existing functional assertions and compatibility work were preserved.

Integrated exactly frozen VS Code baseline 1185503ec4c5a6aa4fb1b9735d04131d76890c86 without conflicts. Local merge candidate b70d26361026002bbd8c4fb0a8413e540e38e16b has exactly the trusted original evaluation head and frozen baseline as its two parents. Final tree a3cea4c3d04632bc3772748acc0dabe49594a48a matches the gate and post-validation/post-commit captures. The candidate provenance manifest is unchanged, and all four root/remote published dependency manifests and lockfiles are byte-identical to the trusted baseline. The private overlay was not replaced or modified. No private source, binaries, packages, prompt-body updates, or logs were added to the public candidate.

Remaining requirement and exact next action: the trusted signed publisher should apply the persisted source-only merge request, followed by human review of the never-merge draft and private evaluation evidence. Publication is requested, not confirmed here. No observed Linux integration blocker remains; cross-platform packaging and signed-release readiness are not established. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Complete gate evidence and the tree-bound investigation report remain in the private evaluation run. Prior evaluation history below is retained and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 57.3 AIC · ⌖ 20.2 AIC · ⊞ 25.9K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This PR must remain draft and must never be merged. A passing private-overlay gate is not adoption or release approval. Published dependency pins are unchanged; ordinary PR CI does not validate this overlay. (Written by Copilot)

Linux evaluation — 2026-10-23, run 40034885963

Assessment: validated-adaptations; disposition: human-review-required. The required fresh first gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0. The complete gate took 20m04s, from 22:51:21 to 23:11:25 UTC. No failure groups, suspected flakes, new compatibility edits, or fixture updates were observed in this invocation; failure-specific diagnostic contrasts and unchanged-input repetitions were therefore unnecessary. Existing functional assertions and compatibility work were preserved.

Integrated exactly frozen VS Code baseline 7cc5e7382b284f2156375fcedc388b44a07c0487 without conflicts. Local merge candidate f0352412f4d77dfd8400e6ec9be237213bf25d4f has exactly the trusted original evaluation head and frozen baseline as its two parents. Final tree 9e33c5d5f8081481bcf218a68e9843f1ce0e7a51 matches the gate and post-validation/post-commit captures. The candidate provenance manifest is unchanged, and all four root/remote published dependency manifests and lockfiles are byte-identical to the trusted baseline. The installed private overlay was not replaced or modified. No private source, binaries, packages, prompt-body updates, or logs were added to the public candidate.

Remaining requirement and exact next action: the trusted signed publisher should apply the persisted source-only merge request, followed by human review of the never-merge draft and private evaluation evidence. Publication is requested, not confirmed here. No observed Linux integration blocker remains; cross-platform packaging and signed-release readiness are not established. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. The complete gate evidence and tree-bound investigation report remain in the private evaluation run. Prior evaluation history below is retained and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 57 AIC · ⌖ 17.7 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This draft is never a merge candidate. (Written by Copilot)

Linux evaluation — 2026-10-23, run 40025056987

Result: validated-adaptations; human review required, not release approval. The required fresh initial gate passed source-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures (exit 0; 22m 33s). No failure groups, suspected flakes, new fixture deltas, or new compatibility edits were observed in this invocation; no retry or published-package diagnostic control was necessary.

Integrated exactly frozen VS Code baseline abf21692caeea737b917be6398a20d2fa4564e87 with the trusted prior evaluation head, preserving existing compatibility changes and all four baseline-identical published dependency manifests/lockfiles. The validated source tree is 4ef20ff613a5a2c024de29c39237d0464ca7ded2. The coherent two-parent merge is committed locally and submitted to the trusted signed publisher through the merge request, not the ordinary branch-push tool. No private package, binary, source excerpt, prompt-body update, or log was added to the public diff.

Next action: the trusted publisher applies the baseline merge, followed by human review of the private evaluation evidence. This result covers only the isolated Linux source-artifact overlay; normal PR CI uses published pins and does not validate it. Cross-platform/signed-release readiness is not established. Keep the DO NOT MERGE draft; do not dispatch product validation, publication, or ready promotion. Existing evaluation history below is retained.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.9 AIC · ⌖ 17.5 AIC · ⊞ 25.9K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This PR must never be merged and must remain draft. A passing private-overlay gate is not adoption or release approval. Published dependency pins are unchanged; ordinary PR CI does not validate this overlay.

Linux source evaluation — 2026-10-23, run 39993565303

Assessment: validated-adaptations; disposition: human-review-required. The required first complete Linux gate passed publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 787 passing, 41 pending, zero failures, exit 0, in 19m31s (17:32:05–17:51:36 UTC). No failure groups were observed, so failure-specific contrasts and unchanged-input flake repetitions were not necessary. No new compatibility changes or fixture updates were needed; functional assertions and prior compatibility work were preserved.

Integrated the exact frozen VS Code baseline 14c8c2fda1f9 without conflicts. Local candidate fd1cdda6819c3e42b438b6ddd24c584a64b3829b has exactly the trusted original PR head and frozen baseline as its two parents. Final tree b2e4c10aae56944e1f78068dbf3da815b79786a5 matches the gate and post-validation/post-commit captures. All four root/remote published dependency manifests and lockfiles remain byte-identical to the trusted baseline; the candidate provenance manifest and installed overlay were unchanged. No private source, prompt bodies, binaries, packages, or logs were added to the public candidate.

Remaining requirement and exact next action: the trusted publisher should apply the persisted signed source-only merge request, then retain this never-merge draft for human review. Publication is requested, not confirmed here. No observed Linux integration blocker remains, but cross-platform packaged-release health and adoption are not approved. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Tree-bound investigation and complete gate evidence remain in the private evaluation run. Earlier evaluation history below is preserved and applies only to its own recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 40.6 AIC · ⌖ 13.9 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main source evaluation only. This PR must remain draft. A passing private-overlay evaluation is not release approval; ordinary PR CI uses published dependency pins and does not validate this candidate.

Source evaluation — 2026-10-23, run 39987159987

Assessment: validated-adaptations; disposition: human-review-required. Integrated the exact frozen VS Code baseline c2968900dcff without conflicts, preserving main's independent changes and the prior compatibility work. No new compatibility changes or fixture updates were needed in this invocation. The candidate provenance manifest and all four published dependency manifests/lockfiles were preserved unchanged relative to their trusted inputs.

The required first complete gate passed on the final source tree: publication-policy preflight, client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E coverage — 787 passing, 41 pending, zero failing. It ran from 16:44:57 to 17:06:42 UTC (21m45s). No failure groups were observed, so no failure-specific diagnostic contrasts or repeated samples were required. The committed tree is identical to the validated tree; no further full gate was necessary. This result covers Linux only, not cross-platform packaging or release readiness.

Remaining requirement and exact next action: trusted signed publication has been requested through the dedicated merge handoff for the exact tested two-parent candidate, followed by human review of the never-merge draft and private evidence. Publication is requested, not confirmed here. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Full logs and the tree-bound investigation report remain in the private evaluation run; no private source, prompt bodies, binaries, packages, or logs are added to this PR. Prior evaluation history is retained below.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 58.4 AIC · ⌖ 17.5 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged. It remains a labeled draft with human-review-required; this is not a signed-release bump or adoption approval. Published dependency pins are unchanged, and ordinary PR CI cannot validate the isolated unpublished overlay.

Linux evaluation — 2026-10-23 (run 39959319244)

Outcome: validated-adaptations; human review required. The mandatory first complete Linux gate passed client typecheck, compilation, and the Full Copilot SDK/Agent Host integration and E2E matrix: 787 passing, 41 pending, zero failures, exit 0, in 22 minutes 13 seconds. No failure groups were observed; no new compatibility changes, fixture updates, repeated-flake checks, or diagnostic baseline contrasts were needed. Functional assertions and prior compatibility work were preserved. This establishes the recorded Linux overlay result, not cross-platform packaged-release health or release readiness.

The exact frozen VS Code baseline 44658d2920c825df5c7f63d7aeab6437b0af81f6 merged without conflicts. Local candidate 0dd9db742f7f86055d3fcbf6cd848d409f378976 has exactly trusted PR head 634f2140ee65557aa258130f95d833ac6998ed38 and that baseline as its two parents. Final tree c38427d6d714f882c6f3af91bef866d5e01bee0f matches the full gate and post-validation/post-commit captures. All four root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline. The driver-written candidate manifest matches the trusted provenance and was left unchanged, as was the installed overlay. No private source, new prompt bodies, binaries, packages, or logs were added to the public candidate; detailed provenance and retained evidence remain in private evaluation artifacts.

Remaining action: the trusted publisher should apply the requested exact two-parent signed source-only candidate update and retain this never-merge draft for human review. The merge request, human-review disposition, and final-tree-bound investigation report are persisted. No observed Linux integration blocker remains; adoption is not approved. No product build, package publication, CI retry, or ready promotion is requested. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 62.2 AIC · ⌖ 20.2 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged. It remains a draft with human-review-required; this is neither a signed-release bump nor adoption approval.

Linux evaluation — 2026-10-23 (run 39952841645)

Outcome: validated-adaptations; human review required. The mandatory first complete gate passed client typecheck, compilation, and the Full Copilot SDK/Agent Host integration and E2E matrix: 787 passing, 41 pending, zero failures, in 20 minutes 41 seconds. No failure groups were observed, so no new compatibility changes, fixture updates, flake repetitions, or diagnostic controls were needed. Existing functional assertions and prior compatibility work were preserved. This result covers the isolated unpublished Linux overlay, not ordinary PR CI or cross-platform packaged-release health.

The exact frozen VS Code baseline a6cc40f626a64b47e50f070a2b0307c199cadd0d merged without conflicts. Local candidate 46c82dd118246f0876fa4b74be01ccb9b5c65144 has exactly trusted PR head 526c259cc1c808b22a18d132803746c08da3b541 and that baseline as its two parents. Final tree 07aeb9a83168a7c35bb9f56b4cdde04661501ef9 matches the complete gate and the post-validation/post-commit tree captures. All four root/remote dependency manifests and lockfiles are byte-identical to the trusted baseline; the driver-written candidate manifest and installed overlay were left unchanged. No private source, new prompt bodies, packages, binaries, or logs were added to the public candidate. Detailed provenance and retained validation evidence remain in private evaluation artifacts.

Remaining action: the trusted publisher should apply the requested exact two-parent signed source-only candidate update, retaining the labeled never-merge draft for human review. The merge request, human-review disposition, and final-tree-bound investigation report are persisted. No observed Linux integration blocker remains; release adoption is not approved. No product build, package publication, CI retry, or ready promotion is requested. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 53.4 AIC · ⌖ 20 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged. It remains a labeled draft with human-review-required, not a signed-release bump or adoption approval. Published dependency pins are unchanged; ordinary PR CI cannot validate the isolated overlay.

Linux evaluation — 2026-10-23 (run 39944542402)

Outcome: validated-adaptations; human review required. The final complete gate passed client typecheck, compilation, and the Full Copilot SDK/Agent Host integration and E2E matrix: 787 passing, 41 pending, zero failures, in 21 minutes 12 seconds. An earlier complete attempt also passed with the same counts. The mandatory initial attempt failed at typecheck and remains retained with all subsequent diagnostic results in private artifacts.

Resolved baseline-test prerequisites: the frozen baseline introduced a Chats-capping test that referenced an existing exported section identifier without importing it. Adding that import exposed a second scenario error: the test expected a dedicated Chats section in Date grouping, although the implementation and an independent existing contract test explicitly place quick chats among ordinary date sections. The candidate now tests Workspace and Repository—the two supported dedicated-section modes—with every capping, expansion, persistence, and reset assertion unchanged. The affected suite and independent grouping-contract suite passed 23 tests twice on unchanged final inputs, including the untouched Date/Environment contract. These are proven baseline test defects, not SDK regressions; no new SDK compatibility changes or SDK fixture updates were needed.

Resolved diagnostic infrastructure failure: one additional unit-test launch overlapped clean compilation and failed before test registration because a generated launcher dependency was temporarily absent. The clean-output timeline and that module's regeneration establish the mechanism. After sequencing launches behind compilation, two identical 23-test runs passed without an intervening rebuild or changes to source, packages, fixtures, or configuration. This is investigation-owned scheduling, not an unexplained SDK flake or a shipped product workaround. No assertions were weakened.

The exact frozen baseline 747ecb44fa5f04e2425100579e0524cd824cc4c9 merged without conflicts, preserving main's independent changes and prior justified compatibility work. Local candidate 95c43fe4fc08a4c9e7f606a2b8ea0d4334e52abe has exactly trusted PR head 4c7ec6f6874d796d6988f217a43dd247cc0ceea3 and that baseline as its two parents. Final tree 83f9d64b7d7e72ec048ff2cfd5d65a597ff8a4dd matches the gate and post-validation/post-commit captures. All four dependency manifests and lockfiles match the trusted baseline hashes; the driver-written candidate manifest and installed overlay were left unchanged. No private source, new prompt bodies, packages, binaries, or logs were added to the public candidate. Detailed provenance, commands, all three resolved failure groups, and repeated-observation evidence remain private.

Remaining action: the trusted publisher should apply the requested exact two-parent signed source-only merge and retain this never-merge draft for human review. The merge request, human-review disposition, and tree-bound investigation report are persisted. No observed Linux integration blocker remains; cross-platform packaged-release health and adoption approval are not established. No product build, package publication, CI retry, or ready promotion is requested. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 121 AIC · ⌖ 20.1 AIC · ⊞ 25.9K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged. It remains a labeled draft with human-review-required; this is not a signed-release bump or adoption approval.

Linux evaluation — 2026-10-23 (run 39933666427)

Outcome: validated-adaptations; human review required. The mandatory first complete gate passed client typecheck, compilation, and the Full Copilot SDK/Agent Host integration and E2E matrix: 787 passing, 41 pending, zero failures, in 20 minutes 31 seconds. No failure groups were observed, so no flake repetition, diagnostic contrasts, new compatibility edits, or fixture updates were needed. Functional assertions were unchanged. This covers the isolated unpublished Linux overlay; ordinary PR CI cannot validate that overlay, and this is not cross-platform packaged-release validation.

The frozen VS Code baseline 486af7eb0f2600d5797a2215fe199622a6905504 merged cleanly, preserving main's independent work and prior compatibility adaptations. Local candidate a123a18afb8fdddceaa30d82b3e4d268f6a9e44b has exactly trusted PR head 52c6188589ee7a8aca258e908a33eb90a8155b0d and that baseline as its two parents. Final tree 9af49ef05910a948029023d27d1e0cebb4baa002 matches the gate and post-validation/post-commit captures. All four root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline; the driver-written candidate identity and installed overlay were left unchanged. No private source, new prompt bodies, packages, binaries, or logs were added to the public candidate. Detailed provenance and evidence remain in private evaluation artifacts.

Remaining action: the trusted publisher should apply the requested exact two-parent signed source-only merge and retain this never-merge draft for human review. The persistent merge request, human-review disposition, and tree-bound investigation report are written. No observed Linux integration blocker remains. No product build, package publication, CI retry, or ready promotion is requested. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 59.6 AIC · ⌖ 15.3 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged. It remains draft with human-review-required; this is not a signed-release bump or adoption approval.

Linux evaluation — 2026-10-23 (run 39922769079)

Outcome: validated-adaptations; human review required. The mandatory first complete gate passed client typecheck, compilation, and the Full Copilot SDK/Agent Host integration and E2E matrix: 787 passing, 41 pending, zero failures, in 21 minutes 50 seconds. No failure groups were observed, so no flake retries, diagnostic contrasts, new compatibility edits, or fixture updates were needed. No assertions were weakened. This result covers the private Linux overlay, not ordinary PR CI or cross-platform packaged artifacts.

The exact frozen VS Code baseline 37b0141b684211e79447cdb0392325432b0e7418 merged cleanly, preserving main's independent work and prior compatibility adaptations. Local candidate c9c63ab2f888958a794405746c2f8a6a28540989 has exactly trusted PR head 81e7be9115c50fb38c980dad4ef33477f99375c6 and that baseline as its two parents. Final tree 9e7bd972a107dbdb3a28850134f20bee5925ed6c matches the gate and post-validation/post-commit captures. All four root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline; the driver-written candidate identity and installed overlay packages are unchanged. No private source, new private prompt bodies, packages, binaries, or logs were added to the public candidate. Detailed evidence remains in private evaluation artifacts.

Remaining action: the trusted publisher should apply the requested exact two-parent signed source-only merge and retain this labeled never-merge draft for human review. The persistent merge request, human-review disposition, and tree-bound investigation report are written. No observed Linux integration blocker remains. No product build, package publication, CI retry, or ready promotion is requested. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.4 AIC · ⌖ 17.6 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This PR must never be merged and remains draft with human-review-required. This evaluates unpublished Linux SDK/runtime artifacts, not a signed release. Published dependency pins remain unchanged; normal PR CI cannot validate the overlay. No product build, package publication, or ready promotion is requested.

Linux evaluation — 2026-10-23 (run 39912686967)

Outcome: validated-adaptations; human review required. The mandatory first complete gate passed on upstream source ad9082672db0310361ed458430aa755fb2b92dc4, integrated with frozen VS Code baseline 56a079479f1c59e64840be6e092820d890324f96. Client typecheck and compilation passed; the Full Copilot SDK/Agent Host integration and E2E matrix reported 787 passing, 41 pending, zero failures, in 21 minutes 12 seconds. Coverage includes conformance, all Copilot provider E2E entrypoints, prompts, managed settings, SDK/provider integration, and telemetry. No failures occurred to classify or repeat, and no new compatibility adaptations or fixture updates were needed. No functional assertions were weakened.

The baseline merged cleanly, preserving main's independent work and prior compatibility changes. Local merge candidate ea4d23b7bcd2eb5af658e7aa0f01fcf9503b70ff has exactly trusted PR head ac93b0e6a1b5549adf9f3d916641c9896ee58465 and the frozen baseline as its parents. Its final tree 6a6a524791f1080def74327f4762e0602eb068a5 matches the gate and both post-validation and post-commit captures. All four root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline, and the driver-written candidate manifest is unchanged. Installed overlay packages were not edited or replaced. No private source, prompt bodies, packages, binaries, or logs were added to the public candidate; detailed evidence remains in private evaluation artifacts.

Next action: the trusted publisher should apply the requested exact two-parent signed source-only merge and retain this labeled never-merge draft for human review. No observed Linux gate blocker remains; this result is not adoption approval, merge permission, or cross-platform packaged-release validation. Earlier evaluation history below is preserved and applies only to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.7 AIC · ⌖ 13.9 AIC · ⊞ 26.6K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

DO NOT MERGE — Linux upstream-main evaluation only. This draft tests an unpublished SDK/runtime overlay, not a signed release. Published dependency pins remain unchanged; normal PR CI cannot validate this overlay. No product build, package publication, or ready promotion is requested.

Linux evaluation — 2026-10-23 (run 39899367350)

Outcome: validated-adaptations; human review required. The first complete gate passed on upstream source e906cf38359baa8ff8593238f0d1677c306d655f integrated with the exact frozen VS Code baseline 5a9052ae97c7b7fe46e295591cbbbc91b540f317. Client typecheck and compilation passed; the Full Copilot SDK/Agent Host integration and E2E matrix reported 787 passing, 41 pending, no failures. The complete gate took 20 minutes 25 seconds. No failure groups, repeat-only recoveries, new compatibility edits, or fixture deltas were observed in this invocation; no fixture expectations or functional assertions were weakened.

The baseline merged without conflicts, preserving main's independent changes and the prior compatibility candidate. All four root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline, and the driver-written candidate identity is unchanged. The final committed tree 24174c8ee0d99df77005738d3afa1d2a9ed800eb matches both the gate and post-validation capture. Logs and provenance remain private evaluation artifacts; no private source, prompt bodies, packages, or binaries were added to the public diff.

Next action: the trusted publisher should apply the requested exact two-parent baseline merge, then retain this labeled draft for human review. There is no observed Linux gate blocker, but passing this source evaluation is not approval to adopt or merge, and does not establish cross-platform packaged-release health. Earlier evaluation history below remains applicable to its recorded inputs.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 54.3 AIC · ⌖ 17.5 AIC · ⊞ 25.9K · ◷

DO NOT MERGE — SDK main early-warning evaluation. This rolling draft tests unpublished Linux artifacts, not an npm release. Published dependency pins are intentionally unchanged. Normal PR CI does not test the overlaid candidate. No product build, publication, or automatic ready promotion is performed. (Written by Copilot)

Compatibility fixes accumulate here for inspection. The candidate manifest identifies the exact upstream source and artifact. Each scheduled run repeats the complete Linux gate, including unchanged candidates, and retains its initial and final results to help distinguish regressions from flakes.

Linux upstream-main evaluation — 2026-10-19

Caution

DO NOT MERGE. This source-evaluation PR remains draft and requires human review.

Evaluated upstream source 2c3adb2702186b539b0efabad33e13fec637d438 against the fixed VS Code baseline 75fa8b80754b42928f94a8b9e524ee5025d28eb6. The final Full-profile gate passed client typecheck and compilation; 738 integration tests passed and 40 were pending. It still failed 23 tests: the retained subagent's second follow-up is not persisted, the managed-permission replay changed to runtime-owned retained evidence, 20 managed/file-exporter OTel cases emit session timing but no inference spans, and an omitted managed model effort resolves to undefined instead of the managed default.

The draft candidate accepts the exact source schema, permits the source-build version sentinel while retaining strict version checks for releases, omits fixed reasoning effort for Auto while preserving the routed local model default, and makes retained-subagent state checking race-free. Focused build tests (31), launcher tests (161), targeted lint, and the adapted local-model integration case passed. Dependency manifests, lockfiles, and candidate provenance remain unchanged.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 618.8 AIC · ⌖ 54 AIC · ⊞ 29.6K · ◷

⛔ DO NOT MERGE — Linux upstream-main source evaluation

This rolling draft evaluates exact upstream source artifacts only. It is not a signed release bump or release approval and must remain draft.

Evaluation at source `aecf9b48f16f43738cf4b2ddd97624cc820de4c9`

Outcome: human review required. The exact pinned VS Code baseline was integrated as a two-parent merge candidate. The final gate is bound to source tree 84834a57bef38343b1f91bb800a82500a0f89377; client typecheck and compilation passed, with 748 passing, 41 pending, and 22 failing integration tests.

Validated compatibility work:

Updated the managed-settings contract and classified schema fixture for the intentional ensembleTier → fusionTier transition.
Initialized the session model catalog before asserting advisory managed defaults; the complete affected model-configuration suite passes.
Updated the synthetic image catalog to the runtime's exact default image model; create, cold-resume, unavailable, and default-off cases pass.

Remaining groups:

Private replay fixture adaptation: assisted managed-permission transcript framing and retained permission evidence changed. The complete read/write approval and denial fixture family needs trusted private regeneration; publishing the required prompt content in this public diff is prohibited. Request matching was not weakened.
Upstream ordered-event publication defect: custom-agent discovery reserves an event batch during create/resume, but affected native callers do not publish the returned batch. Later recorded events remain blocked, so retained-child updates and inference telemetry are absent even though turns and construction/provisioning spans complete. This accounts for the retained-subagent failure and the telemetry/file-exporter failures. The required fix belongs upstream, followed by rebuilt exact artifacts and another complete gate.

Evaluation history

Initial gate: typecheck exposed the stale managed-settings field.
Focused fixture check: 31 passing after the reviewed schema refresh.
Focused model/image validation: both complete affected suites passed.
Final exact-tree gate: typecheck and compile passed; 748 integration tests passed with the two groups above still open.

Next action: privately regenerate and classify the managed-permission replay family, land the upstream event-publication repair with create/resume regression coverage, rebuild the exact Linux SDK/runtime artifacts, and rerun this source evaluation. This PR must never be marked ready or merged.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 538.2 AIC · ⌖ 13.2 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-21)

This PR must never be merged. It remains draft and human-review-required. This evaluates unpublished Linux source artifacts, not a signed release; normal PR CI cannot validate the overlay.

Linux result: passed; all observed failure groups resolved. Evaluated upstream source 638eca2df1797ed37da09ddd23ba37d298f45ffd on frozen VS Code baseline a86a69040fcae7a1d9f9288d5bc53eed6a3b333c. Prepared the exact two-parent merge candidate from trusted PR head 0a52e143074e1b672056a7f15957e1fb3a343674 and that baseline. Its tested source tree is 0bab469b9e53d1158df40dc42f540c814ab13e56; signed source-only publication has been requested through the trusted merge publisher.

Resolved mechanisms:

Baseline integration: the sole conflict was wording in a local-model test title and comment. Kept the baseline wording and identical functional assertions, preserving main's independent work and prior compatibility changes.
Test-recorder adaptation: retained-child readiness polling was incorrectly counted as fixed protocol traffic. Every child response, completed-turn count, inactive-state check, and parent tool assertion passed before the snapshot failed. The scoped repair omits successful readiness subscription bookkeeping, not errors or state-change actions. The fixture delta removes only those bookkeeping entries; no model fixture or private prompt content was introduced. Existing functional assertions and timing bounds remain intact.
Publication preflight: an optional README paragraph was rejected as protected and removed. The README is unchanged from the baseline; no publication policy was relaxed.

Evidence and repeats: the initial full gate passed typecheck and compilation, with 778 passing, 41 pending, and one snapshot-only failure. Two unchanged targeted reruns reproduced that same comparison; these failures were not dismissed as a flake. After repair, three unchanged targeted repetitions passed, all 12 recorder unit tests passed, and the complete affected Copilot provider suite passed (279 passing, 25 pending). A second gate attempt stopped at the optional documentation protection check. The final exact-tree Full-profile gate passed typecheck, compilation, and 779 integration tests, with 41 pending and zero failures. It includes conformance, all Copilot provider entrypoints, permissions, prompts, managed settings, SDK integration, and both telemetry layers. Earlier reported permission and telemetry failures did not recur in this evaluation.

Published dependency manifests and lockfiles remain byte-identical to the frozen baseline, and the driver-written candidate manifest is unchanged. Installed packages were not edited or replaced. No private runtime/SDK source, packages, binaries, prompts, or logs are included in the public candidate. An isolated published-SDK control was unavailable; the recorder-only unit contrast independently establishes this failure mechanism without treating another revision's CI as an equivalent control. This retained-child scenario checks live state, not cold-resume persistence of all three follow-up turns.

Next action: apply the requested exact-tree signed source-only merge publication and have a human inspect the narrow test-harness repair. There is no unresolved observed failure group, but this is Linux evaluation evidence only—not cross-platform validation, adoption approval, or permission to merge. Do not start the product-build or signed-release adoption lifecycle. Full private evidence and classifications are retained with this evaluation run.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 188.9 AIC · ⌖ 17.5 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-21, current invocation)

This PR must never be merged. It remains draft and human-review-required. This evaluates unpublished Linux source artifacts only, not a signed release. Normal PR CI does not validate this overlay.

Result: passing Linux gate; no observed failure groups. Evaluated upstream source 3ab6a03a758e62247253c683524bbc1b1df06ad3 against frozen VS Code baseline b9d0de3f0a772523d7d76163fce9437a915152db. The mandatory first complete gate passed client typecheck, compilation, and 779 integration tests, with 41 pending and zero failures, in 20 minutes 7 seconds. Coverage includes Full-profile Agent Host conformance, all Copilot provider E2E entrypoints, prompts, managed settings, SDK/provider integration, and telemetry. No failures occurred to classify or repeat; no additional compatibility changes or fixture updates were necessary.

The exact baseline integrated cleanly while preserving its independent changes and the prior compatibility work. Local merge candidate f693ebdcf058bf2d14ed05c59accf20888e2b83c has exactly trusted PR head e7eba03df61620e4801e8956a7870344d503cd9c and the frozen baseline as parents. Its final tree b998db14fd66ebee447d441b89d80228ab997176 matches the gate fingerprint and the post-commit capture. The driver-written candidate manifest remains unchanged and matches the trusted source/artifact provenance. All four published dependency manifests and lockfiles remain byte-identical to the baseline; installed packages were neither edited nor replaced. No private source, prompts, logs, packages, or binaries were added to the public candidate.

Next action: apply the requested exact-tree signed source-only merge publication and have a human inspect the integrated candidate. The private readiness disposition and investigation report are recorded with this run; the complete first-attempt logs are retained. There is no unresolved observed failure group, but passing Linux evaluation is not cross-platform validation, adoption approval, or permission to merge. Do not start product-build or signed-release validation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.1 AIC · ⌖ 16.9 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-21, run 39552137120)

This PR must never be merged. It remains draft and human-review-required. This evaluates unpublished Linux source artifacts, not a signed release. Normal PR CI does not validate this overlay.

Result: passing Linux gate; no observed failure groups. Upstream source 3ab6a03a758e62247253c683524bbc1b1df06ad3 was evaluated against frozen VS Code baseline 60a1c53be7c6b9178d1e18b77eda01199758cb63. The mandatory first complete gate passed client typecheck, compilation, and 779 integration tests, with 41 pending and zero failures, in 21 minutes 42 seconds. Coverage includes Full-profile Agent Host conformance, all Copilot provider E2E entrypoints, prompts, managed settings, SDK/provider integration, and telemetry. No failures required classification, diagnostic contrasts, or repeated samples; no new compatibility edits or fixture updates were necessary.

The frozen baseline integrated cleanly, preserving main's independent work and prior compatibility adaptations. Local merge candidate e1498c077784a2b03d2452388649ae5872dc4c6c has exactly trusted PR head 3b4279e5df05e1d198d6209f3e6b44e670c9adb2 and that baseline as its two parents. Its final source tree 3186da2fde4df47a85f5db5e2a55a573dcbf1ab3 matches both the gate fingerprint and post-commit capture. The driver-written candidate manifest matches trusted provenance and is unchanged. All four published dependency manifests and lockfiles remain byte-identical to the baseline; the installed overlay fingerprint is unchanged. No private source, prompts, logs, packages, or binaries were added to the public candidate.

Next action: the trusted publisher must apply the requested exact-tree signed source-only merge publication, followed by human inspection. The merge request, human-review disposition, empty-group investigation report, and complete first-attempt evidence are retained with this evaluation run. No observed blocker remains in this Linux assessment, but it is not cross-platform validation, adoption approval, or permission to merge. Do not start product-build or signed-release validation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 62.7 AIC · ⌖ 17.1 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-21, run 39556557887)

This PR must never be merged. Keep it draft and human-review-required. This evaluates an unpublished Linux source overlay, not a signed release. Normal PR CI does not validate this overlay.

Result: passing Linux gate; no observed failure groups. The required first complete gate passed client typecheck, compilation, and 779 integration tests, with 41 pending and zero failures, in 19 minutes 2 seconds. Coverage includes Full-profile Agent Host conformance, all Copilot provider E2E entrypoints, prompts, managed settings, and SDK/provider integration, including telemetry. No new compatibility edits or fixture updates were needed. There were no failures requiring classification, diagnostic contrasts, or repeated samples.

The exact frozen VS Code baseline e6e472a812035775e94c52676d54e851018be866 integrated cleanly, preserving main's independent work and prior compatibility changes. Local merge candidate 4c89385f639aebef88afcc0cd0a6f87591ec3d71 has exactly trusted PR head b862a834d3333fd1703648bfb2f9dc48611861a8 and that baseline as its two parents. Final tree 4e6c77add2ed5b861ecd5a241fd98b066aab1174 matches the gate fingerprint and post-commit capture. The candidate manifest matches trusted provenance and is unchanged. All four published dependency manifests and lockfiles are byte-identical to the baseline; the private overlay was not edited or reinstalled. No private source, prompt bodies, logs, binaries, or packages were added to the public candidate.

Next action: the trusted publisher should apply the requested exact-tree signed source-only merge publication, followed by human inspection. The merge request, human-review disposition, empty-group investigation report, and first-attempt gate evidence are retained with this evaluation run. No observed blocker remains in this Linux assessment, but it is not cross-platform validation, adoption approval, or permission to merge. Do not start product-build or signed-release validation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 43.4 AIC · ⌖ 17.6 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-21 (run 39560942792)

DO NOT MERGE. Human review required; retain this labeled draft. This evaluation uses the private source-built Linux overlay, not published npm packages. Normal PR CI cannot validate it.

Result: validated-adaptations. The required first complete gate passed on the final candidate: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E; 779 passing, 41 pending, zero failures. The gate took 18 minutes 53 seconds. No failure groups, suspected flakes, fixture deltas, or new compatibility adaptations were observed, so no targeted retry or published-package control was needed.

Integrated the exact frozen VS Code baseline 0f940e29fcd0ea44385b4c327bf74d81bd2d0e41 without conflicts, preserving main's independent changes and existing compatibility work. The single merge has exactly the trusted original PR head and frozen baseline as parents. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline; the driver-written candidate manifest is unchanged. The final committed tree 989b8df877626326c3cb7c191409eb886d7b747d matches the gate and post-validation capture. No private source, prompt bodies, packages, binaries, or logs were added to the public diff.

Next action: the trusted publisher should apply the requested signed source-only baseline merge, followed by human inspection. The publication request, human-review disposition, empty-group investigation report, and first-attempt gate evidence are retained in the private evaluation artifacts. No observed Linux blocker remains; this is not cross-platform validation, release approval, or permission to merge. Do not dispatch product-build or signed-release validation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 51.6 AIC · ⌖ 17.2 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux source evaluation — run 39565591184

DO NOT MERGE. This remains a never-merge draft evaluating unpublished Linux artifacts. Normal PR CI exercises published pins, not this overlay. This result is not release approval.

Result: validated-adaptations; human review required. The mandatory first complete gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 779 passing, 41 pending, zero failures, exit 0. Duration: 20 minutes 26 seconds. No failure groups, suspected flakes, new compatibility adaptations, or fixture changes were observed; no targeted repetition or published-package diagnostic control was necessary.

Integrated the exact frozen VS Code baseline 5170ebe909381b6990cd686dc47da9c854bc5946 without conflicts, preserving independent baseline changes and existing compatibility work. Candidate identity matches upstream commit 38ce63b66be0cb8cfd46d44cd0e4a9576eda3e87. Local merge 2c0aa18280230c68f1407a347ffaef622326b125 has exactly the trusted original PR head and frozen baseline as parents. Its tree cd7619fcb4b68cfd1dc2b3680f502bebf1d40715 matches the gate and post-validation capture. All four root/remote manifests and lockfiles remain byte-identical to the baseline; the driver-written candidate manifest is unchanged. No private source, prompt bodies, packages, binaries, or logs were added to the public diff.

Next action: the trusted publisher should process the retained signed source-only merge request, followed by human inspection. The private artifacts retain the gate logs, human-review disposition, and tree-bound investigation report with an empty group list. No observed Linux blocker remains; cross-platform compatibility and release adoption are not established. Do not request product-build or signed-release revalidation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 50.6 AIC · ⌖ 17.4 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (run 39571716069)

This PR must never be merged. Retain the labeled draft and human-review-required disposition. This evaluates an unpublished Linux source overlay; normal PR CI validates published pins, not this candidate. This is not release approval.

Result: validated-adaptations; no observed failure groups. The mandatory first complete gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 779 passing, 41 pending, zero failures, exit 0, in 19 minutes 56 seconds. Coverage includes Copilot provider E2E, prompts, managed settings, SDK/provider integration, and telemetry. No new compatibility changes or fixture updates were needed. No failures or suspected flakes required classification, diagnostic contrasts, targeted repetition, or a published-package control.

Integrated the exact frozen VS Code baseline ae8a139ae5e317f977febbb21b76b203792c7ee7 without conflicts, preserving main's independent work and prior compatibility changes. Local merge f3702d81d8bb6aea02269cc4c0c5ebd35cb1d1e2 has exactly trusted PR head 788dc24b598197f0d57efd1f4edf40ba2f838ca8 and that baseline as its two parents. Final tree b0b687b7df439d420c358e1a7e5e3764c07257e3 matches both the gate and post-commit capture. The candidate manifest matches trusted provenance and remains unchanged. All four published root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline. The private overlay was not edited or reinstalled; no private source, prompt bodies, logs, binaries, or packages were added to the public candidate.

Next action: the trusted publisher should process the retained exact-tree signed source-only merge request, followed by human inspection. The human-review disposition, empty-group investigation report, and first-attempt gate evidence are retained in the private artifacts for this evaluation run. No observed Linux blocker remains, but cross-platform compatibility and release adoption are not established. Do not dispatch product-build or signed-release revalidation, and never mark this PR ready.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 51.7 AIC · ⌖ 17.2 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-21

DO NOT MERGE. Human review required; keep this evaluation PR draft.

Integrated the exact frozen VS Code baseline 2deba53c56298b7b8651db9f09abf9723e788c79 cleanly, retaining the existing compatibility changes. No new compatibility edits or fixture updates were necessary. The final candidate has exactly the trusted prior PR head and frozen baseline as its two parents; published root/remote manifests and lockfiles remain byte-identical to that baseline, and the driver-written candidate identity is unchanged.

The first complete Linux gate passed in 20m 42s: source-publication policy, client typecheck, compilation, and Full Copilot SDK/Agent Host integration and E2E, with 779 passing and 41 pending. No failures or intermittent failures were observed during this invocation, so there are no new failure groups or adaptations to classify. Pending tests are not claimed as executed coverage. The committed source tree matches the gate fingerprint, d32b5013693a5e3a06d6d784194f26d14dba5663; no validation inputs changed afterward.

Private provenance, gate evidence, and the tree-bound investigation/readiness reports were retained. An exact-merge publication request was written for the trusted signed publisher; no ordinary branch push was requested. Next action: preserve this tested merge on the never-merge draft through that publisher, then review the Linux evaluation. This result is not release/adoption approval: normal PR CI uses published pins rather than the private overlay, and no product build, package publication, or ready promotion is requested.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 53.1 AIC · ⌖ 19.8 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-21

DO NOT MERGE. This remains a draft early-warning evaluation of unpublished Linux artifacts, not a signed-release bump or adoption approval.

Integrated the exact pinned VS Code baseline 9576e160924a050614c4612adbb26bf73edf551a into the existing evaluation head, preserving main's independent work and the prior compatibility changes. The merge completed without conflicts. No additional compatibility edits or fixture updates were required. The driver-written candidate identity and all four root/remote dependency manifests and lockfiles are unchanged from their required inputs.

The required first complete gate passed on the final source tree: client typecheck, compilation, and Full-profile Agent Host conformance, Copilot E2E, and SDK/provider integration; 779 passing, 41 pending, zero failures. One complete attempt took 18m 35s. There were no observed failure groups, retry-only passes, or new fixture deltas to classify. The post-validation tree capture matches the committed candidate. Commands, provenance, and diagnostics remain in the private evaluation artifacts; no private SDK/runtime source, prompts, packages, or logs were added to this PR.

Disposition: human-review-required. Signed publication of the exact two-parent baseline merge has been requested through the trusted source-evaluation handoff. Next action: review that candidate and its private evaluation evidence. This Linux-only result does not establish cross-platform or signed-release compatibility. Normal PR CI uses published pins and cannot validate the private overlay. Do not merge, mark ready, or dispatch product-build/release validation from this evaluation.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 57.2 AIC · ⌖ 19.7 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-21, run 39595677424

DO NOT MERGE. This rolling source-evaluation PR remains draft and requires human review. This is not release approval.

Outcome: validated-adaptations; human-review-required. Evaluated upstream source 92a0dd6eb476febfe5a4a19ef97329dce1bb1f46 against frozen VS Code baseline 1964d141f4226eb4c05d29f746f0c74c894a8dfc. The baseline integrated without conflicts, preserving main’s independent changes and the prior compatibility work. No new compatibility edits or fixture updates were necessary.

The required first complete Linux gate passed on the final tree 1986484ba6b6065c0d99519ac6f5edf450437ad7: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E; 779 passing, 41 pending, zero failing tests. The single attempt completed in 22m 43s. No failure groups were observed, so no failure-specific diagnostic contrasts or repetitions were needed. The post-validation tree capture matches the committed candidate. All four published dependency manifests and lockfiles remain byte-identical to the frozen baseline, and the candidate provenance manifest is unchanged.

Next action: the trusted publisher should publish the exact two-parent baseline merge requested in the private handoff, then retain this labeled never-merge draft for human inspection. Detailed provenance and gate evidence remain in the evaluation run’s private artifacts. This result covers only the unpublished Linux overlay; ordinary PR CI does not validate it. No product build, release publication, ordinary bump revalidation, or ready promotion is requested.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 52.8 AIC · ⌖ 17.9 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-21, run 39632888943

DO NOT MERGE. This remains a labeled draft source-evaluation candidate, not a release bump or adoption approval.

Outcome: validated-adaptations; human-review-required. Evaluated source 90214db9ae716bb4b5f7e489ee4cf151207f940c against frozen VS Code baseline 3fa345dbdaf8a324c04794c26ad10a4a681b9857. The baseline merged cleanly, preserving its independent work and the prior compatibility changes. The committed candidate is 8cdfc7c83e6a41a5653ac81ca07fffb858939e5b, with exactly the trusted original PR head and frozen baseline as parents; its tested tree is c5fe8cb6b63b2be622874f4e85ee498ca556454a.

The SDK intentionally retired the client/session remote-sync configuration fields. VS Code now applies the existing opt-in through the per-session export-only history RPC after create/resume, including empty-history fallback. Remote steering is not enabled. Export setup failures are logged without breaking ordinary chat; hidden customization-policy sessions do not request export. Tests preserve credential/storage isolation and cover successful create/resume export, absent/false opt-in, fallback, and setup failures. No new prompt or replay fixture changes were accepted.

Observed group	Mechanism and resolution
SDK API adaptation	The required initial gate stopped at typecheck on the removed options. Exact-source declaration tests and the replacement RPC contract establish the intentional migration. The affected unit suites and final complete gate pass after the host adaptation.
New fallback-test setup	Three newly added cases initially omitted the JSON-RPC error code required by the existing no-history safety guard. Correcting only the mock error shape made all cases pass; the production guard and functional assertions remain unchanged. This was not a flake or runtime regression.
Publication preflight	An optional documentation paragraph touched a protected instructions file. That new paragraph was removed completely; the unchanged publication policy then passed. The rejected attempt is retained.

Validation: client typecheck and compilation passed; the unfiltered Full-profile Copilot SDK/Agent Host integration and E2E gate passed with 779 passing, 41 pending, zero failing tests in 19m 54s. Both complete affected unit suites passed with 1,055 passing, 1 pending, and targeted lint passed. Gate history is typecheck failure → protected-file preflight failure → complete pass; all attempts remain retained. No intermittent failure or unresolved group was observed. Post-validation capture matches the committed tree. All four root/remote published manifests and lockfiles are byte-identical to the frozen baseline, and the driver-written candidate identity is unchanged.

Evidence limits: no isolated published-package control was staged or run; the private candidate overlay was never replaced. The API classification is independently corroborated by the exact upstream contracts, not inferred from another revision’s CI. Private source, prompts, packages, binaries and logs remain outside this PR; detailed commands and classifications are retained with the evaluation run.

Next action: the trusted source-evaluation publisher should publish the exact tested two-parent merge requested in the private handoff, retaining this never-merge draft for human review. This passing Linux overlay result does not establish cross-platform or signed-release compatibility. Ordinary PR CI uses published pins and cannot validate the overlay. No product build, release publication, ordinary bump revalidation, or ready promotion is requested.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 138.5 AIC · ⌖ 17.5 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-21

DO NOT MERGE. This remains a draft early-warning evaluation of an unpublished Linux source overlay, not a release-adoption PR. Human review is required even after a passing gate. Normal PR CI does not validate this overlay; no product build or ready promotion is requested.

Result: validated-adaptations; no new adaptations required. Integrated the exact frozen VS Code baseline 979a484d0cbbb0ebbbd8e6fe716eb0c2f9fa7ead without conflicts, preserving prior evaluation compatibility work and main's independent changes. The candidate manifest is unchanged, and all four root/remote published dependency manifests and lockfiles are byte-identical to that baseline. No compatibility code or fixtures were changed during this invocation.

The mandatory initial complete gate passed on the final source tree: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E, 779 passing, 41 declared pending, zero failures. It completed in 22m16s; no retry or narrower diagnostic contrast was necessary because no failure groups were observed. This does not claim coverage of Claude/Codex, other operating systems, or packaged release artifacts. Private package/source material and raw logs are not included in the public diff.

The tested tree is 2f8d9f07a0ac71c78784387f9a16fcbcfb920178. Local merge candidate 66be758be958ed82405f2f09dcf8eefb3fb9b360 has exactly the trusted prior PR head and frozen baseline as its two parents. A signed source-publication request and the human-review disposition were recorded for the trusted publisher; this is a request, not confirmation that publication has completed. Private provenance, gate evidence, and the empty failure-group report are retained with this evaluation run.

Next action: the trusted publisher should preserve this tested merge as the draft evaluation candidate; maintainers must review the Linux-only assessment without merging this PR or treating it as release approval.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 64 AIC · ⌖ 17.7 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-21 · run 39651303373

DO NOT MERGE. This remains a human-review-required draft evaluating an unpublished Linux artifact, not a release candidate.

The required first complete gate passed after cleanly integrating the exact frozen VS Code baseline 1052ebfeca2d94b10732171a507b1c63ea474d1a. Client typecheck and compilation passed; Full-profile Copilot SDK/Agent Host integration and E2E finished with 786 passing, 41 pending, and no failures. The gate took 19m 38s. There were no observed failure groups, new compatibility edits, or fixture changes in this invocation; no retry or diagnostic contrast was necessary.

The evaluated upstream source is f4ef9fed4469ceca780ac5024b6939055ac2139e. Existing justified compatibility changes were preserved. All four published dependency manifests/lockfiles remain byte-identical to the trusted baseline, and the driver-written candidate manifest is unchanged. The post-validation source-tree fingerprint matched the gate and final local merge tree: fdb7f061001bc6c498b8e1f95015b7f86760fcae.

Next action: the trusted signed publisher should preserve the exact tested two-parent baseline merge for inspection. The private evaluation artifacts retain provenance, complete gate logs, and the tree-bound investigation report. Human review remains mandatory; normal PR CI does not test this overlay, and this result establishes neither cross-platform compatibility nor release approval. No product build or ready promotion is requested. Prior evaluation history is retained above.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.9 AIC · ⌖ 17.7 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-21

DO NOT MERGE. Human review required; this remains an unpublished-artifact evaluation, not release or adoption approval.

Integrated the exact frozen VS Code baseline dee4420c5733ffa8bdfdc9b67cfb2883832d4ac1, preserving previous compatibility changes. The merge completed without conflicts. Published root/remote dependency manifests and lockfiles match that baseline byte-for-byte; candidate provenance is unchanged. No new compatibility edits, fixture changes, private source, or payloads were added by this evaluation.

The required initial gate passed on the final candidate tree: source publication policy, client typecheck, compilation, and the Full Copilot SDK/Agent Host integration/E2E selection. Result: 786 passing, 41 pending, zero failing, exit 0; total gate duration 20 minutes. Pending tests remain unvalidated coverage. No failing groups or suspected flakes required diagnostic contrasts or repetition, and no second complete gate was necessary because candidate source remained unchanged after validation. Private validation evidence and the tree-bound investigation report are retained in workflow artifacts.

The exact two-parent baseline merge is committed locally, and its trusted signed source-publication request is recorded. Next action: the trusted publisher should verify and publish that exact candidate to this labeled never-merge draft, then a human should review the evaluation. Normal PR CI cannot validate the private overlay. No product build, package publication, ready promotion, or merge is requested.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 58.6 AIC · ⌖ 19.9 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

Potential security threats were detected in the agent output.

Review the workflow run logs for details.

Linux source evaluation — 2026-10-21

DO NOT MERGE. This remains a draft evaluation of unpublished Linux artifacts, not a signed-release bump or adoption approval. Normal PR CI does not validate the private overlay.

Outcome: validated adaptations; human review required. Integrated the exact frozen VS Code baseline a403d0f7dcca0727353f838d89be6d7c682ea7c9, preserving prior compatibility work. The validated candidate is committed as the exact two-parent merge 237e4532bf0469d87a7649d1e4152c696b43487a; signed publication was requested through the trusted source-evaluation publisher. Published root/remote manifests and lockfiles, the candidate manifest, and installed overlay were left unchanged.

One resolved group — pre-existing baseline fixture drift, not an SDK/runtime defect. The initial gate stopped at client typecheck because the Fusion model-picker fixture supplied object-shaped autoModelFusion metadata, while that same frozen baseline declares a boolean and its production provider emits true. Updated only that fixture field to true, preserving tier choices, discounts, and assertions. The discriminating check was a comparison of the fixture, declared type, and production producer at the exact baseline; no published-package behavioral control was needed for this source-only inconsistency.

The initial failed attempt is retained. The final complete gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 786 passing, 41 pending under existing suite configuration, zero failing. Targeted fixture lint also passed. The complete passing attempt took 23m 11s and matches final source tree 9ac283f51c3221242550fee6abe5b7bb87865986. No behavioral failures, suspected flakes, or remaining open groups were observed; no retry-pass flake claim is made. Private logs and provenance remain in evaluation artifacts, not this PR.

Next action: human review of the exact-baseline integration and narrow fixture correction after trusted signed publication. Keep this PR draft and never merge it. No product build, package publication, ordinary CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 77.5 AIC · ⌖ 23.5 AIC · ⊞ 34.4K · ◷

Linux source evaluations

Latest assessment: validated-adaptations. The final candidate passed validation and all observed failure groups are resolved.

Classified groups: 1 expected adaptations; 0 upstream defects; 0 test/infrastructure flakes. Group counts are not failing-test counts.

A red gate alone does not establish an upstream regression, and a passing retry alone does not establish a flake. Detailed per-group mechanisms, evidence, repetition results, and next actions are in the linked private run's sdk-main-evaluation-result artifact; the agent's public-safe diagnosis is above. Unclassified, stale, or unfinished investigations stay incomplete even if a later gate passes. The PR always remains draft.

These results cover the private artifact overlay, not normal PR CI. Failed initial attempts are retained even when a subsequent fix passes. Unchanged candidates are deliberately evaluated again.

Evaluation	Upstream commit	Gate / investigation	Gate attempts
Run	`184d497f4d04`	passed / validated-adaptations	failed -> passed
Run	`02cdd90b1cdd`	passed / validated-adaptations	failed -> passed
Run	`cf3e0d38bfec`	passed / validated-adaptations	passed
Run	`f4ef9fed4469`	passed / validated-adaptations	passed
Run	`14854af47863`	passed / validated-adaptations	passed
Run	`90214db9ae71`	passed / validated-adaptations	failed -> failed -> passed
Run	`92a0dd6eb476`	passed / validated-adaptations	passed
Run	`e91e75f6b573`	passed / validated-adaptations	passed
Run	`e2d6073b82be`	passed / validated-adaptations	passed
Run	`4835fd7bbbb1`	passed / validated-adaptations	passed
Run	`38ce63b66be0`	passed / validated-adaptations	passed
Run	`38ce63b66be0`	passed / validated-adaptations	passed
Run	`3ab6a03a758e`	passed / validated-adaptations	passed
Run	`3ab6a03a758e`	passed / validated-adaptations	passed
Run	`3ab6a03a758e`	passed / validated-adaptations	passed
Run	`638eca2df179`	passed / validated-adaptations	failed -> failed -> passed
Run	`fd9cca0c7f69`	incomplete / investigation-incomplete	not-run
Run	`ca9b0cc0c1f8`	incomplete / investigation-incomplete	not-run
Run	`c5cc06007d7e`	incomplete / investigation-incomplete	not-run
Run	`38cbe0e4bb41`	incomplete / investigation-incomplete	not-run

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39705324200)

Assessment: validated adaptations; human review required. This PR remains draft and must never be merged. Evaluated upstream source 34cbe09d3bdc1ed2967527470ec5b61b21e857e5 on the exact frozen VS Code baseline bcabec8f47f4ee26af2ce8f38819769de6e9be23. The baseline merged cleanly while preserving earlier compatibility changes. The coherent candidate is committed locally as the exact trusted-head/baseline merge, and signed draft publication has been requested through the trusted publisher.

The initial complete gate passed client typecheck and compilation, with 783 passing, 41 pending, and three failing integration tests. All failures shared one mechanism: the runtime now intentionally includes the Codex-family model default text.verbosity: "medium" in Responses requests, while three whole-request fixtures omitted it. The actual requests otherwise matched, including prompt bodies, tool inventory/definitions, messages, and ordering; completed turns and workspace-instruction checks remained intact. The exact upstream model policy and native/SDK regression contracts independently establish the intended default and explicit-override precedence. This is expected fixture adaptation, not a product regression or diagnosed flake.

Updated all three affected fixtures (gpt-5-codex, gpt-5.1-codex, gpt-5.1-codex-mini): nine added standard JSON parameter lines, with no prompt-body changes, weakened assertions, production workaround, or private implementation content. The complete affected prompt entrypoint passed 24 tests. The final unfiltered Full-profile Linux gate then passed client typecheck, compilation, and 786 tests, with 41 pending and no failures. The measured gates took 23m53s initially and 22m45s finally; both attempts and the targeted command/results are retained privately. Final validated source tree: 194e22dab4b7b231a49f9c804adfd2cf4508213d.

All observed groups are resolved; no upstream defect or unexplained intermittence was observed. A same-revision isolated published-SDK control was not available and was not run: the candidate overlay was never replaced. Intendedness is instead corroborated by the exact-source contracts, unaffected model-family controls, the parameter-only differential, and the fixture-only diagnostic contrast. Root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline; the driver candidate manifest and installed private packages are unchanged. Private source, packages, binaries, prompts, and raw logs are not part of the new public diff.

Next action: trusted signed publication of the exact two-parent draft candidate, followed by human review of the classified fixture adaptation and private evaluation evidence. Passing this Linux overlay evaluation is not release/adoption approval. Keep DO NOT MERGE and draft status; no product build, package publication, ordinary CI retry, or signed-release revalidation is requested. Detailed evidence is retained with this private evaluation run.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 126.4 AIC · ⌖ 22.7 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39715866988)

Assessment: clean Linux evaluation; human review required. This PR remains draft and must never be merged. Evaluated upstream source 2ba8a5077886b1d951978a0779b1af46f08da958 against frozen VS Code baseline f2103684f1a3616f066e0e20a03d55713217c9df. The baseline merged cleanly, preserving prior justified compatibility changes. No new compatibility edits or fixture changes were necessary.

The required first complete, unfiltered Full-profile Linux gate passed client typecheck, compilation, and 786 integration tests, with 41 pending and zero failures, in 18m36s. Coverage includes Agent Host conformance, all Copilot provider E2E entrypoints, Copilot SDK provider integration, and top-level Copilot SDK integration. No failure groups or suspected flakes were observed, so no diagnostic contrasts, repetitions, or isolated published-SDK control were needed. The unchanged gate evidence and empty failure-group report are retained privately with this evaluation run. This does not validate Windows/macOS or establish release readiness.

Final validated source tree: d8c85afb0e07ae28111369b4c76ab0ecbc55965e. The coherent candidate is committed locally as 884ec3d5416d87314e51f469c60231c53a2ded0e, with exactly the trusted original PR head and frozen baseline as its two parents. Post-commit tree capture matches the successful gate. Root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline; the driver-written candidate manifest and installed private overlay were not modified. No private source, binaries, packages, prompt bodies, or raw logs were added to the public candidate.

Next action: trusted signed publication of the exact validated two-parent candidate, then human review of the private evaluation evidence. The merge request and human-review-required disposition have been recorded. Passing this Linux overlay gate is not adoption approval; normal PR CI uses published pins and cannot validate this overlay. Keep DO NOT MERGE and draft status. No product build, package publication, CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 43.9 AIC · ⌖ 14.7 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-22

Caution

DO NOT MERGE. This remains a source-evaluation draft, not a release bump or adoption approval.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline c8f3fd17f6b3caad6ccf9dec1fc45b5e155c16c2 with the trusted original PR head as a two-parent merge, preserving prior compatibility changes. Candidate provenance matches upstream source 2c11a667a850113f15671a6649d678e81c20c774 and its selected Linux artifact. No new compatibility edits or fixture updates were necessary; all four published dependency manifests and lockfiles remain byte-identical to the frozen baseline.

The first complete gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 786 passing, 41 pending, no failures. It completed in 24m 39s. No failure groups or suspected flakes were observed in this invocation, so no diagnostic contrasts or repeat samples were needed. The validated source tree is 8e4cb6d45898acabb29ea7a36157520e68f45976; committing the candidate did not change that tree. This result does not erase earlier evaluations or establish coverage of pending tests or other platforms.

Next action: apply the recorded exact-tree merge request through the trusted signed publisher, then review the private evaluation evidence from this run. The investigation report and human-review-required disposition are recorded. Normal PR CI uses published pins and cannot validate this private overlay. Keep this PR draft and never merge it; no product build, package publication, CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 46 AIC · ⌖ 20 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39731829580)

Caution

DO NOT MERGE. This rolling source-evaluation PR must remain draft. This is not a signed release bump or adoption approval.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline 588b57eae964fae5ccf74e891ebad201383ce75e with trusted PR head 582198718d3c2985a1f4f37284d0245bbf7166f6 as one two-parent merge candidate. Candidate provenance matches the selected upstream source and Linux artifact. No new compatibility edits or fixture changes were necessary. Prior compatibility work and independent baseline changes are preserved; all four published dependency manifests and lockfiles remain byte-identical to the frozen baseline, and the driver-written candidate manifest is unchanged.

The first complete gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 786 passing, 41 pending, zero failures. It completed in 18m 29s. No failure groups or suspected flakes were observed in this invocation; no diagnostic contrasts, targeted repetitions, or additional complete gate were needed. The validated source tree is 0c9053db0600b91e59b793fefbe9f8e02d4ed5ab; committing the candidate preserved that tree. This result does not establish coverage of pending tests or other platforms and does not supersede the retained evaluation history.

Next action: apply the recorded exact-tree merge request through the trusted signed source-only publisher, then review the private evidence from this evaluation run. The tree-bound investigation report, original gate logs, and human-review-required disposition are retained privately. Normal PR CI uses published pins and cannot validate the private overlay. Keep this PR draft and never merge it. No product build, package publication, CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 51.8 AIC · ⌖ 17.5 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39735847240)

This PR must never be merged. Keep this labeled draft human-review-required. This evaluates unpublished Linux source artifacts, not a signed release. Normal PR CI does not validate the private overlay.

Result: passing Linux gate; no observed failure groups. Evaluated upstream source 2c11a667a850113f15671a6649d678e81c20c774 against frozen VS Code baseline bdce63db587665a91d1f1237b807d43471f0d9bc. The mandatory first complete gate passed client typecheck, compilation, and 786 integration tests, with 41 pending and zero failures, in 21 minutes 58 seconds. Coverage includes Full-profile Agent Host conformance, all Copilot provider E2E entrypoints, prompts, managed settings, SDK/provider integration, and both telemetry layers. No new compatibility changes or fixture updates were necessary. There were no observed failures or suspected flakes requiring classification, discriminating controls, or repeated samples; no published-SDK comparison was needed to diagnose a failure.

The exact frozen baseline integrated without conflicts, preserving main's independent work and prior compatibility changes. Local merge candidate 5c07fc8bf856ca2aec95dcb690bc421ad6e9fd02 has exactly trusted PR head 70c33bf371f7a747128bf1900e6d40cb81d86d3a and the frozen baseline as its two parents. Its final tree a42b7e86e13b7c2a22d902269327994ca3923dc1 matches the gate fingerprint and post-validation/post-commit captures. All four published dependency manifests and lockfiles remain byte-identical to the trusted baseline. The driver-written candidate manifest is unchanged and matches the trusted provenance; installed packages were neither edited nor replaced. No private source, prompt bodies, packages, binaries, or logs were added to the public candidate.

Next action: the trusted publisher should apply the requested exact-tree signed source-only baseline merge, followed by human inspection. The publication request, human-review disposition, empty-group investigation report, and complete first-attempt evidence are retained with this evaluation run. No observed Linux blocker remains, but this is not cross-platform validation, release approval, or permission to merge. Do not dispatch product-build or signed-release validation, and never mark this PR ready.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 59.1 AIC · ⌖ 17.7 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39752537852)

This PR must never be merged. Keep this labeled source-evaluation draft human-review-required. This is not a signed-release bump or adoption approval. Normal PR CI does not validate the private overlay.

Outcome: validated-adaptations; human review required. The mandatory first complete Linux gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E: 786 passing, 41 pending, zero failures, in 21m 46s. No failure groups or suspected flakes were observed, so no discriminating controls, targeted repetitions, or second complete gate were needed. No new compatibility edits or fixture updates were necessary. Pending tests and other platforms remain outside this passing result.

Integrated exact frozen VS Code baseline 4df8bb183f0e984e97d8f4200c802c49061d7d3c without conflicts, preserving independent baseline work and prior compatibility changes. Local candidate 7ccd81dade27d9c1f3437d86c28327e4695abd04 has exactly trusted original PR head 2e3bba0d2f947a0585d714f424a9b256b074b95d and that baseline as parents. Final source tree 6a5ebea487bf49091233aeabd4f26af4e3fe75c2 matches the complete gate and post-validation/post-commit captures. All four published dependency manifests and lockfiles remain byte-identical to the trusted baseline; candidate provenance is unchanged and matches the selected upstream source and Linux artifact. Installed packages were not edited or replaced. No private SDK/runtime source, prompt bodies, binaries, packages, or logs were added to the public diff.

Next action: apply the recorded exact-tree merge request through the trusted signed source-only publisher, then inspect the private evaluation evidence from this run. The tree-bound investigation report has an empty group list; the human-review disposition and complete first-attempt evidence are retained. This passing observation does not erase earlier evaluation history or approve release adoption. Keep the PR draft and never merge it. No product build, package publication, CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 41.3 AIC · ⌖ 21.9 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-22 (run 39762514076)

DO NOT MERGE. This remains a draft source-evaluation candidate, not release or adoption approval. Normal PR CI does not exercise the private overlay.

Outcome: validated-adaptations; human review required. Evaluated source 4d9aff04f11900a1316c84a760afcfb4dae44b06 against frozen VS Code baseline 818341a41f15dd781888645df4915cbac604c5f6. The first complete Full-profile Linux gate passed client typecheck, compilation, and the Copilot SDK/Agent Host conformance, provider integration, and E2E matrix: 786 passing, 41 pending, zero failures. The complete gate took 22 minutes 6 seconds. No failures, new fixture deltas, or new compatibility adaptations were observed, so no targeted repetition or published-package control was needed for a failure diagnosis.

Integrated the exact baseline without conflicts, preserving main's independent work and the prior compatibility changes. Local candidate 854fb0b761b2e66719881ec3dee6514e2c8184bc is one merge with exactly the trusted PR head and baseline as parents; its final source tree f55bfc20f47f6cc2eb7e0347784847c36fe0348a matches the gate. Published root/remote dependency manifests and lockfiles remain byte-identical to that baseline. Candidate provenance and installed packages were not modified. No private source, prompt bodies, packages, binaries, or logs are added to the public diff.

Next action: the trusted publisher should sign and publish the preserved baseline merge using the recorded merge request. Gate evidence and the tree-bound investigation remain in this run's private artifacts. Keep the warning and evaluation history, retain draft status, and require human review; do not request a product build, ordinary bump revalidation, or merge.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 62.3 AIC · ⌖ 20.3 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39772017847)

DO NOT MERGE. This source-evaluation PR must remain draft and human-review-required. This is not release or adoption approval; normal PR CI does not exercise the private overlay.

Outcome: validated-adaptations; human review required. The mandatory first complete Linux gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host conformance, provider integration, and E2E: 786 passing, 41 pending, zero failures, in 22m 31s. No failure groups or suspected flakes were observed. No new compatibility edits or fixture changes were needed; no failure required targeted repetition, a published-package control, or a second complete gate. Pending tests and other platforms are not covered by this passing result.

Integrated the exact frozen VS Code baseline ff0a86dcf10ab91c1ff4e3091cb1ea91b2428a4b without conflicts, preserving independent baseline work and prior compatibility changes. Local candidate 092a2988f3cff08ef012f5e4c6e6fb37902bd02e is exactly one merge with trusted original PR head 9eea04fd81ec5a11e7c71b1712d44f197c6b5391 and that baseline as parents. Its final source tree 96b36f6147319b70c34a6a854532406169450f63 matches the complete gate and post-commit capture. Candidate provenance matches the selected source/artifact; installed SDK/runtime package fingerprints remain unchanged. All four published dependency manifests and lockfiles remain byte-identical to the trusted baseline. No private source, unpublished prompt bodies, binaries, packages, or logs were added to the public diff.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request, then reviewers should inspect the private evaluation evidence from this run. The tree-bound investigation report has an empty group list; the readiness disposition remains human-review-required. This observation preserves rather than replaces earlier evaluation history. Keep the PR draft and never merge it. No product build, package publication, CI retry, or signed-release revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 58.5 AIC · ⌖ 17.2 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39778394839)

DO NOT MERGE. This rolling source-evaluation PR must remain draft and human-review-required. Passing local evaluation is not release or adoption approval; normal PR CI does not exercise the private overlay.

Outcome: validated-adaptations; human review required. Evaluated the selected upstream source 13a4497c9818c5bda935cbeb475da4ea5861e355 on frozen VS Code baseline b88fd9748e3ee875e55c3096e3593922d2641db9. The mandatory initial gate failed during client typecheck after 45 seconds: the candidate's history-export test constructed an incomplete launch snapshot after main's multi-root customization change. Main now requires discovered-agent and additional-root-instruction arrays; that candidate-only mock omitted both. This is an expected VS Code baseline-integration adaptation, not evidence of an SDK/runtime regression.

Completed the mock with the same empty arrays used by adjacent launcher tests. All functional assertions remain intact, including export opt-in, create/resume/fallback handling, sandbox-before-export ordering, and failure logging. The complete launcher unit suite passed 190 tests. The subsequent complete Full-profile Linux gate passed client typecheck, compilation, and Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 20m54s. Both gate attempts and the focused test logs are retained privately. No runtime failure, suspected flake, or new fixture delta was observed. The discriminating evidence is main's required interface plus the incomplete candidate-only mock; no published-package runtime substitution was needed for this compile-time diagnosis. Pending tests and other platforms are not approved by this result.

Integrated the exact frozen baseline, preserving its independent changes and the prior compatibility work. Local candidate 0f5472376da3cb703bf5342385d7e6fe3e1b7f14 is exactly one merge with trusted original PR head 64fa533d0451c44398fb5bfb611c650348154ba1 and the frozen baseline as parents. Final tree e829aa106aa86acdd5d42e7a80dac0582fad16bb matches the passing gate, focused validation, and post-commit capture. All four published dependency manifests and lockfiles remain byte-identical to the baseline. The candidate manifest and installed overlay packages were not modified. No private source, unpublished prompt bodies, binaries, packages, or logs were added to the public diff.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request. Review the private evidence from this run; the tree-bound investigation records one resolved expected adaptation and no open failure groups. Preserve the evaluation history, warning, label, and draft status; never merge this PR. No product build, package publication, CI retry, or ordinary signed-bump revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 69.8 AIC · ⌖ 17.2 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-22

DO NOT MERGE. Human review required. This remains an unpublished-artifact, Linux-only early-warning evaluation, not release or adoption approval. Ordinary PR CI uses published pins and cannot validate the private overlay.

Integrated the exact pinned VS Code baseline c88677d9afc183ef856a4ea3d411464212cc5c61 with the existing evaluation candidate, preserving prior compatibility work. The baseline merged without conflicts. All four dependency manifests/lockfiles remain identical to that baseline, and the candidate identity manifest is unchanged. No additional compatibility edits or fixture updates were required.

The required first complete gate passed client typecheck, compilation, and Full Agent Host conformance, Copilot provider E2E, and Copilot SDK integration: 787 passing, 41 pending, zero failures, in 22m 23s. No failure groups, targeted retries, or suspected flakes were observed during this invocation. Existing pending tests were not changed. The post-validation source fingerprint matched the gate fingerprint and the committed candidate tree; no second gate was necessary because source contents did not change. Private logs and provenance remain in private evaluation artifacts.

Local candidate 520a8360714301ed1a681d52ae4f9b157081fbe3 is one merge with exactly the trusted original PR head and pinned baseline as parents. A trusted signed-publication request and tree-bound investigation report have been recorded. Next action: the trusted publisher applies that candidate to this never-merge draft, then a human reviews the Linux evaluation evidence. No product build, publication of the private packages, ordinary bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 57.8 AIC · ⌖ 17.5 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39792622183)

DO NOT MERGE. This rolling source-evaluation PR must remain draft and human-review-required. This is a Linux-only observation of unpublished artifacts, not release or adoption approval. Normal PR CI uses published pins and cannot validate the private overlay.

Outcome: validated-adaptations; human review required. The mandatory first complete Linux gate passed client typecheck, compilation, and Full-profile Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 20m33s. No failure groups, suspected flakes, new compatibility edits, or fixture deltas were observed in this invocation. No targeted repetitions, published-package control, or second complete gate was needed because no failure occurred and the source tree did not change after validation. Pending tests and other platforms are not approved by this result.

Integrated the exact frozen VS Code baseline f7ba13c293442d0f429f433d3b462938ec2ac8eb without conflicts, preserving independent baseline work and prior compatibility changes. Candidate provenance matches upstream source e0a88c3dd2ad4e1b48201c0966058842b8237da1. Local candidate 0d49ddf142ef6655a505f56636c4fe3b389d874c is exactly one merge with trusted original PR head fee469db2ee3bfdfb4d86977d0067f1288be92ca and the frozen baseline as its two parents. Final source tree ba9839239ab50752273d7f88071ee51fa8b99530 matches both the complete gate and post-commit capture.

All four published dependency manifests and lockfiles remain byte-identical to the trusted baseline. The driver-written candidate manifest and installed SDK/runtime overlay fingerprint are unchanged. No private source, unpublished prompt bodies, binaries, packages, or logs were added to the public diff. Gate logs, artifact provenance, and the tree-bound investigation report with an empty failure-group list remain private evaluation evidence.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request, then a human should review the private evidence from this evaluation. Preserve all prior evaluation history, the warning and label, and draft status; never merge this PR. No product build, private-package publication, CI retry, ordinary bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 53.1 AIC · ⌖ 17.3 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39812455891)

DO NOT MERGE. This rolling Linux source-evaluation PR must remain draft and human-review-required. A passing evaluation is not release or adoption approval. Ordinary PR CI uses published pins and cannot validate the private overlay.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline 973a0ca8a9a70e38af922e446029971cf81ea0f0 without conflicts, preserving its independent work and prior compatibility changes. Candidate provenance matches upstream source 9438eb9ac7553dd35c530da5e05afe35060ebc00.

The mandatory first complete gate passed client typecheck and compilation, then reported 786 passing, 41 pending, and one schema snapshot failure, in 19m35s. The first divergent observable was the managed-settings schema RPC response: the runtime intentionally adds extension-process sandbox routing metadata and includes it in the existing managed-policy composition description. The frozen fixture did not contain that additive contract. Exact-source settings-resolution and extension-launch code, together with the corresponding upstream contract tests, corroborate the intended default and managed-policy precedence. This is an expected fixture adaptation, not evidence of a runtime regression. Only the schema fixture changed: 8 additions, 1 deletion. No host behavior, permissions, configuration, assertions, startup sequence, or timeout was changed.

The complete affected managed-settings suite passed 11 tests. The subsequent complete Full-profile Linux gate passed typecheck, compilation, Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 18m28s. The fixture-only contrast used unchanged SDK/runtime packages. A same-baseline published-package control was not run because no isolated control was prepared; contract and artifact evidence independently establish this schema-only adaptation. No suspected flake or open failure group remains. Existing pending tests and other platforms are not approved by this result. Both complete gate attempts and focused evidence are retained privately.

Local candidate 3a1bd2c98e1e9c2556d788c9956a1c3c89f73bc9 is exactly one merge with trusted original PR head 834d910a351e5a26d7bd770657a037b6446742d9 and the frozen baseline as its two parents. Final tree 428ae9c82542f66596d07460fcb67e06e3fd98ba matches the passing gate, focused validation, and post-commit source capture. All four published dependency manifests and lockfiles remain byte-identical to the trusted baseline. The candidate identity manifest and installed overlay fingerprint are unchanged. No private implementation excerpts, unpublished prompt bodies, binaries, packages, or logs were added to the public diff.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request; a human should review the private evidence from this evaluation. The tree-bound investigation records one resolved expected adaptation and no open groups. Preserve the warning, evaluation history, label, and draft status; never merge this PR. No product build, private-package publication, CI retry, ordinary signed-bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 82.2 AIC · ⌖ 17.6 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39850936040)

DO NOT MERGE. This rolling source-evaluation PR must remain draft and human-review-required. A passing Linux overlay evaluation is not release or adoption approval. Ordinary PR CI uses published dependency pins and does not validate the private candidate.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline 4d426ab3ecd4b82d503594e74480157dbf7038c8 without conflicts, preserving main's independent work and prior compatibility changes. The driver-written candidate manifest matches upstream source 6593eb7e7a6cc9c1f614e95eedd7a40a56b5e464 and the prepared artifact provenance; it was not changed.

The mandatory first complete Full-profile Linux gate passed client typecheck, compilation, Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 21m50s. No failure groups, suspected flakes, new compatibility changes, or fixture refreshes arose in this invocation. No diagnostic startup changes, weaker assertions, arbitrary waits, or package modifications were used. No second complete gate was needed because the source remained unchanged. Existing pending tests and other platforms are not approved by this result. A same-baseline published-package control was not run; there was no observed failure requiring a discriminating control. Complete command and result evidence remains in the private evaluation artifacts.

The preserved local candidate e9f367fe94ce3a49f446caba2d2aa2559873cc1c is exactly one merge with trusted original PR head a5a4b6ad7edd4ba92368ad3c3ccc608579594417 and the frozen baseline as its two parents. Final tree f9e1b8f2de5b86fddf88829775002d5428d9cfb0 matches both the passing gate and post-commit source capture. All four root/remote published dependency manifests and lockfiles remain byte-identical to the trusted baseline and provenance fingerprints. No private SDK/runtime implementation, unpublished prompt bodies, binaries, packages, or logs were added to the public diff.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request, then a human should review the retained evidence from this evaluation. The tree-bound investigation has an empty failure-group list. Preserve the warning, evaluation history, label, and draft status; never merge this PR. No product build, package publication, CI retry, ordinary signed-bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 54.5 AIC · ⌖ 19.9 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-22 (run 39858878821)

DO NOT MERGE. This rolling source-evaluation PR must remain draft and human-review-required. A passing Linux overlay evaluation is not release or adoption approval. Normal PR CI uses published pins and cannot validate the private candidate.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline 71f2ab47f0d7ca825f32a8aecd43a404d0a6cfc9, preserving independent main changes and prior justified compatibility work. The driver-written candidate manifest matches source 44985f37adde5898554d6f1364cb997c7cd6314c and its artifact provenance and remains unchanged.

Observed group — resolved baseline-integration adaptation. Two textual test conflicts were reconciled without losing assertions that retired SDK options remain absent. The mandatory first gate then exposed a semantic merge incompatibility: main had intentionally retired Agent Host session sync, while this branch retained the replacement post-launch export call and its tests. Imports and schema removal merged cleanly, leaving two undefined-setting typecheck errors. This is an obsolete VS Code integration, not evidence of an upstream runtime defect. Removed that export call rather than restoring the retired setting or enabling export unconditionally. Nine create/resume/fallback checks now verify that default, false, and true stale legacy configuration cannot activate export; scoped-credential coverage also verifies no export while preserving workspace discovery, configured tools, BYOK, and host policy assertions. The baseline's explicit retirement and the concrete compiler errors independently establish the required adaptation.

Validation: initial gate failed in typecheck after 47 seconds and remains archived. Complete affected launcher and agent unit suites passed 1,084 tests, 1 pending; changed-file ESLint passed. The subsequent complete, unfiltered Full-profile Linux gate passed source publication policy, client typecheck, compilation, Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 20m29s. No new fixture refresh, weakened functional assertion, diagnostic startup workaround, arbitrary wait, package modification, or reinstall was used. No intermittent failure was observed or claimed; the retry followed an intentional source repair. No further full gate was needed because the validated source stayed unchanged. Existing pending tests and other platforms are not approved by this result. A published-package runtime control was not run because the only failure was the independently verified baseline merge incompatibility; this does not establish runtime equivalence with the published package.

Preserved local candidate 7ecb990820383dc8cd1422ac65a3894f18203d74 is exactly one merge with trusted original PR head 39cbc473876bf8517857e0d0b125c5d5fc56ef8e and the frozen baseline as its two parents. Tree d403f18e37f14ebc3b56aeae93f8bb2ec3d83340 matches both the passing gate and post-commit capture. All four root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline and provenance fingerprints. No private implementation, unpublished prompt bodies, binaries, packages, or logs were added to the public diff. Detailed commands, attempt results, and the resolved group's causal evidence remain in private evaluation artifacts.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request, followed by human review of this evaluation's evidence. Preserve the warning, evaluation history, never-merge label, and draft status; never merge this PR. No product build, package publication, CI retry, ordinary signed-bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 91.2 AIC · ⌖ 15.6 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-22 (run 39866373976)

DO NOT MERGE. This rolling source-evaluation PR must remain draft and human-review-required. Passing Linux overlay checks are not release or adoption approval. Normal PR CI uses published pins and cannot validate the private candidate.

Outcome: validated-adaptations; human review required. Integrated the exact frozen VS Code baseline c024bfb636e6db359ca29775b88c819866c84863 without conflicts, preserving main's independent work and prior compatibility changes. Candidate provenance matches the trusted source/artifact identity; the driver-written manifest remains unchanged.

The mandatory first complete Linux gate passed publication policy, client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host conformance, provider integration, and E2E: 787 passing, 41 pending, zero failures, in 24m41s. No failure groups or suspected flakes arose, and no new compatibility edits or fixture refreshes were necessary. No assertions, startup configuration, installed packages, or functional expectations were changed. A second gate was unnecessary because the tested source remained unchanged. No same-baseline published-package control was run because there was no observed failure requiring a discriminating control; this does not establish package equivalence. Pending tests and other platforms are not approved by this result.

Preserved local candidate c62e3808de26afcd2102adc607af7eee22a0f273 has exactly the trusted PR head a3e46857ca8eff30a0352f2e825a4120b23fb6c3 and frozen baseline as its two parents. Tree bf92f19c4bbc153aaa2efb101eff59f8b474aa73 matches the passing gate and post-commit source capture. All four root/remote published manifests and lockfiles remain byte-identical to the trusted baseline. No private implementation, unpublished prompt bodies, packages, binaries, or logs were added to the public diff. The tree-bound private investigation has an empty failure-group list; complete gate evidence is retained in the evaluation artifacts.

Next action: the trusted signed source-only publisher should apply the recorded exact-tree merge request, followed by human review of this evaluation's evidence. Publication is requested, not yet confirmed. Preserve the warning, evaluation history, never-merge label, and draft status; never merge this PR. No product build, package publication, CI retry, ordinary bump revalidation, or ready promotion is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 66.7 AIC · ⌖ 17.5 AIC · ⊞ 34.4K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-23

DO NOT MERGE. This remains a never-merge draft evaluating an unpublished Linux overlay, not a release bump or adoption approval. Human review is required.

Evaluated source 22bd23438fbf030f1a327b92393fafc22c13405d against frozen VS Code baseline 8c643aa26a949a1ed2c00a7830357e4a580954e0. Integrated that exact baseline while preserving its independent work and prior compatibility changes. The candidate is committed as the required two-parent merge; the signed source-publication request is recorded for the trusted publisher.

Outcome: validated adaptations, pending human review. The required initial gate passed client typecheck and compilation, with 786 passing, 41 pending, and one failing integration test. The sole group was an expected schema-fixture adaptation: the runtime's schema RPC documents an intentional managed-model alias, while the old fixture lacked that description. Exact-source schema, normalization behavior, and upstream tests corroborated intendedness. The only new compatibility edit is that one-line API-description fixture refresh; no product behavior, functional assertions, tool budget, or prompt fixtures changed.

The complete affected managed-settings suite then passed 11 tests. The final unfiltered Full-profile gate passed client typecheck, compilation, and 787 integration tests, with 41 pending and zero failures. The first and final gates took 25m34s and 21m22s respectively; the failed initial attempt is retained. No unresolved failure groups or diagnosed flakes remain. Final validated source tree: 799ad5b31dd9e1f75a3374e4972b2eb2caa3d8e4.

All four published dependency manifests/lockfiles remain byte-identical to the trusted baseline; candidate provenance and the private overlay are unchanged. No private implementation, prompt bodies, packages, binaries, or logs are included in the public diff. Detailed evidence is retained in this evaluation run's private artifacts.

Next action: human review of the classified fixture and evaluation evidence after trusted signed publication. Keep this PR draft and never merge it. Ordinary PR CI uses published pins and does not validate the overlay; no product-build or release-publication validation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 91.2 AIC · ⌖ 20.5 AIC · ⊞ 35.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation — 2026-10-23 (run 39880002943)

DO NOT MERGE. This is an unpublished Linux source-overlay evaluation, not a release bump or adoption approval. Keep this rolling PR draft; human review is required.

Evaluated source 58aea4c404bec46e29c26c80317c83b22a12402a against frozen VS Code baseline db3dcbf51a0c9e711a5f29944f172d00d7df6edb. Integrated that exact baseline without conflicts, preserving its independent changes and prior compatibility work. Committed the candidate as the required two-parent merge and recorded the trusted signed source-publication request; no ordinary branch push was requested.

Outcome: validated adaptation, pending human review. The required initial gate passed client typecheck and compilation, with 786 passing, 41 pending, and one failing integration test. The sole failure group was an expected request-fixture adaptation: the runtime intentionally changes the Opus 5.5 output-token cap. The first divergence was the serialized request's numeric limit, before model-response consumption. Exact-source policy and explicit upstream contract tests corroborate intendedness; the entire snapshot comparison contained only that one scalar change. Prompt bodies, tool inventory, ordering, cache boundaries, replay responses, and functional assertions were unchanged. No upstream defect or flake was inferred.

Updated only the existing fixture's numeric request limit. The complete affected prompt suite passed 24 tests. The final unfiltered Full-profile gate passed client typecheck, compilation, and 787 integration tests, with 41 pending and zero failures. The initial and final gates took 20m34s and 19m02s, respectively; the failed initial attempt is retained. No unresolved failure groups remain. Final tested source tree: 65c8c086cf7f8d7f3d589e48be9bb1d83a95ad77.

Evidence limitation: no separate same-baseline published-SDK execution control was available in the prepared checkouts; both installed trees contain the immutable candidate overlay and were never replaced. The classification rests on the exact-source contract, explicit upstream test assertions, unchanged catalog/configuration, the one-field request contrast, and targeted plus complete validation—not CI from another revision.

All four published dependency manifests/lockfiles remain byte-identical to the trusted baseline, and the driver-written candidate identity is unchanged. No private source excerpts, new private prompt bodies, binaries, packages, or logs were added to the public diff. Detailed grouped evidence is retained in this evaluation run's private artifacts.

Next action: trusted signed publication of the recorded candidate, followed by human review of the classified fixture adaptation and private evidence. Keep this PR draft and never merge it. Normal PR CI tests published pins, not this overlay; no product build, package publication, or ordinary bump revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 106.7 AIC · ⌖ 20 AIC · ⊞ 25.9K · ◷

(Written by Copilot)

Linux upstream-main evaluation - 2026-10-23

Caution

DO NOT MERGE. This remains a draft, source-only evaluation requiring human review, not release approval.

Evaluated candidate source fbf5ff1803d17b941d8e0710c7d97beafd5d3834 against the frozen VS Code baseline 8159c00b2e71eedd1abffcaac36cc3582785ca06. Integrated that baseline cleanly with the prior evaluation head, retaining existing compatibility work. No new compatibility changes or fixture updates were necessary; no failures were observed, so there are no unresolved failure groups or flake claims in this invocation.

The required first complete gate passed client typecheck, compilation, and Full-profile Copilot/Agent Host integration and E2E: 787 passing, 41 pending, zero failures; exit 0, in 21 minutes 9 seconds. One complete attempt was run; no diagnostic contrasts or retries were needed. The final committed source tree matches the validated fingerprint. Published root/remote manifests and lockfiles remain byte-identical to the frozen baseline, and candidate provenance is unchanged. Private packages, source, prompts, and logs are not included in the candidate diff.

Next action: the trusted publisher must publish the exact tested two-parent merge, followed by human review of this never-merge draft and its private evaluation evidence. No ordinary CI retry, product build, release publication, or ready promotion is requested. These results cover only the isolated Linux source overlay; normal PR CI uses published pins and cannot validate it. Evidence: evaluation run.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 47.4 AIC · ⌖ 17.3 AIC · ⊞ 25.9K · ◷

(Written by Copilot)

Linux source evaluation — run 39903197387

DO NOT MERGE. Human review required; this is not release or adoption approval.

Integrated the exact frozen VS Code baseline a57ca762e62475ed8fc64b5aec67485c06766141 with the trusted evaluation head in one two-parent merge, preserving main's independent work and prior compatibility adaptations. No new compatibility changes or fixture updates were necessary. Published root/remote dependency manifests and lockfiles are byte-identical to the trusted baseline; candidate provenance is unchanged. No private source, prompts, packages, binaries, or logs were added to the public diff.

The required first complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E, 787 passing, 41 existing pending, zero failures. Duration: 25m 33s. Every selected suite completed; no assertion was weakened or test newly skipped. No failure groups or suspected flakes were observed, so no differential baseline control or targeted repetition was needed. Validation and the private investigation report match final tree c30ef1165dc282993c51fa49c7596122edc0845c.

Next action: trusted signed publication of the exact tested baseline merge was requested through the dedicated merge handoff, followed by human review of this never-merge draft and its private evaluation evidence. Publication is not yet confirmed by this agent. No ordinary CI retry, product build, release publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this isolated Linux overlay.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 72.2 AIC · ⌖ 14.6 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — run 39907869807

DO NOT MERGE. Human review required; this is not release or adoption approval.

Integrated the exact frozen VS Code baseline 2bc7d5ab6919c62e60379e5e1f840bd80846dbdb with the trusted evaluation head in one two-parent merge, preserving main's independent changes and prior compatibility work. Evaluated upstream source ad9082672db0310361ed458430aa755fb2b92dc4. No new compatibility changes or fixture updates were necessary. All four published root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline; candidate provenance is unchanged. No private source, prompt bodies, binaries, packages, or logs were added to the public diff.

The required first complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E, 787 passing, 41 existing pending, zero failures; exit 0, in 21m 48s. No failure groups or suspected flakes were observed, so no diagnostic contrasts, baseline-control execution, or targeted repetition were needed. No assertions were weakened or tests newly skipped. Gate evidence, post-validation capture, and the final committed tree agree: f141be4e61c828d67d63da995a2ef333e928a584. The private investigation report contains an empty failure-group list.

Next action: trusted signed publication of the exact tested baseline merge has been requested through the dedicated merge handoff, followed by human review of this never-merge draft and its private evidence. Publication is not yet confirmed by this agent. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this isolated Linux overlay.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 48.9 AIC · ⌖ 17.6 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation - run 39917763841

DO NOT MERGE. Human review required; this is not release or adoption approval.

Integrated frozen VS Code baseline eeedb17b5b859c64729f99497de55df609c267c5 with the trusted evaluation head in one two-parent merge, preserving main's independent Connector reconciliation work and prior justified compatibility changes. Evaluated upstream source 6fe0cad596427c5b4a80b2768e6d986249751997. No new compatibility changes or fixture updates were necessary. All four published root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline; the driver-written candidate manifest is unchanged. No private source, prompt bodies, binaries, packages, or logs were added to the public diff.

The required first complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E, 787 passing, 41 existing pending, zero failures; exit 0, in 21m 57s. No failure groups or suspected flakes were observed; no baseline-control execution, diagnostic contrasts, targeted repetitions, assertion changes, or new skips were needed. The private investigation report contains an empty group list. Gate evidence, post-validation capture, and the final committed source tree agree: 2b60405098520e868ffa49ec3d5b6141a12ac0af.

Next action: trusted signed publication of this exact tested baseline merge has been requested through the dedicated merge handoff, followed by human review of this never-merge draft and its private evidence. Publication is not yet confirmed by this agent. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this isolated Linux overlay. This passing assessment is Linux-only and is not adoption approval.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 60.2 AIC · ⌖ 17.5 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — run 39928367895

DO NOT MERGE. This remains a never-merge draft evaluating an isolated unpublished Linux SDK/runtime overlay, not a signed-release adoption candidate. (Written by Copilot)

Integrated the exact pinned VS Code baseline 53b7b197990e6d9354dba0e42cce9b34d7c56c5c into the trusted evaluation head 055b16f9db5e94b6578ab83a6a4841648aa7eee3. The merge was conflict-free and preserves main’s independent work and prior compatibility changes. No new compatibility edits or fixture changes were necessary. All four dependency manifests/lockfiles remain byte-identical to that baseline; the driver-written candidate manifest and installed overlay were not changed.

The required first complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 existing pending, zero failures, exit 0, in 21m 53s. No failure groups or suspected flakes were observed, so baseline-control execution, diagnostic contrasts, and targeted repetitions were unnecessary. No assertions were weakened or tests newly skipped. Private investigation evidence records an empty group list. Gate evidence, post-validation capture, and final committed candidate agree on source tree 0f1ec4704eaf031e4b2b821c0701fc9b9826de3e.

Next action: trusted signed publication of this exact tested merge has been requested via the dedicated merge handoff, followed by human review of this never-merge draft and private evidence. Publication is not yet confirmed by this agent. Disposition remains human-review-required; this passing Linux-only evaluation is not release approval. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this overlay.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 39.2 AIC · ⌖ 17.3 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation - run 39965826912

DO NOT MERGE. Human review required; this remains a never-merge draft, not release or adoption approval.

Integrated frozen VS Code baseline 6622390464a4c2920fba265ead970e1b34a41b59 with the trusted evaluation head in one conflict-free two-parent merge, preserving main's independent work and prior compatibility changes. Evaluated upstream source ea5598ab61e148f87cd048816086df940598074a. No new compatibility changes or fixture updates were necessary. All four published root/remote dependency manifests and lockfiles remain byte-identical to the baseline; the driver-written candidate manifest and installed overlay are unchanged. No private source, prompt bodies, binaries, packages, or logs were added to the public diff.

The required first complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E, 787 passing, 41 existing pending, zero failures; exit 0, in 21m 38s. No failure groups or suspected flakes were observed, so baseline-control execution, diagnostic contrasts, and targeted repetitions were unnecessary. No assertions were weakened or tests newly skipped. Private investigation evidence records an empty group list. Gate evidence, post-validation capture, and the final committed candidate agree on source tree 9743a2cad96d360ebe03b6b664eff92144ee4248.

Next action: trusted signed publication of this exact tested baseline merge has been requested through the dedicated merge handoff, followed by human review of this never-merge draft and its private evidence. Publication is not yet confirmed by this agent. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this isolated Linux overlay.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 52.4 AIC · ⌖ 17.6 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-23 (run 39980582544)

DO NOT MERGE. Human review required. This remains a never-merge draft, not release or adoption approval.

Integrated frozen VS Code baseline bb298844950b7c500715467e459ae3982f17f937 with the trusted evaluation head in one conflict-free two-parent merge, preserving main's independent work and the prior compatibility changes. Evaluated exact upstream source bd36697afde06432615617bf5030ddda3512bf78. No new compatibility edits or fixture updates were needed. The four published root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline; the candidate manifest and private overlay were not modified. No private source, prompt bodies, binaries, packages, or logs were added to the public diff.

The required initial complete Linux gate passed without retries: client typecheck, compilation, and Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, zero failures; exit 0, in 21m 43s. No failure groups or suspected flakes were observed; diagnostic contrasts, a published-baseline control, and targeted repetitions were therefore unnecessary. No assertions were weakened or tests newly skipped. The private investigation report records an empty group list. Gate evidence, post-validation capture, and final committed candidate agree on source tree 0ea7ac52a20f4581f001533bdacc6b47b58e062a.

Next action: the dedicated merge handoff requests trusted signed publication of this exact tested candidate, followed by human review of the never-merge draft and private evaluation evidence. Publication is requested, not confirmed by this agent. No ordinary branch push, CI retry, product build, package publication, or ready promotion is requested. Normal PR CI uses published pins and cannot validate this isolated Linux overlay.

Evaluation run and private evidence.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 53.8 AIC · ⌖ 18.4 AIC · ⊞ 25.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-23

DO NOT MERGE. Source-evaluation draft only; human-review-required. This is not release approval, and normal PR CI does not exercise the private overlay.

Integrated the exact pinned VS Code baseline 30fbdda9667d77a7b55ff4d72420146e33b25b36, preserving prior compatibility changes. Local merge 69c8957985a25c896de2c9b8d57f3ed2ae8868da has exactly the trusted previous PR head and baseline as parents. Signed publication was requested through the dedicated merge handoff, not an ordinary branch push. All four dependency manifests/lockfiles remain byte-identical to that baseline; the candidate manifest and installed overlay were not changed.

Checks: client typecheck and compilation passed. The complete Full-profile Linux gate finished in 19m15s with 786 passing, 41 pending, 1 failing. Two unchanged targeted executions of the entire image-generation integration suite each produced 4 passing, 1 failing, reproducing the same mismatch. All observations and the final committed candidate match source tree 07e9ebe16e13b7cbde73c54de4476c1eb721c900.

Group	Classification and mechanism	Status / next action
Image-generation result expectation	Expected adaptation: the runtime intentionally adds model-facing guidance to an image result, and VS Code correctly preserves it. The exact-text integration expectation predates that addition. The response, saved image bytes/location, host presentation guidance, and endpoint assertions match. Repeated runs fail identically; this is not diagnosed as a flake or product regression.	Open — publication-safety blocker. An exact expectation update would copy unpublished private runtime guidance. No such text was added, no assertion was weakened, and no configuration workaround was shipped. Runtime/SDK and VS Code test owners must supply a public-safe exact assertion contract, then adapt the expectation and rerun the full image suite and complete Linux gate.

Outcome: investigation-incomplete, because the required expected-text adaptation remains unimplemented at that safety boundary. Exact candidate source and upstream test-contract inspection support the diagnosis; an isolated published-SDK execution control on this same frozen baseline was unavailable, so no equivalent-control claim is made. Private source references, provenance, commands, and logs remain in private evaluation evidence. No additional compatibility changes were needed or made in this invocation. Do not mark ready, merge, or dispatch ordinary SDK-bump/product validation.

Evaluation run. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 81 AIC · ⌖ 19.9 AIC · ⊞ 25.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-23, run 40015558206

DO NOT MERGE. Unpublished Linux source-evaluation draft only. human-review-required even with a passing gate; this is not release/adoption approval. Published dependency pins are unchanged, and normal PR CI does not test the private overlay.

Integrated the exact frozen VS Code baseline ee5ed586a97dbda82d15c024236d64796cc12814, preserving main's independent work and prior justified compatibility changes. The committed candidate has exactly the trusted previous PR head and frozen baseline as its two parents. Dedicated signed source publication was requested through the merge handoff, not an ordinary branch push. All four manifests/lockfiles remain byte-identical to the baseline; the driver-written candidate identity and installed overlay were not changed.

Observed group	Classification, mechanism, and resolution
Image-generation exact-result fixture	Expected adaptation, resolved. The runtime intentionally appends file-link formatting guidance when an image is saved; its exact-source SDK tests require that behavior. VS Code preserves the guidance, image identity, saved path, and host presentation context correctly. The old whole-string expectation predates the addition. The fixture now pins SHA-256 of the complete normalized result, rather than copying unpublished wording. No guidance is discarded, functional assertions are unchanged, and there is no product-code, configuration, startup, or timing workaround.

Discriminating checks: the initial complete gate reproduced only that mismatch (786 passing, 41 pending, 1 failing; 21m03s). A pre-edit run of the entire image suite reproduced it (4 passing, 1 failing). The expected digest was independently derived from the exact source and matched the observed result; removing guidance or corrupting a saved-path field fails the comparison. After the fixture change, the entire image suite passed (5 passing), including authorized/unavailable/default-off tool availability, cold resume, saved bytes/location, presentation guidance, and endpoint assertions. This is an adaptation, not a retry-based flake claim. An isolated published-SDK execution control on this same baseline was unavailable; no equivalent-control claim is made.

Final validation: client typecheck, compilation, and the unfiltered Full-profile Linux Copilot SDK/Agent Host integration and E2E gate passed: 787 passing, 41 pending, exit 0, in 20m14s. Targeted lint also passed. The final gate, post-validation capture, and committed candidate all match tree d5f0486d2c5fd9f7f99ba3c2a7a6fe16af3da5ff. Failed attempts remain retained privately. No unresolved failure groups or diagnosed flakes remain: validated-adaptations for this Linux source evaluation only.

Next action: VS Code test owners and SDK/runtime reviewers should review the digest-only fixture against the private provenance and investigation evidence. Private source excerpts, wording, packages, and logs remain outside the public diff. Keep this PR draft and never merge it; do not dispatch ordinary bump revalidation or a product build.

Evaluation run. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 134.3 AIC · ⌖ 17.3 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-24 (run 40051381766)

DO NOT MERGE. Never-merge source-evaluation draft; human-review-required, not release or adoption approval. Normal PR CI uses published pins and does not validate the private Linux overlay.

Integrated the exact frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 without conflicts, preserving main's independent changes and prior compatibility work. Local candidate a209fdba6fe158ee48b91233283174981e3c5eb1 is exactly one merge with trusted PR head 93250923e5aad5ecfabf5139aeea565008e5b640 and that baseline as its two parents. The driver-written candidate identity matches the evaluated upstream source. All four published root/remote dependency manifests and lockfiles remain byte-identical to the frozen baseline; the candidate manifest and installed overlay were unchanged. No new compatibility edits or fixture updates were needed, and no private source, prompt bodies, binaries, packages, or logs were added to the public diff.

Validation: the required first complete gate passed without retries in 21m56s: client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, zero failures, exit 0. No failure groups or suspected flakes were observed, so diagnostic contrasts, targeted repetition, and a published-SDK execution control were unnecessary. No assertions were weakened or tests newly skipped. The private investigation report records an empty group list. Gate evidence, post-validation capture, and committed candidate agree on tree a0ebba4af949e04e0454e7976d8a308a616eaf52. Outcome: validated-adaptations for this Linux source evaluation only; no unresolved observed groups.

Next action: dedicated signed publication of this exact tested merge has been requested through merge-request.json, followed by human review of the never-merge draft and private evidence. Publication is requested, not yet confirmed by this agent. Keep this PR draft; do not merge, promote ready, retry ordinary CI, dispatch a product build, or publish packages.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 52.9 AIC · ⌖ 17.8 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-24 (run 40058085242)

DO NOT MERGE. This remains a never-merge draft evaluating an unpublished Linux overlay. human-review-required, not release or adoption approval. Normal PR CI uses published dependency pins and cannot validate this overlay.

Result: validated-adaptations for this Linux source evaluation only. The required first complete gate passed without retries in 19m25s: client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, zero failures, exit 0. No failure groups or suspected flakes were observed, so no diagnostic contrasts, targeted repetitions, fixture updates, or compatibility edits were needed. No assertions were weakened or tests newly skipped.

The rolling branch and driver-written candidate identity match the trusted source provenance. The exact frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 was already an ancestor of candidate 743609c65f3319d80753f365195a18ea2de55824; no new merge or commit was necessary. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline. The installed overlay and candidate manifest were left unchanged. Gate evidence, post-validation tree capture, and the existing committed candidate agree on tree 734b065ffe8b58a81f3013c6b6c5e8ec9e9a481f.

The private investigation report records an empty group list and the readiness disposition remains human-review-required. No unresolved observed failure mechanism remains, but this is not release approval. Private source, prompt bodies, binaries, packages, and logs remain outside the public diff; there is no new source-publication request.

Next action: human reviewers should inspect this Linux evaluation and its private evidence while retaining the draft and DO NOT MERGE restriction. Do not start ordinary bump revalidation, a product build, or package publication.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 44.6 AIC · ⌖ 20 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-24 (run 40061543445)

DO NOT MERGE. This is a never-merge draft evaluating an unpublished Linux overlay. human-review-required remains mandatory; this is not release or adoption approval. Normal PR CI uses published pins and cannot validate the overlay.

Result: validated-adaptations for this Linux source evaluation only. The required first complete gate passed without retries in 22m13s: client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, no failures, exit 0. Source publication-policy preflight also passed. No failure groups or suspected flakes were observed, so targeted repetitions, diagnostic contrasts, fixture updates, and new compatibility edits were unnecessary. No assertions were weakened or tests newly skipped.

The rolling branch and driver-written candidate identity match the trusted provenance. Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 was already an ancestor of committed candidate 9fbe7a37d753b21145c0b29a372cf4020890ec58; no merge, new commit, or source-publication request was necessary. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline. The candidate manifest and installed overlay were left unchanged. The gate fingerprint, post-validation capture-validation-tree.sh result, and committed candidate agree on tree af1c5e5b3f3b25694bbaebaa005cd6889bbc1cac.

Both required private reports are persisted, with an empty investigation group list and human-review-required disposition. No unresolved observed failure mechanism remains. This result is limited to the Linux source overlay, not cross-platform packaging or signed-release readiness. Private source, prompt bodies, packages, binaries, and logs remain outside the public diff.

Next action: human reviewers should assess this Linux evaluation and its private evidence while retaining the draft and DO NOT MERGE restriction. Do not dispatch ordinary bump revalidation, a product build, or package publication.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 59 AIC · ⌖ 19.8 AIC · ⊞ 25.9K · ◷

(Written by Copilot)

Linux source evaluation — 2026-10-24 (run 40064187544)

DO NOT MERGE. This never-merge draft evaluates an unpublished Linux overlay. human-review-required remains mandatory; this is not release or adoption approval. Normal PR CI uses published pins and cannot validate the overlay.

Result: validated-adaptations for this Linux source evaluation only. The required first complete gate passed without retries in 19m39s, exit 0: source-publication policy preflight, client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, no failures. No failure groups or suspected flakes were observed. Targeted repetitions, baseline controls, diagnostic contrasts, fixture updates, and new compatibility edits were therefore unnecessary. No assertions were weakened or tests newly skipped.

The rolling branch and driver-written candidate identity match trusted source/artifact provenance. Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 was already an ancestor of committed candidate 92586c144c93c0a16204466ac88ea7123fb5f777; no merge, new commit, or source-publication request was necessary. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline. The candidate manifest and installed overlay were left unchanged. The gate fingerprint, post-validation capture-validation-tree.sh result, and committed candidate agree on tree e328305b1d769fb8a57880bf00f24ecad579db8a.

Both required private reports are persisted, with an empty investigation group list and human-review-required disposition. No unresolved observed failure mechanism remains. This result is limited to the Linux source overlay, not cross-platform packaging or signed-release readiness. Private source, prompt bodies, packages, binaries, and logs remain outside the public diff.

Next action: human reviewers should assess this Linux evaluation and its private evidence while retaining the draft and DO NOT MERGE restriction. Do not dispatch ordinary bump revalidation, a product build, or package publication.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55 AIC · ⌖ 20.7 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation - 2026-10-24 (run 40069810288)

DO NOT MERGE. This never-merge draft evaluates an unpublished Linux overlay. human-review-required remains mandatory; this is not release or adoption approval. Normal PR CI uses published pins and cannot validate the overlay.

Result: validated-adaptations for this Linux source evaluation only. The required first complete gate passed without retries in 19m59s, exit 0: source-publication policy preflight, client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, no failures. No failure groups or suspected flakes were observed. Targeted repetition, baseline execution controls, diagnostic contrasts, fixture updates, and new compatibility edits were therefore unnecessary. No assertions were weakened or tests newly skipped.

The rolling branch and driver-written candidate identity match trusted source/artifact provenance. Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 was already an ancestor of committed candidate 532681383afd186f4feb2ef173edf1a7af2f6fac; no merge, new commit, or source-publication request was necessary. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline. The candidate manifest and installed overlay were left unchanged. The gate fingerprint, post-validation capture-validation-tree.sh result, and committed candidate agree on tree 01486507fdb7a114b2012acfa809f43a68d8340f.

Both required private reports are persisted, with an empty investigation group list and human-review-required disposition. No unresolved observed failure mechanism remains. This result is limited to the Linux source overlay, not cross-platform packaging or signed-release readiness. Private source, prompt bodies, packages, binaries, and logs remain outside the public diff.

Next action: human reviewers should assess this Linux evaluation and its private evidence while retaining the draft and DO NOT MERGE restriction. Do not dispatch ordinary bump revalidation, a product build, or package publication.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 49 AIC · ⌖ 19.7 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation - 2026-10-24 (run 40072207252)

DO NOT MERGE. This never-merge draft evaluates an unpublished Linux overlay. human-review-required remains mandatory; this is not release or adoption approval. Normal PR CI uses published pins and cannot validate the overlay.

Result: validated-adaptations for this Linux source evaluation only. The required first complete gate passed without retries in 19m41s, exit 0: source-publication policy preflight, client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, no failures. No failure groups or suspected flakes were observed. Targeted repetitions, diagnostic contrasts, published-SDK controls, fixture updates, and new compatibility changes were therefore unnecessary. No assertions were weakened or tests newly skipped.

The rolling branch and driver-written candidate match trusted provenance. Frozen VS Code baseline 1184ad4d45794110deb6b897ea83b15aac44ed89 was already an ancestor of committed candidate 57f4457a9be73eaf44208f911eabaf307fc97842; the requested merge returned already up to date. No new commit or source-publication request was necessary. All four root/remote dependency manifests and lockfiles remain byte-identical to that baseline and match the trusted hashes. The candidate manifest and installed overlay were left unchanged. The gate fingerprint, post-validation capture-validation-tree.sh result, and committed candidate agree on tree 31c633c97d63a3d1dd040aaf137a47cb1694380b.

Both required private reports are persisted, with an empty investigation group list and human-review-required disposition. No unresolved observed failure mechanism remains. This result does not establish cross-platform packaging or signed-release readiness. Private source, prompt bodies, packages, binaries, and logs remain outside the public diff.

Next action: human reviewers should assess this Linux evaluation and its private evidence while retaining the draft and DO NOT MERGE restriction. Do not dispatch ordinary bump revalidation, a product build, or package publication.

Evaluation run and private evidence. (Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 40.6 AIC · ⌖ 17.4 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation — run 40077267004

DO NOT MERGE. Human review required; this PR remains draft and is not an adoption or release approval.

The required initial complete gate passed on the unchanged candidate: client typecheck and compilation passed; Full-profile Copilot SDK/Agent Host integration and E2E reported 787 passing, 41 pending, zero failing. Attempt 1 completed in 18m 59s. No failure groups were observed, so no compatibility edits, fixture changes, diagnostic retries, or source publication were needed.

The exact pinned VS Code baseline was already integrated. Both dependency trees retain the private Linux source overlay, while all four published manifests and lockfiles remain byte-identical to that baseline. The final captured source tree matches the gate: 58ee55e37c41341544010789079334b27bc2ef5d.

The private workflow artifacts retain provenance, complete gate logs, and the tree-bound investigation report. This result does not validate other platforms, packaged products, or published dependency pins; normal PR CI cannot validate the overlay. Next action: human review of the private evaluation evidence; retain the never-merge draft. No product-build, publication, or ordinary bump revalidation is requested.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 44.5 AIC · ⌖ 17.6 AIC · ⊞ 26.6K · ◷

(Written by Copilot)

Linux source evaluation - run 40087169984

DO NOT MERGE. Human review required. This PR must remain draft and is not adoption or release approval.

Result: validated-adaptations for this Linux source evaluation only. The required initial complete gate passed on attempt 1 in 22m21s, exit 0: source-publication policy preflight, client typecheck, compilation, and unfiltered Full-profile Copilot SDK/Agent Host integration and E2E; 787 passing, 41 pending, zero failures. No failure groups or suspected flakes were observed. No new compatibility edits, fixture refreshes, weakened assertions, or newly skipped tests were needed. Targeted repetition, diagnostic contrasts, and published-SDK execution controls were not needed because no failures were observed.

The exact frozen VS Code baseline 4ff5ad971b5bc474e5fc6ca8cf2386d30a85d3eb merged cleanly while preserving existing compatibility work. Candidate merge cd116b4dd04053c6462840dd169493631e8a7bf2 has exactly the trusted original PR head and baseline as its two parents. Its incoming source changes are the baseline's sessions-list fix and test, unchanged. The gate, post-validation capture, and committed candidate agree on tree a4edb00bb0f140509cea5cd1f85d22b5e02dc6d2. A request for trusted signed source publication has been recorded; the ordinary branch-push tool was not used.

All four root/remote dependency manifests and lockfiles remain byte-identical to the trusted baseline. The driver-written candidate manifest and installed private overlay were left unchanged. Both required private reports are persisted, with an empty failure-group list and human-review-required disposition. No unresolved observed failure mechanism remains. Private source, prompts, packages, binaries, and logs are excluded from the public diff. Normal PR CI uses published pins and cannot validate this overlay; this result does not establish cross-platform packaging or signed-release readiness.

Next action: human review of the evaluation run and private evidence, retaining the never-merge draft. No product build, package publication, or ordinary bump revalidation is requested. Prior evaluation history is preserved.

(Written by Copilot)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 55.4 AIC · ⌖ 17.5 AIC · ⊞ 26.6K · ◷

Linux source evaluations

Latest assessment: validated-adaptations. The final candidate passed validation and all observed failure groups are resolved.

Classified groups: 0 expected adaptations; 0 upstream defects; 0 test/infrastructure flakes. Group counts are not failing-test counts.

A red gate alone does not establish an upstream regression, and a passing retry alone does not establish a flake. Detailed per-group mechanisms, evidence, repetition results, and next actions are in the linked private run's sdk-main-evaluation-result artifact; the agent's public-safe diagnosis is above. Unclassified, stale, or unfinished investigations stay incomplete even if a later gate passes. The PR always remains draft.

These results cover the private artifact overlay, not normal PR CI. Failed initial attempts are retained even when a subsequent fix passes. Unchanged candidates are deliberately evaluated again.

Evaluation	Upstream commit	Gate / investigation	Gate attempts
Run	`34fc36dad84f`	passed / validated-adaptations	passed
Run	`2c939cc75866`	passed / validated-adaptations	passed
Run	`2c939cc75866`	passed / validated-adaptations	passed
Run	`b9ff90249953`	passed / validated-adaptations	passed
Run	`84ccb95ea4a8`	passed / validated-adaptations	passed
Run	`cf82147c03a0`	passed / validated-adaptations	passed
Run	`bf4ec5009c32`	passed / validated-adaptations	passed
Run	`3060dfea8a2a`	passed / validated-adaptations	passed
Run	`2e6c8678baef`	passed / validated-adaptations	passed
Run	`91d6a52bca88`	passed / validated-adaptations	passed
Run	`10452f857a72`	passed / validated-adaptations	passed
Run	`e855a734b6f8`	passed / validated-adaptations	passed
Run	`51296c66b5ca`	passed / validated-adaptations	passed
Run	`097a73084ab1`	passed / validated-adaptations	passed
Run	`130b3dbeb7a7`	passed / validated-adaptations	passed
Run	`130b3dbeb7a7`	passed / validated-adaptations	passed
Run	`130b3dbeb7a7`	passed / validated-adaptations	passed
Run	`130b3dbeb7a7`	passed / validated-adaptations	passed
Run	`8636f43f9665`	passed / validated-adaptations	passed
Run	`10b0ad974b17`	passed / validated-adaptations	passed

(Written by Copilot)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot

🔵 Needs a closer look

The draft explicitly prohibits merging, and the unpublished artifact and Linux gate results require human verification.

No open issues 🎉

What changed in this PR

Adds a manifest identifying the unpublished Copilot SDK candidate for the Agent Host’s Linux early-warning evaluation.

Changes:

Records upstream source, run, artifact, and VS Code base identifiers.
Targets linux-x64 and explicitly marks the candidate as non-mergeable; published dependency pins remain unchanged.

No actionable defects were identified in the manifest.

File	Description
`src/vs/platform/agentHost/test/node/copilotSdkMainEvaluation.json`	Records candidate provenance, platform, and non-mergeable status.

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vs-code-engineering · 2026-10-19T02:49:26Z

Commit pushed: cac7443

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 618.8 AIC · ⌖ 54 AIC · ⊞ 29.6K

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

(Written by Copilot) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vs-code-engineering · 2026-10-20T01:52:32Z

Commit pushed: df146c6

Generated by sdk-vscode-bump-fix · copilot · gpt60 · 453.5 AIC · ⌖ 22.9 AIC · ⊞ 33.7K

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

437900b

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot AI balanced review requested due to automatic review settings October 19, 2026 01:15

vs-code-engineering Bot added the copilot-sdk-main-evaluation Do not merge: unpublished Copilot SDK main evaluation label Oct 19, 2026

Copilot started reviewing October 19, 2026 01:17

View session

Copilot AI reviewed Oct 19, 2026

View reviewed changes

fix: adapt upstream SDK source evaluation (Written by Copilot)

cac7443

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vs-code-engineering Bot and others added 3 commits October 20, 2026 00:34

Merge main for SDK source evaluation (Written by Copilot)

be96419

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

36a2947

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

test: update source evaluation managed settings fixture

df146c6

(Written by Copilot) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vs-code-engineering Bot and others added 19 commits October 20, 2026 02:18

chore: update SDK main evaluation candidate (Written by Copilot)

9388b1e

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

f4bd774

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Prepare isolated SDK conflict resolution (Written by Copilot)

f0d7016

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

7f1a603

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Publish SDK merge candidate (Written by Copilot)

5fa8c23

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge main for SDK source evaluation (Written by Copilot)

f0bd8d9

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

f5e5799

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge main for SDK source evaluation (Written by Copilot)

3acab24

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

236f28b

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge main for SDK source evaluation (Written by Copilot)

7eef22a

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

435528f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge main for SDK source evaluation (Written by Copilot)

d706cb2

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

3ca4768

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

0a52e14

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Prepare isolated SDK conflict resolution (Written by Copilot)

4e16d42

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

a6a9d85

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Publish SDK merge candidate (Written by Copilot)

7c4a19f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

e7eba03

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

d312519

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vs-code-engineering Bot and others added 30 commits October 24, 2026 06:56

chore: update SDK main evaluation candidate (Written by Copilot)

57f4457

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

a7f6ce3

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

ea8df40

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

6b131da

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

a4cf9a7

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

aa13e92

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

d178813

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

bedf29b

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

d1db8e8

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

1f01936

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

d3a8763

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

3b00cc9

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

477c94e

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

a4a8059

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

843b4c9

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

e55f4a5

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

712b9ba

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

637456d

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

e74f06d

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

d1fe74c

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

9a007ad

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

cfe10ea

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

05ad40a

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

b550145

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

9e36b4c

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

51c50a8

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

05fd15b

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

65a746f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge trusted main into SDK adoption (Written by Copilot)

1f5794b

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: update SDK main evaluation candidate (Written by Copilot)

bcc603f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Navigation Menu

Repository navigation

chore: [DO NOT MERGE] evaluate Copilot SDK main - #342463

chore: [DO NOT MERGE] evaluate Copilot SDK main#342463
vs-code-engineering[bot] wants to merge 189 commits into
mainfrom
automation/copilot-sdk-main-evaluation

vs-code-engineering Bot commented Oct 19, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

vs-code-engineering Bot commented Oct 19, 2026

Uh oh!

vs-code-engineering Bot commented Oct 20, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

vs-code-engineering Bot commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Linux evaluation — 2026-10-24, run 40084486494

Linux evaluation - 2026-10-24, run 40081917264

Linux evaluation - 2026-10-24, run 40079560640

Linux evaluation - 2026-10-24, run 40074687254

Linux evaluation - 2026-10-24, run 40067155515

Linux evaluation — 2026-10-24, run 40055397374

Linux evaluation — 2026-10-24, run 40040687376

Linux evaluation — 2026-10-23, run 40034885963

Linux evaluation — 2026-10-23, run 40025056987

Linux source evaluation — 2026-10-23, run 39993565303

Source evaluation — 2026-10-23, run 39987159987

Linux evaluation — 2026-10-23 (run 39959319244)

Linux evaluation — 2026-10-23 (run 39952841645)

Linux evaluation — 2026-10-23 (run 39944542402)

Linux evaluation — 2026-10-23 (run 39933666427)

Linux evaluation — 2026-10-23 (run 39922769079)

Linux evaluation — 2026-10-23 (run 39912686967)

Linux evaluation — 2026-10-23 (run 39899367350)

Linux upstream-main evaluation — 2026-10-19

⛔ DO NOT MERGE — Linux upstream-main source evaluation

Evaluation at source aecf9b48f16f43738cf4b2ddd97624cc820de4c9

Evaluation history

DO NOT MERGE - Linux source evaluation (2026-10-21)

DO NOT MERGE - Linux source evaluation (2026-10-21, current invocation)

DO NOT MERGE - Linux source evaluation (2026-10-21, run 39552137120)

DO NOT MERGE - Linux source evaluation (2026-10-21, run 39556557887)

Linux source evaluation — 2026-10-21 (run 39560942792)

Linux source evaluation — run 39565591184

DO NOT MERGE - Linux source evaluation (run 39571716069)

Linux source evaluation — 2026-10-21

Linux source evaluation — 2026-10-21

Linux upstream-main evaluation — 2026-10-21, run 39595677424

Linux upstream-main evaluation — 2026-10-21, run 39632888943

Linux source evaluation — 2026-10-21

Linux upstream-main evaluation — 2026-10-21 · run 39651303373

Linux source evaluation — 2026-10-21

Linux source evaluation — 2026-10-21

Linux source evaluations

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39705324200)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39715866988)

Linux upstream-main evaluation — 2026-10-22

Linux upstream-main evaluation - 2026-10-22 (run 39731829580)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39735847240)

DO NOT MERGE - Linux source evaluation (2026-10-22, run 39752537852)

Linux upstream-main evaluation — 2026-10-22 (run 39762514076)

Linux upstream-main evaluation - 2026-10-22 (run 39772017847)

Linux upstream-main evaluation - 2026-10-22 (run 39778394839)

Linux source evaluation — 2026-10-22

Linux upstream-main evaluation - 2026-10-22 (run 39792622183)

Linux upstream-main evaluation - 2026-10-22 (run 39812455891)

Linux upstream-main evaluation - 2026-10-22 (run 39850936040)

Linux upstream-main evaluation — 2026-10-22 (run 39858878821)

Linux upstream-main evaluation - 2026-10-22 (run 39866373976)

Linux upstream-main evaluation — 2026-10-23

Linux upstream-main evaluation — 2026-10-23 (run 39880002943)

Linux upstream-main evaluation - 2026-10-23

Linux source evaluation — run 39903197387

Linux source evaluation — run 39907869807

Linux source evaluation - run 39917763841

Linux source evaluation — run 39928367895

Linux source evaluation - run 39965826912

Linux source evaluation — 2026-10-23 (run 39980582544)

Linux source evaluation — 2026-10-23

Linux source evaluation — 2026-10-23, run 40015558206

Linux source evaluation — 2026-10-24 (run 40051381766)

Linux source evaluation — 2026-10-24 (run 40058085242)

Linux source evaluation — 2026-10-24 (run 40061543445)

Linux source evaluation — 2026-10-24 (run 40064187544)

Linux source evaluation - 2026-10-24 (run 40069810288)

Linux source evaluation - 2026-10-24 (run 40072207252)

Linux source evaluation — run 40077267004

Linux source evaluation - run 40087169984

Linux source evaluations

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

vs-code-engineering Bot commented Oct 19, 2026 •

edited

Loading

Evaluation at source `aecf9b48f16f43738cf4b2ddd97624cc820de4c9`