[PR Triage Report] PR triage: 9 eligible Copilot PRs #70517

PR Triage Report

Executive summary

• Eligible PRs: 9
• Fast-track: 4
• Auto-merge: 3
• Defer: 2
• High-risk items: 2
• Batch opportunity: guardrails (3 PRs)

Priority list

1. Add declarative webhook triggers and versioned CAO subscriptions #69772 — feature / medium risk / 72 — fast_track
2. Honor runner proxy settings in CLI proxy and MCP gateway containers #70347 — bug / medium risk / 65 — fast_track
3. Resolve Copilot sub-agent models in the harness (CLI and SDK) and fail closed #70389 — bug / medium risk / 68 — fast_track
4. Resolve experiment references in inline sub-agent frontmatter before writing the agent file; fail smoke-copilot when file-summarizer doesn't run #70387 — bug / medium risk / 64 — fast_track
5. Normalize scalar allowed-repos in GitHub guard policies #70346 — bug / low risk / 60 — auto_merge
6. Allow digest-pinned MCP images in local gateway schemas #69997 — bug / low risk / 60 — auto_merge
7. Cover trusted-bot policy compilation and document platform bot support #70343 — bug / low risk / 55 — auto_merge
8. Protect behavior-defined engine session capture #69586 — bug / high risk / 60 — defer
9. Fall back to unsigned push instead of failing when a rebase hits a genuine merge conflict in pushSignedCommits #56568 — bug / high risk / 57 — defer

Auto-merge candidates

• Normalize scalar allowed-repos in GitHub guard policies #70346
• Cover trusted-bot policy compilation and document platform bot support #70343
• Allow digest-pinned MCP images in local gateway schemas #69997

Fast-track items

• Add declarative webhook triggers and versioned CAO subscriptions #69772
• Honor runner proxy settings in CLI proxy and MCP gateway containers #70347
• Resolve Copilot sub-agent models in the harness (CLI and SDK) and fail closed #70389
• Resolve experiment references in inline sub-agent frontmatter before writing the agent file; fail smoke-copilot when file-summarizer doesn't run #70387

Batch opportunities

• guardrails: Cover trusted-bot policy compilation and document platform bot support #70343, Normalize scalar allowed-repos in GitHub guard policies #70346, Honor runner proxy settings in CLI proxy and MCP gateway containers #70347

Close candidates

• None. No PRs are stale/superseded/invalid after the 1-hour cooldown.

Key trends

• Most eligible PRs are bug fixes aimed at platform guardrails, policy handling, and injected execution path safety.
• Only one feature PR is in scope and it is already the highest-value item in the batch.
• High-risk items are limited to two legacy/active fixes and should remain deferred until explicit policy review and stronger validation evidence is available.

Generated by 🔧 PR Triage Agent · copilot · mai11 · 5.84 AIC · ⌖ 0.963 AIC · ⊞ 14.6K · ◷

• expires on Oct 21, 2026, 4:43 AM UTC-08:00