Skip to content

feat(vendors): Copilot CLI witness on vscode_copilot's loads_claude_plugins (CC-2b) - #211

Merged
jothimani-rajendran merged 1 commit into
mainfrom
cc-2b-copilot-cli-witness-2
Oct 17, 2026
Merged

jothimani-rajendran merged 1 commit into
mainfrom
cc-2b-copilot-cli-witness-2

Conversation

@jothimani-rajendran

Copy link
Copy Markdown
Collaborator

Supersedes #210. The tree is the same; it is one clean commit because #210's commit message carried a session line that failed no-private-data.

What this changes

vscode_copilot's loads_claude_plugins row gets a witnessed note that covers the Copilot CLI surface only. The run behind it was GitHub Copilot CLI 1.0.98 on Windows 11 on 2026-10-17. The plugin was installed with copilot plugin install <dir>, a local path, which Copilot warns is deprecated. Both the guard (a shell command) and the gate (a file write) were refused by a preToolUse deny. Source: org-plan witness/results/witness-copilot-cli-claude-plugin-2026-10-17.md at 6516f57.

The row's notes now say the Copilot CLI nested hookSpecificOutput "unknown" is settled by that witness for these two cases. VS Code Copilot stays as recorded.

test_grok_carries_the_witness_and_no_other_agent_does is now test_only_the_witnessed_agents_carry_a_witness, driven by a table that holds grok and vscode_copilot. The test names stored in the vendor JSON evidence changed with it, regenerated with tools/recount_vendor_config.py --write.

Claim check

  • No capability claim is widened without a mechanism behind it. loads_claude_plugins is a fact, not a capability: no adapter reads it, and deny_reply is unchanged.
  • No MATRIX row changed
  • Primary source: the org-plan witness result file named above

Checks

  • pytest -q passes (2626 passed, 6 skipped, locally)
  • ruff check . and ruff format --check . pass
  • Runtime path is still stdlib-only
  • Commits are signed off

Notes for the reviewer

Only data, the recount source and one test changed.


Generated by Claude Code

…lugins (CC-2b)

vscode_copilot's loads_claude_plugins row gains `witnessed` for the Copilot
CLI surface only: GitHub Copilot CLI 1.0.98 on Windows 11, 2026-10-17, plugin
installed with `copilot plugin install <dir>` (local path, which Copilot warns
is deprecated); guard (shell) and gate (file write) refused by preToolUse deny
(org-plan witness/results/witness-copilot-cli-claude-plugin-2026-10-17.md at
6516f57). Its notes now read the Copilot CLI nested-deny "unknown" as settled
for those two cases; VS Code Copilot stays as recorded.

The witness test now covers every witnessed agent, not grok alone; the vendor
JSON is regenerated with tools/recount_vendor_config.py --write.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Signed-off-by: Jothi Mani Rajendran <250249270+jothimani-rajendran@users.noreply.github.com>
@jothimani-rajendran
jothimani-rajendran marked this pull request as ready for review October 17, 2026 23:36
@jothimani-rajendran
jothimani-rajendran merged commit 5edcc21 into main Oct 17, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant