Add compiler support for dynamic repository enclave policies by Copilot · Pull Request #58880 · github/gh-aw

Copilot · 2026-09-05T23:31:43Z

Dynamic repository admission lets agent enclaves accept bounded runtime repository selectors without enumerating every repo at compile time. Static repos support remains unchanged; dynamic mode is agent-only and fail-closed behind AWF/mcpg version gates.

Workflow syntax and schemas
- Add enclaves[].dynamic for agent enclave entries.
- Enforce exactly one of repos or dynamic per entry.
- Reject dynamic script enclaves, unknown policy versions, unknown fields, and non-canonical selectors.

enclaves:
  - agent:
      model: gpt-5
      max-task-bytes: 4096
      max-model-requests: 8
      max-model-tokens: 1024
    dynamic:
      allowed-owners: [octo-org]
      sensitivity: confidential
      github-policy: github-repository-read-v1
      max-repositories: 4
      quotas:
        max-invocations: 8
        max-output-bytes: 32768
        max-execution-seconds: 900
      audit-labels: [dynamic-enclave]
      expires-at: "2999-01-01T00:00:00Z"
    timeout: 120
    memory-limit: 512m
    cpu-limit: "1"
    pids-limit: 128
    tmpfs-limit: 64m
    max-output-bytes: 8192
    max-invocations: 8

Policy and runtime config
- Emit the closed AWF dynamic policy envelope for github-repository-read-v1.
- Configure mcpg with github-repository-delegation-v1.
- Keep the existing single static awf-enclave MCP backend.
Credential isolation
- Generate an AWF-only delegation control capability.
- Exclude enclave and delegation capability environment variables from the primary agent.
- Avoid issuing a job-lifetime enclave GitHub identity for dynamic-only policies.
Version gates and defaults
- Require AWF dynamic enclave support and mcpg v0.4.16 for dynamic admission.
- Bump the default mcpg image to v0.4.16 and refresh generated workflow locks.
Docs and coverage
- Document dynamic enclave syntax, selector rules, policy closure, and version requirements.
- Add focused parser, validation, config emission, gateway, and secret-isolation tests.

Fixes Add compiler support for dynamic repository enclave policies #58842

Run: https://github.com/github/gh-aw/actions/runs/34015173514

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 12.2 AIC · ⌖ 8.69 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

pr-sous-chef
run: https://github.com/github/gh-aw/actions/runs/34025311508

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 16.8 AIC · ⌖ 8.78 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 42.9 AIC · ⌖ 8.76 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot

🟡 Changes recommended

Dynamic-only policies lack a registered GitHub backend, and several security bounds and generated container pins remain incomplete.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Adds compiler support for bounded, dynamic repository admission in agent enclaves while preserving static enclave behavior.

Changes:

Adds dynamic policy schemas, validation, documentation, and tests.
Configures AWF/MCPG delegation and credential isolation.
Bumps MCPG to v0.4.16 and regenerates workflow locks.

File summaries

File	Description
`pkg/workflow/tools_types.go`	Adds delegation-controller configuration types.
`pkg/workflow/schemas/mcp-gateway-config.schema.json`	Defines the MCPG delegation contract.
`pkg/workflow/schemas/awf-config.schema.json`	Defines emitted dynamic enclave policies.
`pkg/workflow/mcp_setup_gateway.go`	Generates the delegation capability.
`pkg/workflow/mcp_renderer.go`	Emits delegation controllers into MCPG JSON.
`pkg/workflow/mcp_gateway_config.go`	Builds dynamic delegation configuration.
`pkg/workflow/enclaves_test.go`	Tests parsing, validation, emission, and isolation.
`pkg/workflow/awf_env.go`	Excludes the control capability from agents.
`pkg/parser/schemas/main_workflow_schema.json`	Adds dynamic frontmatter syntax.
`pkg/parser/schema_test.go`	Tests schema acceptance and rejection paths.
`pkg/constants/version_constants.go`	Adds version gates and bumps MCPG.
`pkg/constants/version_constants_test.go`	Updates expected MCPG default.
`docs/src/content/docs/experimental/enclaves.md`	Documents dynamic policies.
`.github/aw/enclaves.md`	Updates enclave authoring guidance.
`.github/workflows/schema-feature-coverage.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/github-remote-mcp-auth-test.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/feature-grower.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-team-status.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-spec-coverage-kiro.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-schema-audit-cursor.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-regression-audit-kiro.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-max-ai-credits-test.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-github-docs-seo-optimizer.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-community-attribution.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-byok-ollama-test.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/daily-action-setup-security-audit.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/copilot-pr-merged-report.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Regenerates for MCPG v0.4.16.
`.github/workflows/breaking-change-checker.lock.yml`	Regenerates for MCPG v0.4.16.

Review details

Files reviewed: 68/314 changed files
Comments generated: 4
Review effort level: Balanced

Copilot · 2026-09-06T06:07:55Z

@@ -201,7 +206,7 @@ const CopilotNoAskUserMinVersion Version = "1.0.19"
 //
 // The first recompile regenerates all lock files using the new version; the second recompile
 // refreshes the container SHA pins that were resolved during the first pass.
-const DefaultMCPGatewayVersion Version = "v0.4.15"
+const DefaultMCPGatewayVersion Version = "v0.4.16"


Resolved in commit 6df4114: added the v0.4.16 mcpg digest/pinned_image to the action pin data and regenerated workflow locks twice.

Copilot · 2026-09-06T06:07:55Z

+		if enclaveDynamicRepositoryPolicyEnabled(workflowData) {
+			config.DelegationControllers = map[string]MCPGatewayDelegationController{
+				enclaveDynamicController: {
+					Server: "github",


Resolved in commit 6df4114: dynamic delegation now registers the GitHub MCP backend for collection, Docker image setup, and the primary gateway policy without issuing the static enclave identity.

Copilot · 2026-09-06T06:07:55Z

+                    "properties": {
+                      "timeoutSeconds": { "type": "integer", "minimum": 1, "maximum": 4740 },
+                      "memoryLimit": { "type": "string", "pattern": "^[1-9][0-9]*[bkmgBKMG]$" },
+                      "cpuLimit": { "type": "string", "pattern": "^(?:[0-9]{1,2})(?:\\.[0-9]{1,3})?$" },


Resolved in commit 6df4114: CPU limits now reject zero in frontmatter and emitted AWF schemas, with Go validation requiring a positive finite value.

Copilot · 2026-09-06T06:07:55Z

+                  "expiresAt": {
+                    "type": "string",
+                    "format": "date-time"


Resolved in commit 6df4114: dynamic expiry is parsed and rejected when it exceeds the enclave timeout/job lifetime, with focused validation coverage and updated documentation.

lpcox · 2026-09-06T00:26:26Z

@copilot Fix the code for all comments in this review thread.

When a review comment includes a suggested change, apply the suggestion exactly.

Do not make changes beyond what is described in the linked review thread.

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-09-06T00:48:02Z

@copilot Fix the code for all comments in this review thread.

When a review comment includes a suggested change, apply the s...

Addressed all review-thread findings in commit c7e4f1a: dynamic policies now register the GitHub backend without a primary enclave identity, CPU limits reject zero, expiry is bounded by enclave lifetime, and the mcpg v0.4.16 digest is pinned with regenerated locks.

gh-aw-bot · 2026-09-06T06:02:49Z

@copilot please take the next forward-progress step on this PR. Refresh the branch if needed, address unresolved review feedback and checks, and finish with the pr-finisher skill.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 12.2 AIC · ⌖ 8.69 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Copilot · 2026-09-06T06:17:37Z

@copilot please take the next forward-progress step on this PR. Refresh the branch if needed, address unresolved review feedback and checks, and finish with the pr-finisher skill.

[!WARNING]...

Completed the forward-progress pass: reviewed the PR state, replied to each Copilot review thread, ran formatting/lint/unit/full tests and recompile successfully, and pushed commit 6df4114. CI on this HEAD still needs a maintainer-triggered run.

gh-aw-bot · 2026-09-06T07:47:42Z

pr-sous-chef

@copilot Please take the next forward-progress step on PR #58880: refresh the branch if needed, address any remaining review feedback/checks, and finish with the pr-finisher skill.

Generated by PR Sous Chef: https://github.com/github/gh-aw/actions/runs/34019782918

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 17.8 AIC · ⌖ 8.71 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Copilot · 2026-09-06T08:01:45Z

pr-sous-chef
```...

Completed the requested forward-progress pass on PR #58880. The branch is clean at 6df4114; all prior review feedback has replies, and make fmt, make lint, make test-unit, make test, and make recompile pass. No additional code changes were needed.

gh-aw-bot · 2026-09-06T09:49:27Z

pr-sous-chef

@copilot Please take the next forward-progress pass on PR #58880.

Refresh the branch with the latest base changes if GitHub still allows it.
Re-check open review feedback and unresolved conversations.
Re-run the pr-finisher skill and push any remaining implementation or fixup commits needed to move this PR toward merge readiness.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 16.8 AIC · ⌖ 8.78 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-09-06T10:09:01Z

pr-sous-chef
```...

Completed the forward-progress pass and pushed merge commit 9d254d7, bringing the branch up to date with main. Final formatting, lint, unit/full tests, and recompile validation passed; no uncommitted changes remain. Existing review feedback is addressed in prior replies. CI must be re-triggered by a maintainer for the new HEAD before merge.

gh-aw-bot · 2026-09-06T12:33:10Z

pr-sous-chef

@copilot Please take the next forward-progress step on PR #58880: refresh the branch if needed, address any remaining review feedback/checks, and finish with the pr-finisher skill.

Generated by PR Sous Chef: https://github.com/github/gh-aw/actions/runs/34033151442

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 10.5 AIC · ⌖ 8.71 AIC · ⊞ 8.7K · ◷
_{Comment /souschef to run again}

Copilot · 2026-09-06T12:39:32Z

pr-sous-chef
```...

Completed this forward-progress pass. The branch is already up to date with main at merge commit 9d254d7, review feedback remains addressed, and final local validation is running with no source changes needed. The current GitHub Actions run for this HEAD has completed build and recompile successfully and is still processing the request.

gh-aw-bot · 2026-09-06T13:36:01Z

pr-sous-chef

@copilot Please take the next forward-progress pass on PR #58880.

Re-check the latest branch and CI state on current HEAD.
If no code changes are needed, state the remaining maintainer-side blocker clearly.
Then run the pr-finisher skill and hand the PR back concisely.

Generated by PR Sous Chef: https://github.com/github/gh-aw/actions/runs/34036123492

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 42.9 AIC · ⌖ 8.76 AIC · ⊞ 9.2K · ◷
_{Comment /souschef to run again}

Copilot · 2026-09-06T13:45:08Z

pr-sous-chef
```...

No code changes are needed. The branch is clean and up to date with main at 9d254d7; review feedback remains addressed. Build, lint, formatting, impacted tests, and workflow recompile passed. The remaining blocker is maintainer-side: GitHub reports the PR as blocked while required review/check state is pending, and the current validation workflow is still in progress.

github-actions · 2026-09-07T04:12:30Z

🎉 This pull request is included in a new release.

Release: v0.88.5

Initial plan

3314426

Copilot AI assigned Copilot and lpcox Sep 5, 2026

Copilot started work on behalf of lpcox September 5, 2026 23:32 View session

Copilot AI linked an issue Sep 5, 2026 that may be closed by this pull request

Add compiler support for dynamic repository enclave policies #58842

Closed

Add dynamic repository enclave policy support

1b204ef

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Add compiler support for dynamic repository enclave policies~~ Add compiler support for dynamic repository enclave policies Sep 6, 2026

Copilot AI requested a review from lpcox September 6, 2026 00:05

Copilot finished work on behalf of lpcox September 6, 2026 00:05

lpcox marked this pull request as ready for review September 6, 2026 00:12

Copilot AI balanced review requested due to automatic review settings September 6, 2026 00:12

Copilot started reviewing on behalf of lpcox September 6, 2026 00:13 View session

Copilot AI reviewed Sep 6, 2026

View reviewed changes

Copilot started work on behalf of lpcox September 6, 2026 00:26 View session

Address dynamic enclave review feedback

6df4114

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox September 6, 2026 00:48

This was referenced Sep 6, 2026

[Contribution Check Report] Contribution Check — 2026-09-06 #58889

Closed

[pr-sous-chef] PR Sous Chef run report #58885

Closed

[pr-review] Daily PR Code Quality Review — 34014701612 #58937

Closed

Copilot started work on behalf of gh-aw-bot September 6, 2026 06:03 View session

Copilot finished work on behalf of gh-aw-bot September 6, 2026 06:18

Copilot AI requested a review from gh-aw-bot September 6, 2026 06:18

github-actions Bot mentioned this pull request Sep 6, 2026

[PR Triage Report] Copilot PRs for 2026-09-06 #58940

Closed

Copilot started work on behalf of gh-aw-bot September 6, 2026 07:48 View session

Copilot finished work on behalf of gh-aw-bot September 6, 2026 08:02

Copilot started work on behalf of gh-aw-bot September 6, 2026 09:49 View session

Merge origin/main into feature branch

9d254d7

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot September 6, 2026 10:09

Copilot started work on behalf of gh-aw-bot September 6, 2026 12:33 View session

Copilot finished work on behalf of gh-aw-bot September 6, 2026 12:40

Copilot started work on behalf of gh-aw-bot September 6, 2026 13:36 View session

Copilot finished work on behalf of gh-aw-bot September 6, 2026 13:45

lpcox merged commit f345d09 into main Sep 6, 2026
5 checks passed

lpcox deleted the copilot/add-compiler-support-dynamic-repo-policies branch September 6, 2026 14:00

lpcox mentioned this pull request Sep 6, 2026

Add a runtime repository registry for dynamic enclaves github/gh-aw-firewall#8193

Closed

Copilot AI mentioned this pull request Sep 6, 2026

feat: add dynamic GitHub-MCP-backed enclave repository admission github/gh-aw-firewall#8217

Merged

This was referenced Sep 7, 2026

Smoke Test: MAI-Code-1-Flash - 34068595792 #59055

Closed

[blog] Weekly blog post – 2026-09-07 #59114

Merged

lpcox mentioned this pull request Sep 7, 2026

Add end-to-end security coverage for dynamic repository enclaves github/gh-aw-firewall#8192

Closed

Copilot AI mentioned this pull request Sep 8, 2026

test: add end-to-end security coverage for dynamic repository enclaves github/gh-aw-firewall#8307

Merged

lpcox mentioned this pull request Sep 11, 2026

Static enclave write-sink references missing lockdown step when tools.github is false #60336

Closed

Copilot AI mentioned this pull request Sep 11, 2026

Fix dangling determine-automatic-lockdown step reference in static enclave sink-visibility policy #60338

Merged

Uh oh!

Conversation

Copilot AI commented Sep 5, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Copilot AI Sep 6, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Sep 6, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Sep 6, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Sep 6, 2026

Choose a reason for hiding this comment

Uh oh!

lpcox commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

gh-aw-bot commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

gh-aw-bot commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

gh-aw-bot commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

gh-aw-bot commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

gh-aw-bot commented Sep 6, 2026

Uh oh!

Copilot AI commented Sep 6, 2026

Uh oh!

Uh oh!

github-actions Bot commented Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Sep 5, 2026 •

edited by github-actions Bot

Loading