fix: allow --env proxy overrides + move net isolation check into AWF container by lpcox · Pull Request #6267 · github/gh-aw-firewall

lpcox · 2026-07-15T16:35:38Z

Problem 1: Proxy env var overrides blocked by credential exclusion

The recent credential isolation fix (5eeaf42) added exclusion filtering to additionalEnv (--env CLI flags) to prevent API keys from leaking into the agent container. However, it also inadvertently blocked proxy environment variables (NO_PROXY, HTTP_PROXY, etc.) from being set via --env, since PROXY_ENV_VARS are in the exclusion set to prevent host proxy leakage via --env-all.

Fix

Allow proxy vars through additionalEnv by checking them against the PROXY_ENV_VARS allowlist, while still blocking credentials. Added unit tests confirming GITHUB_TOKEN and GH_TOKEN are still blocked from additionalEnv when enableApiProxy is true.

Problem 2: Network isolation check ran outside the firewall

The net-check step in smoke-gvisor-build-test and smoke-docker-sbx-build-test workflows ran curl https://example.com as a pre-agent step on the bare GitHub Actions runner, which has unrestricted internet access. This meant the test always returned HTTP 200 and reported net_isolation=FAIL — a false negative that made the firewall appear broken.

Fix

Removed the pre-agent net-check step and moved the network isolation verification into the agent prompt, so it runs inside the AWF sandbox where the firewall is actually enforcing domain restrictions.

Testing

All 3781 tests pass.

The recent credential isolation fix (5eeaf42) added exclusion filtering to additionalEnv (--env CLI flags), which correctly prevents API keys from leaking into the agent. However, it also blocked proxy environment variables (NO_PROXY, HTTP_PROXY, etc.) from being set via --env, since PROXY_ENV_VARS are in the exclusion set to prevent host proxy leakage via --env-all. Fix: allow proxy vars through additionalEnv by checking them against the PROXY_ENV_VARS allowlist, while still blocking credentials and other excluded vars. Also regenerates docs/awf-config.schema.json to sync with source schema changes from the same commit. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d5581386-83e8-445d-9f96-afdf5cdc915f

github-actions · 2026-07-15T16:36:07Z

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit 91b89ee

github-actions · 2026-07-15T16:37:38Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	98.85%	98.95%	📈 +0.10%
Statements	98.80%	98.89%	📈 +0.09%
Functions	99.35%	99.35%	➡️ +0.00%
Branches	95.03%	95.10%	📈 +0.07%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)
`src/services/agent-environment/github-actions-environment.ts`	85.2% → 100.0% (+14.82%)	85.2% → 100.0% (+14.82%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

…abled Adds unit tests confirming that real credentials passed via additionalEnv (--env CLI flags) are still excluded from the agent container when enableApiProxy is true. This ensures the proxy var allowlist in the previous commit doesn't create a credential bypass. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d5581386-83e8-445d-9f96-afdf5cdc915f

Copilot

Pull request overview

Restores explicit proxy environment overrides while retaining credential isolation.

Changes:

Allows --env to override proxy variables.
Updates and synchronizes configuration schemas.

Show a summary per file

File	Description
`src/services/agent-environment/github-actions-environment.ts`	Permits explicit proxy overrides.
`src/awf-config-schema.json`	Updates runtime schema documentation.
`docs/awf-config.schema.json`	Regenerates the published schema.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 4/4 changed files
Comments generated: 2
Review effort level: Medium

+      if (!excludedEnvVars.has(key) || proxyVarSet.has(key)) {
        environment[key] = value;


    "environment": {
      "type": "object",
-      "description": "Environment variable propagation into the agent container. Merge behavior is: AWF-reserved variables are set by AWF and are not overridden by envAll or envFile; if envAll is true, host environment variables are forwarded next; envFile is then applied only for variables not already present, so it does not override envAll; CLI -e/--env has highest precedence and may override any variable, including AWF-reserved ones. When apiProxy.enabled is true, source credentials (OPENAI_API_KEY, ANTHROPIC_API_KEY, etc.) are excluded from the agent and held in the API proxy sidecar. See docs/awf-config-spec.md §8–9 for credential isolation rules.",
+      "description": "Environment variable propagation into the agent container. Merge behavior is: AWF-reserved variables are set by AWF and are not overridden by envAll or envFile; if envAll is true, host environment variables are forwarded next; envFile is then applied only for variables not already present, so it does not override envAll; CLI -e/--env has highest precedence and may override any variable, including AWF-reserved ones. Source credentials (OPENAI_API_KEY, ANTHROPIC_API_KEY, etc.) are always excluded from the agent and held in the API proxy sidecar. See docs/awf-config-spec.md §8–9 for credential isolation rules.",


lpcox · 2026-07-15T16:40:12Z

@copilot address review feedback

Copilot · 2026-07-15T16:44:46Z

@copilot address review feedback

Addressed in a650024.

github-actions · 2026-07-15T16:59:24Z

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-07-15T16:59:54Z

❌ Smoke Copilot BYOK AOAI (Entra) reports failed. AOAI BYOK (Entra) mode investigation needed...

github-actions · 2026-07-15T16:59:59Z

🔌 Smoke Services — All services reachable! ✅

github-actions · 2026-07-15T17:00:00Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

github-actions · 2026-07-15T17:00:00Z

❌ Smoke Copilot BYOK AOAI (api-key) reports failed. AOAI BYOK (api-key) mode investigation needed...

github-actions · 2026-07-15T17:00:01Z

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

github-actions · 2026-07-15T17:00:02Z

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-07-15T17:00:03Z

✅ Smoke Claude passed

github-actions · 2026-07-15T17:00:04Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

github-actions · 2026-07-15T17:00:05Z

✅ Contribution Check completed successfully!

github-actions · 2026-07-15T17:00:05Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-15T17:00:06Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-07-15T17:00:12Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-07-15T17:00:13Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

github-actions · 2026-07-15T17:00:41Z

🦎🏗️ Smoke gVisor Build Test completed. gVisor build test passed. ✅

github-actions · 2026-07-15T17:00:43Z

🦎🟣 Smoke gVisor Claude reports failed. gVisor + Claude compatibility issue detected.

github-actions · 2026-07-15T17:33:35Z

🔥 Smoke Test Results

Test	Status
MCP Connectivity	✅
GitHub.com HTTP	✅ 200
File Write/Read	✅

Overall: PASS

PR author: @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:33:49Z

🔥 Smoke Test: Copilot BYOK (Direct) — PASS

Test	Result
GitHub MCP (list PRs)	✅
GitHub.com connectivity	✅
File write/read	✅
BYOK inference (this response)	✅

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy → api.githubcopilot.com

Overall: PASS — @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:33:55Z

🔍 API Proxy OTEL Smoke Test Results

Scenario	Result	Notes
Module Loading	✅ Pass	`otel.js` loads successfully; exports: `startRequestSpan`, `setTokenAttributes`, `setBudgetAttributes`, `endSpan`, `endSpanError`, `shutdown`, `isEnabled` + internal helpers
Test Suite	✅ Pass	59 tests passed across `otel.test.js` + `otel-fanout.test.js` (0 failures)
Env Var Forwarding	✅ Pass	`api-proxy-env-config.test.ts` confirms `OTEL_EXPORTER_OTLP_ENDPOINT`, `OTEL_EXPORTER_OTLP_HEADERS`, `GITHUB_AW_OTEL_TRACE_ID`, `GITHUB_AW_OTEL_PARENT_SPAN_ID`, `OTEL_SERVICE_NAME` are forwarded
Token Tracker Integration	✅ Pass	`onUsage` callback exists in `token-tracker-http.js` (4 references) as the OTEL hook point
OTEL Diagnostics	✅ Pass	Module initializes cleanly; graceful no-op when `OTEL_EXPORTER_OTLP_ENDPOINT` not set

Summary: All 5 scenarios pass. OTEL tracing integration is working correctly.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:34:04Z

Smoke Test: PAT Auth Validation

Test	Status
MCP Connectivity	✅
GitHub.com HTTP	✅ 200
File Write/Read	⚠️ template vars not expanded

Overall: PASS
Auth mode: PAT (COPILOT_GITHUB_TOKEN) | Author: @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 PAT report filed by Smoke Copilot PAT
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:34:06Z

Smoke Test: Claude Engine Validation

Check	Result
API Status	✅ PASS
GH Check	✅ PASS
File Status	✅ PASS

Overall Result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Smoke Claude for #6267 · 55.3 AIC · ⊞ 3.3K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:34:15Z

🦎 gVisor Smoke Test Results

🦎 gVisor runtime: unconfirmed (runc detected — expected until runtime plumbing is wired)
✅ GitHub MCP: connected
✅ GitHub.com connectivity: reachable
✅ File write/read: OK
✅ Network isolation: example.com blocked

Overall: PASS @lpcox

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

example.com
host.docker.internal

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"
    - "host.docker.internal"

See Network Configuration for more information.

🦎 gVisor smoke test by Smoke gVisor
_{Add label test-gvisor to run again}

github-actions · 2026-07-15T17:34:23Z

Smoke Test: gVisor + Claude

🦎🟣 gVisor + Claude runtime: unconfirmed (kernel reports Linux 4.4.0, no gVisor marker)

❌ gVisor runtime verification (no gVisor string in /proc/version)
❌ GitHub MCP (github-list_pull_requests tool unavailable in this env)
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read (smoke-test-gvisor-claude-29436670419.txt)
✅ Network isolation (example.com blocked, HTTP 000)

Overall status: FAIL (runtime unconfirmed, MCP unavailable)

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

example.com
host.docker.internal

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"
    - "host.docker.internal"

See Network Configuration for more information.

🦎🟣 gVisor + Claude smoke test by Smoke gVisor Claude
_{Add label test-gvisor-claude to run again}

github-actions · 2026-07-15T17:34:23Z

Thanks for the clear description and the added regression tests. Per the Pull request requirements in CONTRIBUTING.md, please reference any related issue(s) if this change addresses one, so the PR can be linked to the relevant discussion.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Contribution Check for #6267 · 4.14 AIC · ⊞ 19.2K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:34:26Z

Smoke Test Results

GitHub MCP Testing: ❌ (Access Denied/Filtered)
GitHub.com Connectivity: ❌ (Status 000)
File Writing: ✅
Bash Tool Testing: ✅

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:34:58Z

Smoke Test: Services Connectivity

Redis PING: ❌ Network unreachable
PostgreSQL pg_isready: ❌ No response
PostgreSQL SELECT 1: ❌ Network unreachable

Overall: FAIL — host.docker.internal (172.17.0.1) is unreachable. Service containers may not be running or the host bridge is not accessible.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:35:57Z

🔥 Smoke Test: Docker Sbx Validation

Test	Result
GitHub MCP Connectivity	✅ PASS
GitHub.com HTTP	⚠️ N/A (template vars unexpanded)
File Write/Read	⚠️ N/A (template vars unexpanded)

⚠️ Pre-computed test data (${{ steps.smoke-data.outputs.* }}) was not substituted — workflow step outputs may not have run or been passed correctly.

Overall: PARTIAL — MCP connectivity confirmed; pre-step data unavailable.

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:36:27Z

Chroot Version Comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.3	❌ NO
Node.js	v24.18.0	v22.23.1	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

⚠️ Not all tests passed — Python and Node.js versions differ between host and chroot.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:37:03Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Note: Java Maven required a writable local repo path (-Dmaven.repo.local) since /home/runner/.m2/ was owned by root.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Build Test Suite for #6267 · 35 AIC · ⊞ 6.9K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-15T17:37:34Z

🐳🔮 Docker sbx + Codex
MCP: ✅
GitHub.com: ✅
File check: ✅
example.com: ❌ (returned 200, expected block)
Overall: FAIL

🐳🔮 Docker sbx + Codex smoke test by Smoke Docker Sbx Codex
_{Add label test-docker-sbx-codex to run again}

github-actions · 2026-07-15T17:38:08Z

🐳🟣 Docker sbx + Claude

✅ GitHub MCP connectivity (PR list returned; 1 filtered by secrecy policy)
✅ github.com connectivity (HTTP 200)
✅ File write/read (smoke-test-docker-sbx-claude-29436670383.txt)
❌ Network isolation (example.com returned HTTP 200 — not blocked)

Overall: FAIL (network isolation did not block example.com)

🐳🟣 Docker sbx + Claude smoke test by Smoke Docker Sbx Claude
_{Add label test-docker-sbx-claude to run again}

github-actions · 2026-07-15T17:38:52Z

Merged PRs reviewed: fix: disable Bun JIT in smoke-gvisor-claude to prevent SIGSEGV/SIGABRT; chore: update model-to-API mapping (2026-07-15)\n✅ GitHub merged PR review\n✅ GitHub title check\n✅ File write/read\n✅ Playwright title check\n❌ npm ci && npm run build (stalled >3 min)\nOverall: FAIL

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

awmgmcpg
registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

Copilot AI review requested due to automatic review settings July 15, 2026 16:35

Copilot started reviewing on behalf of lpcox July 15, 2026 16:36 View session

Copilot AI reviewed Jul 15, 2026

View reviewed changes

Copilot started work on behalf of lpcox July 15, 2026 16:40 View session

fix: address proxy override review feedback

a650024

Copilot finished work on behalf of lpcox July 15, 2026 16:45

lpcox added the ready-for-aw label Jul 15, 2026

lpcox had a problem deploying to aoai-model July 15, 2026 17:00 — with GitHub Actions Failure

This was referenced Jul 15, 2026

[aw] Smoke Docker Sbx Build Test has stale lock file #6272

Closed

[aw] Smoke gVisor Build Test has stale lock file #6273

Closed

lpcox temporarily deployed to aoai-model July 15, 2026 17:33 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-byok label Jul 15, 2026

github-actions Bot added the smoke-copilot-pat label Jul 15, 2026

lpcox temporarily deployed to aoai-model July 15, 2026 17:34 — with GitHub Actions Inactive

github-actions Bot mentioned this pull request Jul 15, 2026

[aw] Smoke gVisor Codex failed #6274

Closed

lpcox merged commit 7a7e129 into main Jul 15, 2026
141 of 146 checks passed

lpcox deleted the fix/additionalenv-proxy-override branch July 15, 2026 18:40

Copilot AI mentioned this pull request Jul 15, 2026

fix: sync src/awf-config-schema.json with docs/awf-config.schema.json #6266

Closed

4 tasks

This was referenced Jul 15, 2026

updated workflows #6281

Merged

🩺 Runner Doctor Updatenew D7 (gVisor Bun JIT crash), B2 fix (proxy --env override), C8 update (BYOK offline sentinel) #6309

Closed

[aw] No-Op Runs #5883

Open

Copilot AI mentioned this pull request Jul 16, 2026

docs: runner doctor scan 2026-07-15/16 — add D7 (gVisor/Bun JIT), update B2 (proxy --env), update C8 (BYOK sentinel) #6315

Merged

		if (!excludedEnvVars.has(key) \|\| proxyVarSet.has(key)) {
		environment[key] = value;

Uh oh!

Conversation

lpcox commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem 1: Proxy env var overrides blocked by credential exclusion

Fix

Problem 2: Network isolation check ran outside the firewall

Fix

Testing

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Documentation Preview

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Coverage Check Passed

Overall Coverage

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

lpcox commented Jul 15, 2026

Uh oh!

Copilot AI commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026

🔥 Smoke Test Results

Uh oh!

github-actions Bot commented Jul 15, 2026

🔥 Smoke Test: Copilot BYOK (Direct) — PASS

Uh oh!

lpcox commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading