Session Handoff [default]: Table Carry, Quota Safety and install-tools Shipped to Develop, Defined-Moments Review Gate #2278 Ready

[ptr727]

Next steps, in priority order

Re-read each issue and pull request rather than trusting these summaries.

1. Merge Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278, then drive the promotion. Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 is the defined-moments half of Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261, and it met the gate at head 793f50fb: status exit 0, 0 unresolved, CLEAN, checks 10/10. The maintainer merges it, since the classifier blocks an agent's gh pr merge. Then open the develop -> main promotion carrying Closes #2256, #2260, #2261, #2268, and #2272, and drive it to mergeable. Done is a promotion meeting every Merge Gate item but the maintainer's go-ahead.
2. Apply the Copilot ruleset change fleet-wide, once Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 is on main. It sets review_on_push: false and review_draft_pull_requests: false. The change is in repo-config/develop.json and main.json only, so live rulesets keep reviewing on every push until the config run applies it. That run is an outward-facing write to every fleet repository and needs the maintainer's go-ahead. The maintainer also narrows the account-level automatic-review setting in the UI.
3. Run the Whole Test Suite Before a Push, Not the Modules a Change Touches #2280: run the whole test suite before a push. It is a governance proposal filed from this round's CI miss.
4. Fix STANDUP.md's Prerequisite Item That Says Mechanisms Declare Environments #2270: STANDUP.md's prerequisite item. Carried. Read Session Handoff [default]: Fork Handoff Chains Released as 2.0.799, #2268 Fix on Develop #2273's "What not to repeat" first, since two rewrites drew new false claims.
5. Carried from Session Handoff [default]: Fork Handoff Chains Released as 2.0.799, #2268 Fix on Develop #2273, in its order:
   • Read the Managed Binaries in /usr/local/bin Under a Minimal PATH in install-tools.sh #2257, a PATH question on install-tools.sh, which has two options and may want a decision label
   • Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177
   • Settle Which Surface Owns the Skills Refresh Cadence and Which Flag Each Runs #2191
   • Decide How the Unattended Picker Recognizes an Adopted Lesson #2183, then Close the Unattended Loop's Parking-Comment and Interrupted-Park Gaps #2184
   • Pair Nonstandard details Markup Correctly When Blanking the Overview Narrative #2187, Emit an Unclosed details Block's Preceding Text Once in details_spans #2186, Decide How the Prose Gate Widens Past the Latin Part of the Recorded-Name Rule #2170, and Read a Non-Version winget Token as an Unread Installed Version in install-tools.ps1 #2258
   • the unattended loop's parked-lane half
   • Say the Hub Commits the Report Wherever Done-Means-Audited Is Stated #1826 and Carry the code-review skill bootstrap to seven repos whose Copilot reviews never state coverage #1815, plus the Fleet Bootstrap resyncs per Session Handoff [default]: Unattended Picker Narrowed and Overview Label Refusal Fixed, Released as 2.0.776 #2190

External blockers

• The maintainer merges into develop. The auto-mode classifier denies gh pr merge from an agent seat ("Merge Without Review"), even on a pull request that meets the gate. Hand over the exact command with --match-head-commit.
• Copilot quota. Rounds ran at lite all day. Stop Requesting Copilot Into a Reached Rate Limit #2277 now stops wait from requesting into a reached limit, and it reads the reset time from the reviewer's own Actions run log. Until the ruleset change is applied, every push still spends a round.
• A native Windows host is still needed for the bootstrap.ps1 check carried from Session Handoff [default]: WORKFLOW.md Corrections and the pyproject.toml Decision Released as 2.0.672 #1804.

Internal dependencies

• The promotion comes after Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 merges, so one promotion carries the whole of Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261.
• The fleet ruleset run comes after Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 reaches main. Before then, wait would hold fix pushes while the docs on main still say to request on every push.
• Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177 follows, or absorbs, the auto-2112 heredoc work. Decide How the Unattended Picker Recognizes an Adopted Lesson #2183 comes before Close the Unattended Loop's Parking-Comment and Interrupted-Park Gaps #2184.

State

• Hub: main is at 7e4eb6da, release 2.0.799. develop is at 5a814c1a, carrying Correct the False No-Vocabulary Claims About Environment Secrets #2271, Let a Copilot File Table Carry Forward on an Identical File Set #2276, Return Zero From install-tools.sh Tool Selection and Hide the Home Directory in Notes #2275, and Stop Requesting Copilot Into a Reached Rate Limit #2277 since main. No promotion PR is open.
• Open: Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 on feature/review-moments-2261, in its own worktree. It is this session's, and its branch is current with develop.
• Cleaned up: the merged worktrees and branches for Return Zero From install-tools.sh Tool Selection and Hide the Home Directory in Notes #2275, Let a Copilot File Table Carry Forward on an Identical File Set #2276, and Stop Requesting Copilot Into a Reached Rate Limit #2277, local and remote. The primary checkout is clean on develop.
• Unattended lanes untouched: auto-2176 (Session Handoff [auto-2176]: Qualify D4.7's Pending-Run Gaps on the Dispatched Run Sharing the Concurrency Group per #2176 #2219), auto-2167 (Session Handoff [auto-2167]: Match a Wildcard Row in Copilot's File Table Against the Changed Files per #2167 #2213), auto-2157 (Session Handoff [auto-2157]: Drop the Path Argument From the VS Code Tasks Snippet's Mypy Swaps per #2157 #2211), auto-2080 (Session Handoff [auto-2080]: Read an eval Argument as a Wait-Loop Payload in the Guard per #2080 #2137), auto-1634 (Session Handoff [auto-1634]: Narrow Nested timeout Handling per #2056 #2072, PR Deny a Signal-0 timeout as a Wait Bound in the Guard #2117), and python-contract (Session Handoff [python-contract]: Escaped and Folded python-directories Values Refused, Released as 2.0.738 #2014). Re-derive with handoff.py tracks, gh pr list, and git worktree list.
• Other repositories: none written.

The parked decision queue

Zero issues. Every question this round was answered as it arose: #2261's four design questions, the findings-count question on #2278, and the resolution of #2278's two evidence-backed declines.

What the last round did

• Let a Copilot File Table Carry Forward on an Identical File Set #2272 shipped in #2276. A full Copilot file table carries to a later head on an identical file set. It is live-verified: Return Zero From install-tools.sh Tool Selection and Hide the Home Directory in Notes #2275 and Stop Requesting Copilot Into a Reached Rate Limit #2277 each read coverage=carried:table and exit 0.
• Naming a Tool Other Than the Last Makes install-tools.sh Exit 1 Silently #2256 and Hide the Home Directory in install-tools.sh Report Notes as the Windows Script Does #2260 shipped in #2275. install-tools.sh no longer exits 1 silently, and its notes hide the home directory.
• Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261, quota half, shipped in #2277. A generic "encountered an error" round reads as a possible quota hit. The reviewer's Actions run log (dynamic/agents/copilot-pull-request-reviewer) is read for errorType: 'rate_limit' and the reset time. wait no longer requests into either case, or under the repo-wide signal.
• Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261, defined-moments half, is #2278, ready:
  • pr_review.py attest publishes a recorded local pass, with its findings count, bound to the head and the base.
  • status reads review_on_head=local.
  • wait holds fix pushes on non-default-base pull requests and exits 49 until the push is attested.
  • The rulesets drop review on push.
  • A post-merge Stop Requesting Copilot Into a Reached Rate Limit #2277 finding is fixed here: a newer quota refusal outranks older coverage.
• Filed: Run the Whole Test Suite Before a Push, Not the Modules a Change Touches #2280.

What not to repeat

• Running only the touched test modules. A suite-wide meta-test (test_tooling_encoding) failed in CI on Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 and cost a round. Run python3 -m unittest discover -s tests from the worktree root. A module-scoped run from the root also mis-imports test_configure_model.
• Deciding the quota stop from Q_LIVE. It carries no review bodies, so stopping_refusal never fired. The strict pass caught it, but the tests had not, because GqlCase.answer hands bodies to every query. Feed a body-less liveness payload first.
• Mutation probes that call wait without --timeout 0. With sleep mocked they spin until the outer bound. Run each probe under setsid --wait timeout.
• Expecting Copilot to converge on new feature code. Request Copilot at Defined Moments and Cover Fix Pushes With an Attested Local Pass #2278 drew 1 to 4 findings a round for five rounds, most of them real edge cases. The stop rule announced at round 4 held: only correctness defects in the PR's own code were fixed.

New learnings

• The rate-limit cause behind a generic Copilot error refusal is in the reviewer's own Actions run log. That is now in scripts/pr_review.py and scripts/README.md.
• The proposal to run the whole suite before a push is Run the Whole Test Suite Before a Push, Not the Modules a Change Touches #2280.

[ptr727]

Update after this link was written: step 1 is done. #2278 merged into develop as 644b297, and promotion #2284 merged into main as c65c0cf, closing #2256, #2260, #2261, #2268, and #2272. Its one Copilot thread, the merge-base claim already answered twice on #2278, was declined with evidence and resolved on the maintainer's go-ahead. No release was dispatched, and the fleet ruleset run (step 2) has not started. Both need the maintainer's go-ahead. The worktree this session used is detached at develop with nothing on it.

[ptr727]

Released as 2.0.804 from main at c65c0cf (run 37032925234, success). This machine's skills snapshot is refreshed to c65c0cf, and the primary checkout is fast-forwarded to develop at 644b297. Every worktree and branch this session used is removed. Step 2, the fleet ruleset run, is the next step and still needs the maintainer's go-ahead.

[ptr727]

Step 2, partly done: the new Copilot rule (review on open, not on push or drafts) is applied with configure.sh apply from main at c65c0cf to 15 repos: ProjectTemplate, Utilities, LanguageTags, aiopurpleair, homeassistant-purpleair, Financial-Modeling, PlexCleaner, ESPHome-NonRoot, VSCode-Server-DotNetCore, NxWitness, HomeAutomation-Config, ESPHome-Config, MediaTools, Vantage-Config, and Blog. Each passes configure.sh check with no failures afterwards. Not applied, since a full apply would change more than this rule there: KiCadLibrary, EspDinIoT, and DevKitCIoT require 'Check pull request workflow status' while the payload names '... job', and their workflows still emit the old name or carry none. HomeAssistant-Config and PhotoCleaner miss the whole label set and the project link. AudioCleaner and HolidayLights have no rulesets at all. Those seven need a resync first. Also filed: #2285, configure.sh treating an unknown first argument as an apply target.

[ptr727]

The maintainer confirmed the account-level Copilot code review settings: automatic review on, review new pushes off, review draft pull requests off, review effort Lite. They match the rulesets applied in step 2, so Copilot reviews a pull request once when it opens, and later rounds come only from pr_review.py wait at the defined moments, or from a manual request.

[ptr727]

Final update before this session closed, read beside the earlier comments:

• Filed: Every CLI Script Answers --help and Refuses Unknown Arguments Before Writing #2285, an issue on CLI scripts that don't answer --help: configure.sh treats an unknown first argument as an apply target. Until it lands, always pass the mode explicitly. Also filed Audit Cross-Checks No Python Dependabot Ecosystem, and KiCadLibrary's requirements-dev.txt Is Untracked #2286: spec/audit.py cross-checks no Python Dependabot ecosystem, and KiCadLibrary's requirements-dev.txt is untracked. The 2026-10-02 sweep found that and ESPHome-NonRoot's devcontainer, already in Dependabot: Five Private Repositories Still Stalled, and ESPHome-NonRoot Misses the devcontainers Ecosystem #1609, as the only real gaps.
• aiopurpleair resync to hub 2.0.804 is done in its own session and on its main (aiopurpleair#200). The carried content was verified current at c65c0cf from here. Its handoff aiopurpleair#201 waits on python-codestyle's Mypy-Only Wording Leaves Tests Unchecked and Contradicts Linter Cleanliness #2012 and Qualify D4.7's Pending-Run Gaps on the Dispatched Run Sharing the Concurrency Group #2176.
• Next steps, re-ranked: (1) resync the seven repos left out of step 2 (KiCadLibrary, EspDinIoT, DevKitCIoT, HomeAssistant-Config, PhotoCleaner, AudioCleaner, HolidayLights) and apply configure.sh there. KiCadLibrary's pip entry from Audit Cross-Checks No Python Dependabot Ecosystem, and KiCadLibrary's requirements-dev.txt Is Untracked #2286 can ride with its resync. (2) Every CLI Script Answers --help and Refuses Unknown Arguments Before Writing #2285. (3) Audit Cross-Checks No Python Dependabot Ecosystem, and KiCadLibrary's requirements-dev.txt Is Untracked #2286's audit check. (4) Run the Whole Test Suite Before a Push, Not the Modules a Change Touches #2280. (5) Fix STANDUP.md's Prerequisite Item That Says Mechanisms Declare Environments #2270, then the carried list in the body.
• Workspace: every worktree and branch this session made is removed, and the primary checkout is clean on develop at 644b297. The parked decision queue holds zero issues.

[ptr727]

Continued in #2289, round 43 on track default.