Evidence record / github-copilot-cli

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-github-copilot-cli-docs-separate-telemetry-identity-from-five-content-capture-classes-all-off-by-default

Docs separate telemetry identity from five content capture classes, all off by default. The CLI documentation now defines independent telemetry.capture controls for identity, prompts, responses, toolArguments, toolOutput and policyDetail; each defaults to false. Identity can attribute activity without prompt or tool content. Legacy captureContent and lockCaptureContent do not govern identity. Managed telemetry overrides local, SDK and environment values. Among managed sources, the highest-precedence source supplies the complete telemetry object; lower objects are not merged.

Channel: docs-only. Half: capability. Date: 2026-10-13.

Operator consequence: For attribution-only audits, configure identity independently rather than turning on content capture. Review legacy capture/lock policy and the complete winning managed object before exporting traces. This is a documented policy surface, not proof that a particular binary already enforces it.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-github-copilot-cli-docs-separate-telemetry-identity-from-five-content-capture-classes-all-off-by-default

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact