Evidence record / github-copilot-cli

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-github-copilot-cli-extension-docs-separate-running-trusted-code-from-letting-the-agent-manage

Extension docs separate running trusted code from letting the agent manage it. The experimental extension docs now describe Load & Augment as the default mode, granting extension-management tools as well as running extensions. Load Only retains existing extension tools without letting the agent scaffold or reload extensions. Disabled stops extension processes and removes their tools in the current session, persists for future sessions, and does not affect other sessions already running.

Channel: docs-only. Half: both. Date: 2026-10-20.

Operator consequence: For a fixed reviewed extension set, evaluate Load Only instead of disabling useful tools or maintaining a wrapper that hides management actions. Check each already-running session when disabling extensions. These docs identify a useful separation of authority, but do not establish its first shipped version or make arbitrary extension code subject to ordinary tool approval prompts.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-github-copilot-cli-extension-docs-separate-running-trusted-code-from-letting-the-agent-manage

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact