Finding / github-copilot-cli

2026-10-24-github-copilot-cli-assisted-approval-expands-extension-requests-stay-explicit-and-ambiguous-skill-grants-prom

Assisted approval expands, extension requests stay explicit, and ambiguous skill grants prompt. Assisted Permissions can judge more nested shell forms, and 1.0.101 adds assistedApprovalInstructions. Extension capability requests instead require explicit approval. A skill’s allowed-tools parser preserves commas inside arguments and prompts on ambiguous unscoped rules. Resuming abandoned pending permission work is repaired in 1.0.98, which also repairs command-hook completion when child-exit signals are lost. 1.0.100 repairs managed-account policy and bypass warnings after account switches with cache misses. 1.0.101 requests path approval for commands that create then enter a directory, instead of denying them early, and adds request-specific escalation diagnosis. Crucially, 1.0.100 says managed ask requests in Assisted mode can allow safe actions without unnecessary confirmation. The current enterprise docs still require fresh one-time approval and exclude automatic shortcuts for managed ask. Those statements are not reconciled.

Channel: tagged-release. Half: both. Date: 2026-10-20.

Operator consequence: On 1.0.103, test an operation matching a managed ask rule in Manual and Assisted modes and inspect the recorded decision maker. Include an account switch if the same installation serves multiple accounts. Do not promise a human-per-request gate from that key until the conflict is settled. Audit skill argument lists and extension capability requests separately. The judge may remove repetitive work, but explicit extension approval remains a deliberate accountability boundary; guidance to the judge is not a deterministic deny rule.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-github-copilot-cli-assisted-approval-expands-extension-requests-stay-explicit-and-ambiguous-skill-grants-prom

Profile citations

Source links

Primary links, including exact changelog lines when available.