agent · governed
fabric · synchronized
Capabilities
What Copilot does inside Wing.
CAP.01
Repo-scoped suggestions
Suggestions constrained to allowlisted repos and branches.
CAP.02
Secret-aware completion
Blocks completions containing detected secrets or keys.
CAP.03
Dependency provenance
Flags suggestions pulling untrusted package sources.
CAP.04
PR posture check
Posts Wing posture report on every PR.
Integration map
Where Copilot reads and writes.
agent
Copilot
↔GitHub
→Jira
→Slack
←Snyk
← read→ write↔ read/write
Security & governance
guardrails
- Repo allowlist enforced at the gateway.
- Secret scanner runs pre-suggestion.
- License policy blocks GPL-tainted snippets.
- Outbound to non-GitHub destinations denied by default.
audit.log
00:39:02 copilot.suggest ok repo=api/core 00:39:07 copilot.suggest DENY reason=secret.detected 00:39:55 copilot.suggest ok repo=web/app 00:40:12 copilot.pr.posture ok pr=#1284