Repository navigation
fix: prepare Hosted foundation for custom agent definitions - #779
Merged
Paulo Lacerda (placerda) merged 4 commits intoOct 13, 2026
Merged
Conversation
Reuse the shared foundation selector independently of bundled routing, including postProvision preparation metadata. Preserve bundled deployment rules and verified per-instance runtime profiles. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Add a compatible narrow executor Project Manager gate, suppress it for custom classic Hosted preparation, and verify operator access without automatic privilege grants. Record ADR-0021 and Bicep/parity/regression contracts. Existing baseline fixture/history failures are documented separately; scoped role gates, exact owned resource graph, size, selector and hook parity checks pass. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Preserve the initial failed live gate receipt. Azure CLI role definition list --name returns an empty successful list for full ARM IDs; normalize the validated UUID and regress the exact boundary without broadening authorization. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Paulo Lacerda (placerda)
marked this pull request as ready for review
October 13, 2026 13:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changed
azure.ai.agent, independent of bundled orchestrator topology.deployHostedAgent, model capacity, and exact per-instance runtime profiles before smoke.Published current feature branch:
feature/695-hosted-identity-bootstrap.Product correction:
0238734d39a7870d4ac9b0b19fe2f8f5e8e634cb.Evidence commit:
a95784e.Central docs Azure/AI-Landing-Zones#153 merged at
7a82cda5af2c30ff6d89af7425ff617406896d73.Related: #695; #774 is historical, not this correction.
Validation
git diff --checkpassed.Acceptance boundary
Draft pending exact-source Azure preview, operator-role gate authorization/delta verification, declarative reprovision, Hosted runtime verification and same-definition repetition. No successful fresh first-up or user login/OBO/grounding/citations/document allow-deny acceptance claimed. No manual-role workaround, polling race, registry connection workaround or extension upgrade.