Repository navigation

Managed-settings interim fail-closed uses an empty allow list ([[]]) and permanently drops user MCP servers that register inside the window — reproduces via the desktop app, on an account with no managed policy #8411

	name: Close issue/PR on adding invalid label

	# What it does: This action closes invalid issues and signals invalid PRs to a trusted writer.

	on:
	issues:
	types: [labeled]
	pull_request:
	types: [labeled]

	permissions: {}

	jobs:
	close-issue-on-adding-invalid-label:
	if: >
	github.repository == 'github/copilot-cli' &&
	github.event_name == 'issues' &&
	github.event.label.name == 'invalid'
	runs-on: ubuntu-latest
	permissions:
	issues: write
	steps:
	- name: Close issue
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GH_REPOSITORY: ${{ github.repository }}
	ISSUE_NUMBER: ${{ github.event.issue.number }}
	run: gh api -X PATCH "repos/$GH_REPOSITORY/issues/$ISSUE_NUMBER" -f state=closed

	signal-invalid-pr-label:
	if: >
	github.repository == 'github/copilot-cli' &&
	github.event_name == 'pull_request' &&
	github.event.label.name == 'invalid'
	runs-on: ubuntu-latest
	permissions: {}
	steps:
	- name: Record invalid PR label signal
	env:
	PR_NUMBER: ${{ github.event.pull_request.number }}
	run: \|
	echo "Invalid label signal for PR #$PR_NUMBER"