Recommended action: For headless/CI use an env token (fine-grained PAT); on desktop Linux install libsecret-1-0 + gnome-keyring; on macOS delete stale item with `security delete-generic-password -s copilot-cli` and re-login. Option: Use env token on headless hosts [evidence: offi
Recommended action: Regenerate the hashed requirements including hashes for all target platforms/archives (tools that emit all published file hashes, or add extra --hash entries via pip hash); verify genuinely unexpected mismatches before assuming benign. Option: Include hashes f
Recommended action: Align the installed `mcp` package major version with what the agents SDK version expects (check its pyproject constraint) and avoid forcing the legacy transport under v2. Option: Align mcp package version [evidence: official_recommended_action] Applies when: O
Recommended action: Remove or rewrite flagged examples in the listed categories and resubmit; for legitimate safety use cases request modified content safety thresholds via Microsoft's form. Option: Clean the data or request modified thresholds [evidence: official_recommended_act
Recommended action: Create a fine-grained PAT (personal account owner) with 'Copilot Requests' permission and export it as COPILOT_GITHUB_TOKEN; or unset the classic token and use gh auth login / copilot login. Option: Use fine-grained PAT with Copilot Requests [evidence: officia
Recommended action: Upgrade uv in CI (pin the same uv version everywhere, e.g. via setup-uv version or required-version in [tool.uv]) rather than deleting uv.lock. Option: Align uv versions [evidence: documented_workaround] Applies when: CI/local mismatch Steps: 1. Check uv --ver
Recommended action: Approve both shared private links; grant Search MI Storage Blob Data Reader on storage and Cognitive Services User on Foundry; enable 'Allow Azure services on the trusted services list' on the Foundry resource. Option: Complete Search MI dependencies
Recommended action: cd into a project directory before starting a sandboxed session; mount only specific absolute non-sensitive paths via SANDBOX_MOUNTS. Option: Run from a project subdirectory [evidence: official_recommended_action] Applies when: see problem Steps: 1. cd ~/code/
Recommended action: Run 'uv lock' locally (or 'uv add' which updates both), commit uv.lock, rerun CI. Use --frozen only when you intentionally want to skip the up-to-date check. Option: Re-lock and commit [evidence: official_recommended_action] Applies when: Outdated uv.lock Step
Recommended action: Set allowed_callers: ['direct', 'code_execution_20260120'] (keeps dynamic filtering and allows forcing), or stop forcing via tool_choice. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Grant Cognitive Services OpenAI User on the project scope to your identity and the agent runtime identity; verify AZURE_AI_EMBEDDING_MODEL_DEPLOYMENT_NAME. Option: Add OpenAI data-plane role [evidence: official_recommended_action] Steps: 1. Assign Cognitive Se
Recommended action: Update macOS to 13+; Homebrew downloads the same binary and won't help. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Either keep code erasable (replace enums with const objects + union types; use import type; explicit .ts extensions; subpath imports '#...' instead of tsconfig paths; enable erasableSyntaxOnly/verbatimModuleSyntax in tsconfig to catch issues), or use a third-p
Recommended action: Pass fetch from undici and fetchOptions: { dispatcher: new ProxyAgent(url) } to the client (or setGlobalDispatcher), or on Node 24+ set NODE_USE_ENV_PROXY=1 so fetch honors HTTP(S)_PROXY/NO_PROXY. Option: Wire an undici ProxyAgent into the SDK [evidence: offic
Recommended action: Wait for the run to reach a terminal state (or cancel it) before adding messages; serialize requests per thread or start a new conversation. Option: Serialize per thread [evidence: official_recommended_action] Steps: 1. Poll run status until completed/failed/c
Recommended action: ldd --version; on glibc reinstall or fetch binary via downloads.claude.ai manifest; on Alpine `apk add libgcc libstdc++ ripgrep`. Option: Match binary to libc [evidence: official_recommended_action] Applies when: see problem Steps: 1. ldd --version 2>&1 | head
Recommended action: Recreate the connection using workspace_id and artifact_id from .../groups/<workspace_id>/aiskills/<artifact_id>..., and publish the Fabric data agent. Option: Recreate connection with GUIDs from URL [evidence: official_recommended_action] Steps: 1. Open the F
Recommended action: In Actions set lfs: true on actions/checkout (or run git lfs pull after checkout); elsewhere install git-lfs, run git lfs install, then git lfs pull. Detect pointers by the 'version https://git-lfs.github.com/spec/v1' first line. Option: Fetch LFS content expl