Field notes

We tried to build org-wide dependency and model file visibility on GitHub's APIs. The Dependency Graph only reads the default branch, Code Search can't be trusted for compliance, and model files register nowhere at all.

A prompt that goes and finds the numbers in your own repos instead of interrogating you for them. Plus the part it can't write, and why I have mixed feelings about the part it can.

One self-contained HTML file with the generation prompt sitting inside it as the last slide. Copilot reads the repo, fills in the components, and the deck is done in about two minutes.

Copilot CLI runs an unattended SRE agent for us on a schedule and it does the job. It also won't stop you from wiring it up unsafely, and the tool flags aren't the security model.