Repository navigation
feat: managed knowledge Toolbox and optional user delegation - #858
Merged
Paulo Lacerda (placerda) merged 5 commits intoNov 2, 2026
Merged
Conversation
…gation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Use the connection API and payload implemented by azd. Limit the AzAPI schema exception to this resource because the published typed schema omits supported Foundry authentication variants. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Keep runtime bootstrap values declarative, recognize dedicated project caller grants, and validate every new graph delta before unchanged historical fingerprints and mutation checks. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Feature work targeting develop. Keep OBO default and explicitly support Hosted service identity, with mandatory UI login and owner isolation. Provision managed Knowledge Base Toolbox and scoped caller/project/Search grants with parity in Bicep, Terraform and PowerShell/shell lifecycle hooks. Source authorization remains source-owned, with no source/capability allowlist or credential fallback. Local focused provisioning, Toolbox and source tests passed. A broader topology check identified an obsolete Blob/Work IQ restriction assertion, now replaced by structural-mode/login and source-acceptance coverage. CI validates the complete repository without Azure deployments. The final v7.1.0 release preparation will bind released UI v3.6.0 and orchestrator v7.1.0 in all executable pin surfaces. Central operator docs are updated in the coordinated AI-Landing-Zones checkout. Live tenant consent and downstream delegation remain unverified, intentionally.