copilot-exception-handlerlisted

# copilot-exception-handler A Category 3 ops tool. Most exception requests are well-meaning misunderstandings of what the standard config protects against. A few are legitimate edge cases. This skill triages and produces the document that either denies cleanly (with a citation-backed explanation) or accepts conditionally (with compensating controls). ## When to use - A team lead asks "can we turn off the public code filter for our team?" - A developer asks "can I pin to a different model than the org default allows?" - A repo owner asks "can we override org-level content exclusion for our repo?" - A LOB head escalates a "Copilot rollout is taking too long because of [policy X]" complaint. ## When NOT to use - A novel request without a canonical posture (no prior exception type) — research via `copilot-deep-dive` first. - A request that's actually a feature ask, not a config exception — route to product feedback. - A specific repo configuration question — that's `ghas-config-reviewer`. ## Decision matrix For each exception type, the skill has a pre-decided posture: | Exception type | Default verdict | Justification possible? | |----------------|-----------------|------------------------| | Public code filter off | **REJECT** | Almost never — strips IP indemnity (see [[ip-indemnity]] objection). | | Content exclusion override (allow excluded paths) | **CASE-BY-CASE** | Only for repos with no regulated-data classification AND a strong velocity-blocked argument. | | Pin t