E2E expansion Phase C: authorization, provenance, concurrency, and state #25352

Priority

Medium-high. Validate authorization, provenance, concurrency, budgets, and persistent state that only emerge across live identities, commits, repositories, or runs.

Candidate tests

• Suggested test: copilot/push-to-pull-request-branch-allowed-files-scoped-to-agent-commits #21344 — branch-push allowed-files: validate allowed and rejected agent-authored file changes.
• Suggested test: copilot/pull-request-activation-base-sha-pinning #18367 — pull-request activation base-SHA pinning: mutate a PR during a run and verify provenance remains pinned.
• Suggested test: copilot/repo-memory-concurrent-retry #18588 — repository-memory concurrent retry: force competing writes and verify eventual persistence.
• Suggested test: copilot/repo-memory-shared-branch-sibling-preservation #20862 — shared-memory sibling preservation: update one path without losing neighboring state.
• Suggested test: copilot/siderepo-target-repo-only-activation-comment #24669 — target-repository-only activation comment: reject equivalent comments in the source repository.
• Suggested test: copilot/siderepo-mention-scoped-to-target-repo #19511 — side-repository mention scoping: activate only for mentions in the configured target repository.
• Suggested test: copilot/pull-request-target-allowed-checkout #20863 — allowed PR-target checkout: prove authorized target checkout succeeds under policy.
• Suggested test: copilot/ledger-builtin-counter-set #19509 — ledger built-in counter set: verify counters persist and update across real runs.
• Suggested test: copilot/max-tool-calls-sdk-budget #19507 — SDK maximum tool-call budget: prove runtime enforcement at the configured boundary.
• Suggested test: copilot/max-daily-ai-credits-warning-mode #17505 — maximum daily AI credits warning mode: verify the guardrail warns without blocking.

Completion criteria

Each test must observe state across identities, commits, repositories, or runs. Authorization tests require a negative assertion and deterministic cleanup.

Fresh reprioritization of all 50 open suggested new test issues on 2026-10-25. This supersedes the numbered phase trackers.