# Spectrum card: GitHub Copilot cloud agent

> GAMMA-Ray v0.0.25 (beta, for review; every rating is experimental). The GAMMA-Ray Spectrum beta card of GitHub Copilot cloud agent: A0 · R2 · C2 · O1, Exploring; 44 provisions lit across 8 instruments.
> Page: https://gamma-ray.sgit.ai/spectrum/cards/github-copilot-cloud-agent/ · Source: data/scans/github-copilot-cloud-agent.json


Spectrum 0.1 beta · Public tier · read 2026-11-10 · not reviewed by its vendor yet

The asynchronous agent on GitHub.com that creates branches, writes code and opens pull requests in response to assigned issues.

GitHub Copilot cloud agent a product, as documented SPECTRUM 0.1 BETA · Public tier · 2026-11-10 A · Autonomy not yet evidenced R2 Reach Integrated (available) C2 Control Configurable O1 Openness Disclosed Stage: Exploring (5 of 16) Standout. Reach 2 (Integrated): "external applications like Microsoft Teams, Linear, Slack, and Jira" Next unlock. Autonomy 3 (Acts): public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own would get there. Standards constellation. 44 provisions lit across 8 of 8 instruments. Salesforce EAAMM OWASP MCP AAGMM Microsoft NIST AI Act Evidence: 3 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

*Figure. The walk from the card down to each indicator, its public source and the instruments it touches; the sections below list the same in text.*

This card rates a product as its vendor documents it, not anyone's deployment of it. A feature the operator has to turn on counts, and is marked as available. Levels are computed from the evidence below by [published rules](../../evidence-map/index.md). A dimension with no evidence reads "not yet evidenced".

## Autonomy: not yet evidenced

*What does the agent do on its own?* Nothing public was found that meets a rule in this dimension. That is not a no.



**Next unlock: level 3, Acts.** Public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own.

## Reach: level 2, Integrated

*How connected is it?* Documented connectors to common tools.

- `I10` It works across several domains or systems. It can take information and context from MCP and from external applications such as Microsoft Teams, Linear, Slack and Jira. "external applications like Microsoft Teams, Linear, Slack, and Jira" [Source](https://docs.github.com/en/copilot/responsible-use/copilot-coding-agent) (read, documented, available, captured 2026-11-10T06:11Z, sha256 `4c556dc5c787186a`)
- `I11` It connects to external tools or services across a trust boundary. Repository-level MCP servers connect it to external tools; by default only the GitHub server (read-only token on the current repository) and a Playwright server limited to localhost are configured. "GitHub.com supports MCP servers configured at the repository level" [Source](https://docs.github.com/en/copilot/concepts/agents/coding-agent/mcp-and-coding-agent) (read, documented, available, captured 2026-11-10T06:11Z, sha256 `e0ab793e5f76b3f4`)

This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.

**Next unlock: level 4, Ecosystem.** Public evidence that agents operate across organisational boundaries or disparate stacks.

## Control: level 2, Configurable

*Can people stay in command?* Approval modes, permission scopes and roles are documented settings.

- `I38` High-impact actions need a person's approval. Workflows triggered by its pull requests "require approval from a user with write access before they will run". "require approval from a user with write access before they will run" [Source](https://docs.github.com/en/copilot/responsible-use/copilot-coding-agent) (read, documented, captured 2026-11-10T06:11Z, sha256 `4c556dc5c787186a`)
- `I25` It asks for narrower access than the whole account. Read-only where the user has only read access; one branch to push to. [Source](https://docs.github.com/en/copilot/responsible-use/copilot-coding-agent) (read, documented, captured 2026-11-10T06:11Z, sha256 `4c556dc5c787186a`)

This evidence touches 11 provisions: OWASP, EU AI Act, AAGMM, NIST AI RMF, Salesforce, Microsoft, MCP authorization.

**Next unlock: level 3, Observable.** Public evidence that there is a way to pause or stop it; and that it is monitored in operation.

## Openness: level 1, Disclosed

*Does it show its work?* Says it is AI and what it is for.

- `I56` It tells the people it talks to that it is an AI. Its commits are authored by Copilot, with the person who started the task marked as co-author. "authored by Copilot, with the human who started the task marked as the co-author" [Source](https://docs.github.com/en/copilot/responsible-use/copilot-coding-agent) (read, documented, captured 2026-11-10T06:11Z, sha256 `4c556dc5c787186a`)
- `I20` Its purpose and permitted tasks are stated in writing. The vendor states intended uses: maintenance, feature development, prototyping. [Source](https://docs.github.com/en/copilot/responsible-use/copilot-coding-agent) (read, documented, captured 2026-11-10T06:11Z, sha256 `4c556dc5c787186a`)

This evidence touches 6 provisions: EU AI Act, NIST AI RMF.

**Next unlock: level 2, Documented.** Public evidence that the data it uses is described.

## The standards constellation

One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.

| Instrument | Provisions touched | Of those publicly readable |
|---|---|---|
| Salesforce | 10 | 24 |
| EAAMM | 1 | 8 |
| OWASP | 7 | 17 |
| MCP authorization | 4 | 8 |
| AAGMM | 5 | 6 |
| Microsoft | 4 | 23 |
| NIST AI RMF | 9 | 20 |
| EU AI Act | 4 | 6 |

## Upper layers

The public card is the front door. The same evidence, read with the governance rules, is this agent's [GAMMA-Ray rating](../../../scans/github-copilot-cloud-agent/index.md): freedom, governance, the level held, the grant and a work order. That layer is written for an operator.

## The vault

Every source behind this card was captured and hashed into a public sgit vault (`q7vudzvh`): `captures.json` lists each URL with the SHA-256 of what was fetched and when. Read key:

`sgit_public_read_5681b4b6d6b4524d74282e9e1339326d0663f6d878b790be49cd3b1de028a63e:q7vudzvh`

With [sgit](https://sgit.ai/): `sgit clone sgit_public_read_5681b4b6d6b4524d74282e9e1339326d0663f6d878b790be49cd3b1de028a63e:q7vudzvh`.