The original title is "A Secure Mobile Handoff Checklist for Copilot Conflict Resolution"

Short summary

Presents a security checklist for GitHub Mobile's Copilot cloud-agent workflow that resolves PR merge conflicts. Argues against the tap-once mental model, proposing instead a bounded remote task with revision-bound verification and human merge approval. Defines scope constraints, required checks, and stop conditions for when mobile review is insufficient.

• •Safe model is mobile intent to bounded remote task to proposed patch to verification to human merge
• •Bounded instructions must specify allowed/forbidden paths, required checks, and expiry
• •Stop conditions trigger when branch moved, scope expanded, sensitive files appeared, or diff is too large for mobile

Generated with AI, which can make mistakes.