Add the AzureLocal PMO board standard by kristopherjturner · Pull Request #26 · AzureLocal/platform

kristopherjturner · 2026-07-16T17:22:51Z

Closed because the source branch included unrelated historical changes from a stale local base. Replaced by a clean PMO-only pull request.

AB#4942

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 36bb5fcff1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-07-16T17:26:35Z

-      "Read(//mnt/c/Windows/**)",
-      "Bash(export PATH=\"$PATH:/mnt/c/Program Files/GitHub CLI\")"
+      "Bash(git add:*)",
+      "Bash(git commit -m \':*)",


Remove invalid JSON escapes from permission patterns

The \' sequence in this permission entry is not a valid JSON escape; parsing the reviewed .claude/settings.json fails at this line, and the same invalid sequence appears in several PowerShell entries below it. Claude Code therefore cannot load any of these repository settings, including the newly added permissions and hooks.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-07-16T17:26:35Z

+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/block-secrets.ps1" },
+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/validate-path.ps1" }


Resolve hook paths relative to the active checkout

In the inspected /workspace/platform checkout, these absolute D:/git/azurelocal/platform paths do not exist, so the checked-out secret and protected-path hooks cannot execute; the logging and stop hooks below have the same problem. Any clone outside this one author-specific directory loses the configured controls, or could execute scripts from an unrelated checkout if that directory happens to exist.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-07-16T17:26:35Z

@@ -0,0 +1,33 @@
+# PreToolUse hook — blocks writes containing secret patterns


Add the mandatory PowerShell prologue to every hook

This and all five other newly added .claude/hooks/*.ps1 scripts omit #Requires -Version 7.0, Set-StrictMode -Version Latest, and $ErrorActionPreference = 'Stop', despite the explicit hard rule in AGENTS.md:45. Besides violating the repository standard, missing strict/error behavior allows property and I/O failures in these security and audit hooks to continue or exit successfully rather than being surfaced.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-07-16T17:26:35Z

+
+## Publication
+
+Generated snapshots stay under ignored `.artifacts/pmo/`. Scheduled automation publishes an


Actually ignore generated PMO snapshots

The documented claim that .artifacts/pmo/ is ignored is false: a repo-wide search finds no matching ignore rule, and git check-ignore --no-index .artifacts/pmo/snapshot.html returns no match. When authenticated automation generates a board and an operator uses a broad git add, the snapshot can therefore be committed and potentially expose restricted project data.

Useful? React with 👍 / 👎.

Copilot

Pull request overview

Adds an AzureLocal overlay for the project-management standard and introduces repo-local multi-model agent scaffolding (AGENTS/Claude/Codex/Copilot + MCP wiring + session-workspace placeholders) to align tooling with the tracker-authoritative PMO board approach.

Changes:

Added AzureLocal Project Management standard overlay page and linked it from the standards index.
Introduced AGENTS.md as the canonical cross-tool instruction entrypoint and converted CLAUDE.md into a thin shim.
Added MCP server config plus Claude/Codex/Copilot configuration and scaffolding (.claude/, .ai/, ignores).

Reviewed changes

Copilot reviewed 23 out of 24 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
docs/standards/project-management.md	New AzureLocal overlay guidance for tracker-authoritative planning + read-only PMO snapshots
docs/standards/index.md	Adds Project Management to the standards table
CLAUDE.md	Replaced full doc with a shim that imports `AGENTS.md` and keeps Claude-Code-specific notes
AGENTS.md	New canonical cross-tool repo instructions + offline fallback + session protocol
.mcp.json	Adds repo-level MCP server wiring for `hcs-governance`
.gitignore	Ignores Claude local logs directory
.github/copilot-instructions.md	Points Copilot to `AGENTS.md` and the `.ai/` session protocol
.codex/config.toml	Adds Codex MCP server configuration for `hcs-governance`
.claude/settings.json	Adds Claude Code hooks + permissions allowlist
.claude/hooks/validate-path.ps1	PreToolUse hook to block writes to protected paths
.claude/hooks/summarize-session.ps1	Stop hook to log session end events
.claude/hooks/log-tokens.ps1	PostToolUse hook to log tool usage
.claude/hooks/format-on-write.ps1	Optional (currently mostly disabled) format-on-write hook template
.claude/hooks/check-context.ps1	Optional context watcher hook script template (install guidance)
.claude/hooks/block-secrets.ps1	PreToolUse hook to block writes that match common secret patterns
.claude/agents/azurelocal-platform-engineer.md	Adds a repo-specific Claude subagent definition
.ai/state/OPEN_QUESTIONS.md	Initializes session “open questions” state file
.ai/state/HANDOFF.md	Initializes session handoff file with scaffold notes
.ai/state/CURRENT_TASK.md	Initializes current task state file
.ai/memory/PROJECT_CONTEXT.md	Initializes durable project context placeholder
.ai/memory/GOTCHAS.md	Initializes gotchas placeholder
.ai/memory/DECISIONS.md	Initializes decisions placeholder
.ai/memory/COMMANDS.md	Initializes commands placeholder
.ai/mcp/mcp-servers.md	Documents MCP server inventory and bootstrap instructions

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

+AzureLocal uses the per-repository project model unless `registry.yaml` explicitly assigns a
+shared project. A board SHOULD represent one repository. A cross-repository portfolio board MAY
+use the organization Project when its configuration names that scope explicitly.


+| ADO project | N/A - see registry.yaml `ado_project` or ask the HCS Governance MCP `get_repo` for this repo's work-item tracking project |
+| Area path | N/A - see registry.yaml or ask the HCS Governance MCP |


+$logDir = "D:\git\azurelocal\platform\.claude\logs"
+
+$input_json = $input | Out-String
+try { $payload = $input_json | ConvertFrom-Json } catch { exit 0 }
+
+if (-not (Test-Path $logDir)) { New-Item -ItemType Directory -Path $logDir -Force | Out-Null }
+
+$entry = @{
+    timestamp   = (Get-Date -Format 'o')
+    tool_name   = $payload.tool_name
+    file_path   = $payload.tool_input.file_path
+    session_id  = $env:CLAUDE_SESSION_ID
+} | ConvertTo-Json -Compress
+
+Add-Content -Path "$logDir\tokens.jsonl" -Value $entry -Encoding UTF8


+$logDir = "D:\git\azurelocal\platform\.claude\logs"
+
+if (-not (Test-Path $logDir)) { New-Item -ItemType Directory -Path $logDir -Force | Out-Null }
+
+$entry = @{
+    timestamp  = (Get-Date -Format 'o')
+    event      = "session_stop"
+    session_id = $env:CLAUDE_SESSION_ID
+} | ConvertTo-Json -Compress
+
+Add-Content -Path "$logDir\sessions.jsonl" -Value $entry -Encoding UTF8


+- Primary language: Mixed
+- Commit format: `type(scope): short description`
+- No credentials, tokens, or subscription IDs committed to any file.
+- Local path: D:/git/azurelocal/platform


+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/block-secrets.ps1" },
+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/validate-path.ps1" }


+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/log-tokens.ps1" }


+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/summarize-session.ps1" }


+
+## Repo structure
+
+- See CLAUDE.md in this repo for the current directory layout.


kristopherjturner added 2 commits July 11, 2026 03:19

feat(claude): add Claude Code scaffold

ab6777a

AB#4942

docs(standards): add PMO board overlay AB#4945

36bb5fc

Copilot AI review requested due to automatic review settings July 16, 2026 17:22

Copilot started reviewing on behalf of kristopherjturner July 16, 2026 17:23 View session

kristopherjturner closed this Jul 16, 2026

chatgpt-codex-connector Bot reviewed Jul 16, 2026

View reviewed changes

Copilot AI reviewed Jul 16, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add the AzureLocal PMO board standard#26

Add the AzureLocal PMO board standard#26
kristopherjturner wants to merge 2 commits into
mainfrom
feature/pmo-board-standard

kristopherjturner commented Jul 16, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

		{ "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/block-secrets.ps1" },
		{ "type": "command", "command": "pwsh -NonInteractive -File D:/git/azurelocal/platform/.claude/hooks/validate-path.ps1" }

		@@ -0,0 +1,33 @@
		# PreToolUse hook — blocks writes containing secret patterns


		## Publication

		Generated snapshots stay under ignored `.artifacts/pmo/`. Scheduled automation publishes an

		\| ADO project \| N/A - see registry.yaml `ado_project` or ask the HCS Governance MCP `get_repo` for this repo's work-item tracking project \|
		\| Area path \| N/A - see registry.yaml or ask the HCS Governance MCP \|


		## Repo structure

		- See CLAUDE.md in this repo for the current directory layout.

Uh oh!

Conversation

kristopherjturner commented Jul 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

kristopherjturner commented Jul 16, 2026 •

edited

Loading