| D1 | B-D1 | The project is CopilotForge, hosted only at github.com/SimonFoote-greensparx/CopilotForge, with an independence statement in the README and NOTICE. It is a separate project from D365Forge and is never merged with it. | Accepted | The owner asked for a new project and a new repository, with D365Forge left untouched. | 2026-10-29 |
| D2 | B-D2 | Content (skills, templates, programmes, profiles, sources, documentation) under CC BY 4.0; code (scripts/, .github/, future website scripts) under MIT. Copyright "Simon Foote and the CopilotForge contributors". Credit travels in NOTICE.md, CITATION.cff, every skill's license and metadata.authors, and every template's closing credit line. Documents an organisation completes from the templates need no credit. | Accepted | Same model as D365Forge, chosen by the owner: free for any use, including commercial, while sharing or adapting requires credit. | 2026-10-29 |
| D3 | - | UK English, enforced by scripts/check-uk-english.py; Microsoft product names keep Microsoft's spelling. | Accepted | Brief language setting. | 2026-10-29 |
| D4 | B-D4 | Simon Foote is the sole author, maintainer and reviewer. Changes are committed directly to main. Revisit when outside contributors join (branch protection and pull requests). | Accepted | Owner's choice for the early phases. | 2026-10-29 |
| D5 | B-D3 | The runtime is Microsoft Copilot Cowork: one plugin archive per active department in cowork/plugins/, in the plugin format Cowork's Upload plugin accepts, generated deterministically with its manifests (D22). | Accepted | Brief recommends prioritising Cowork. | 2026-10-29 |
| D6 | - | Repository layout follows the brief (section 11): departments/, reviewers/ (reviewer-class departments), programmes/, editions/, archetypes/, templates/, assessments/, profiles/, sources/, scenarios/, evaluations/, examples/, docs/, scripts/, site/. Each department folder is itself an installable plugin with generated manifest and README. | Accepted | Evolves the D365Forge plugins/ pattern into the brief's structure without losing installability. | 2026-10-29 |
| D7 | B-D7 | Skill frontmatter keeps the open Agent Skills top-level keys (name, description, license, metadata). The brief's fields (department, lifecycle, maturity, risk-tiers, platforms, edition-support, reviewers, sources, plus status and authors) sit inside metadata as plain comma-separated strings. The brief's triggers field lives in tests/triggers/ so prompts are tested, not just listed. maturity lists the archetypes a skill mainly serves. | Accepted | Copilot Cowork validates uploaded skills against the Agent Skills format; extra top-level keys or nested values risk rejection. | 2026-10-29 |
| D8 | B-D7 | Skill body sections follow the brief (section 10) in fixed order at heading level 2, with ### Starter, ### Scale, ### Enterprise under Scale notes, the standard Sources paragraph, and ## Never last. Practitioner approach is 250-650 words. Rules in docs/STYLE-GUIDE.md. | Accepted | Predictable schema for contributors, generators and Cowork. Never last so edition fragments can be spliced before it. | 2026-10-29 |
| D9 | - | Skill names are unique across CopilotForge and never reuse a D365Forge skill name; plugin names are copilotforge-<department>; the marketplace is copilotforge. Brief candidate names that clash are renamed (for example readiness-assessment became copilot-adoption:adoption-readiness, raci became coe-raci, profile-intake became ai-profile-intake). data/reserved-names.toml holds the D365Forge names; scripts/check-separation.py enforces the rule. | Accepted | Both libraries can be installed in the same Cowork tenant without one shadowing or renumbering the other. | 2026-10-29 |
| D10 | B-D10 | The initial flagship programme is AI Transformation, with adoption, Champions and the CoE as its backbone and discovery, agent factory and governance as included programmes. | Proposed - confirm | Brief recommendation. | 2026-10-29 |
| D11 | B-D11 | Reference implementations of a Copilot Champions programme and an AI Centre of Excellence, supplied by the owner, are generalised into the Champions and CoE skills and templates. No organisation is named anywhere in the project: not the source organisations, clients or employers. scripts/check-safety.py checks this using hashed names, so the check itself names no one. No attribution to the source organisations. | Accepted | Owner's instruction: keep everything generic. Brief section 20.4. | 2026-10-29 |
| D12 | B-D5 | Editions Starter, Scale, Enterprise, chosen by data/tailoring-rules.yaml: Enterprise at 2,500+ people or 4+ business units; Starter below 250 people in one business unit without high regulatory expectations; otherwise Scale. High regulatory expectations add a formal assurance overlay whatever the edition. Thresholds are proposed CopilotForge conventions. | Proposed - confirm | Brief section 9.1 defines the editions but not thresholds; deterministic rules make recommendations explainable and testable. | 2026-10-29 |
| D13 | B-D6 | Archetypes Explorer, Adopter, Builder, Scaler, AI Enterprise. Diagnosis takes the earliest stage whose exit is not met, and reports signals of later stages separately (for example agents-emerging). | Proposed - confirm | Prevents placing an organisation beyond a skipped foundation, while still triggering the agent route when staff are already building agents. | 2026-10-29 |
| D14 | B-D9 | The website is generated from this tree in the same way as D365Forge's: scripts/build-site.py writes the core pages into site/ (checked for drift), and scripts/build-hosting.py builds a self-contained site in dist/website/ and dist/copilotforge-website.zip for professional web hosting at **https://copilotforge.ai/**, with a page for every guide, department, skill, template and programme, a downloads area, licence texts, 404, .htaccess, robots.txt and sitemap.xml. The programme builder runs in the browser and scripts/check-programme-builder.py proves it recommends exactly what scripts/tailor.py does. GitHub Pages is not used. | Accepted | Owner's instruction. Closes O1. | 2026-10-29 |
| D15 | - | The catalogue holds 27 departments: the 25 in the four layers plus the two spanning capabilities (ai-centre-of-excellence, organisation-tailoring), matching the brief's Appendix A. | Accepted | Section 3 of the brief says 25; Appendix A lists 27. | 2026-10-29 |
| D16 | - | Cowork archives are stored uncompressed with fixed timestamps; skill folders hold only file types Microsoft 365 Copilot accepts (bundled data is JSON, YAML or Markdown, never TOML); at most 20 skills per plugin and 20 companion files per skill. | Accepted | Carries forward a packaging lesson learned on D365Forge. | 2026-10-29 |
| D17 | - | Walking skeleton (phase 1): eight active departments (ai-strategy, opportunity-management, copilot-adoption, champions, ai-centre-of-excellence, organisation-tailoring, m365-agents, security-privacy) with 35 first-draft skills chosen from the brief's candidates to cover the complete journey. Remaining candidates stay in the catalogue backlog. | Accepted | Brief section 20.1: prove the whole proposition with the smallest complete journey. | 2026-10-29 |
| D18 | B-D12 | Canonical samples for v0.1: Larkfield Services (fictional), 600 people, matching the brief's acceptance prompt (section 17.2), and Ashby Studio (fictional), 40 people, as the proportionality contrast. The 5,000-person and regulated samples follow in phase 1. | Proposed - confirm | The brief's appendix D suggests 500 people; the acceptance prompt says 600, so the sample matches the prompt it is tested against. | 2026-10-29 |
| D19 | - | Progressive risk tiers 0-4 (brief section 2.1) are the governance convention used by every skill and programme gate. Reviewer gates apply from tier 2 unless a programme says otherwise. | Accepted | Proportionate control without blocking low-risk experimentation. | 2026-10-29 |
| D20 | - | Product names are taken from the current source record, not from skill memory. Microsoft documentation now presents Microsoft 365 Copilot as Microsoft Copilot during a naming transition; skills avoid building method on product names. | Accepted | Brief principle: current facts come from sources. | 2026-10-29 |
| D22 | - | Scope is Microsoft AI only: Copilot Chat, Microsoft 365 Copilot, agents, Copilot Cowork, Copilot Code, Copilot Studio, Microsoft Foundry (including third-party models available through Microsoft), Power Platform automation and the Microsoft governance stack. Non-Microsoft AI products are out of scope. CopilotForge targets Copilot Cowork as its runtime; no ChatGPT or Codex manifests are produced. | Accepted | Owner's instruction; the project is called CopilotForge. Closes O2. | 2026-10-29 |
| D23 | - | The website has an Author page (Simon Foote, with headshot, LinkedIn and a generic bio that names no employer, client or company) and a Contributors page listing Matt Fitchett. Both are generated from scripts/_site.py. | Accepted | Owner's instruction, matching the D365Forge style. | 2026-10-29 |
| D24 | - | The website links the GitHub repository everywhere, as the D365Forge website does: a GitHub item in the navigation, a "View on GitHub" button, links to repository-only files and every written repository address (GITHUB_LINKS = True in scripts/_site.py). While the repository is private, people without access see GitHub's "page not found"; --no-github-links turns the links off. | Accepted (revised) | Owner's instruction, matching D365Forge. | 2026-10-29 |
| D25 | - | First versions of all 27 departments (v0.2): every candidate skill in the brief now has a first-draft skill, recorded in data/candidate-skill-map.yaml (candidates that clashed or were too generic to route were renamed, for example testing became ai-engineering:ai-solution-testing; recognition-model and progression-model share champions:recognition-and-progression). Programmes list supporting_departments. All skills stay draft until reviewed. Supersedes the scope limit in D17. | Accepted | Owner's instruction. | 2026-10-29 |
| D26 | - | The website is marked Draft on every page (header badge and home-page notice) until v1.0. | Accepted | Owner's instruction; all content is first draft. | 2026-10-29 |
| D27 | - | Brand: the CopilotForge logo heads the website home page and the README, and the CopilotForge icon is the site icon (header, favicon, Apple touch icon, 192 and 512 pixel app icons) with a 1200 x 630 social sharing image, all in site/assets/brand/ and generated from the owner's supplied artwork. The site colours follow the logo: Copilot blue, then a cyan, orange, pink and purple gradient. | Accepted | Owner's instruction, matching how D365Forge uses its logo and icon. | 2026-10-30 |
| D21 | B-D8 | Source volatility classes high, medium and low with maximum review intervals of 45, 120 and 400 days; overdue reviews warn in the checks. | Proposed - confirm | Brief section 14.2. | 2026-10-29 |