Tracking: CI improvements

[automated] Canonical tracker for current CI improvement work. Each work item links to its tracking issue, with the implementing pull request and next decision or action alongside it. Completed work is collected at the bottom.

**Status:** 🚧 In progress (draft work) · 👀 Ready for review · ⛔ Blocked · ⏳ To do · ✅ Done

## Faster PR CI

Active selector stack: #19882 → #19926 → #19939.

| Status | Work / tracking issue | Implementation PR | Next step |
| --- | --- | --- | --- |
| ☐ 🚧 In progress | [Complete the selective-CI accuracy audit](https://github.com/microsoft/aspire/issues/19787) | — | The latest published checkpoint is 42 of 50 eligible runs with no false positives or false negatives. Publish the final classification and close or extend the audit. |
| ☐ 🚧 In progress | [Land renamed-path parsing and selector diagnostics fixes](https://github.com/microsoft/aspire/issues/19786) | [#19790](https://github.com/microsoft/aspire/pull/19790) (draft) | Finish implementation and review. |
| ☐ 👀 Ready for review | [Fix routing gaps found by the live selector audit](https://github.com/microsoft/aspire/issues/19879) | [#19882](https://github.com/microsoft/aspire/pull/19882) | Review and merge the first stack layer. |
| ☐ 👀 Ready for review | [Enforce selector dependency invariants](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19926](https://github.com/microsoft/aspire/pull/19926), stacked on #19882 | Review and merge after #19882. |
| ☐ ⛔ Blocked | [Skip CI for generated API/ATS baseline-only changes](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19939](https://github.com/microsoft/aspire/pull/19939) (approved), stacked on #19926 | Land after its base PRs. |
| ☐ 🚧 In progress | [Add focused Copilot review guidance for trigger-map changes](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19942](https://github.com/microsoft/aspire/pull/19942) (draft) | Finish implementation, validation, and review. |
| ☐ ⏳ To do | [Measure the before/after PR CI improvement](https://github.com/microsoft/aspire/issues/18036) (inline) | — | Reconstruct comparable pre-enforcement runs, then compare representative post-enforcement runs after the active selector stack lands. |

During rollout, favor safety over savings: use full CI whenever routing is uncertain, and record both missed required coverage and unnecessary selections.

## Automated CI issue quality and monitoring

Active implementation stack: #19806.

| Status | Work / tracking issue | Implementation PR | Next step |
| --- | --- | --- | --- |
| ☐ 👀 Ready for review | [Trust run scope and correctly classify main-branch failures](https://github.com/microsoft/aspire/issues/19454) | [#19455](https://github.com/microsoft/aspire/pull/19455) | Review and merge stack layer 1. |
| ☐ 🚧 In progress | [Use canonical identities for recurring CI failure causes](https://github.com/microsoft/aspire/issues/19578) | [#19804](https://github.com/microsoft/aspire/pull/19804) (draft) | Finish implementation and review for stack layer 2. |
| ☐ 🚧 In progress | [Attribute each failure cause to its actual failed job](https://github.com/microsoft/aspire/issues/19881) | [#19804](https://github.com/microsoft/aspire/pull/19804) (draft) | Verify per-cause attribution in review and close the issue when the fix lands. |
| ☐ 🚧 In progress | [Reconcile duplicate automated failure issues across races and replays](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19805](https://github.com/microsoft/aspire/pull/19805) (draft) | Finish implementation and review for stack layer 3. |

PR #19582 is closed and superseded by #19804.

## CI reliability

| Status | Work / tracking issue | Implementation PR | Next step |
| --- | --- | --- | --- |
| ☐ 🚧 In progress | [Eliminate the underlying Azure Functions extension E2E flake](https://github.com/microsoft/aspire/issues/19639) | — | The CI mitigation has landed. Root-cause and fix the remaining test failure. |

## Copilot agent and code-review efficiency

Workstream tracker: #19909.

| Status | Work / tracking issue | Implementation PR | Next step |
| --- | --- | --- | --- |
| ☐ 🚧 In progress | [Give Copilot code review a minimal dedicated setup](https://github.com/microsoft/aspire/issues/19907) | [#19911](https://github.com/microsoft/aspire/pull/19911) (draft) | Finish implementation and review, then run the required post-merge review benchmark. |
| ☐ ⛔ Blocked | [Enable reliable on-demand restore, build, test, and AppHost runs behind the Copilot firewall](https://github.com/microsoft/aspire/issues/19908) (investigation closed) | [#19912](https://github.com/microsoft/aspire/pull/19912) (draft) | Administrator allowlisting and three clean validation sessions are required before setup-time restore can be removed. |
| ☐ ⏳ To do | [Evaluate the remaining startup optimizations in measured steps](https://github.com/microsoft/aspire/issues/19909) | — | Establish the required usage and timing evidence before removing tools, changing review context, or evaluating custom runners. |

## Improved quality gates

| Status | Work / tracking issue | Implementation PR | Next step |
| --- | --- | --- | --- |
| ☐ ⏳ To do | [Validate published Aspire CLI builds end-to-end from Azure DevOps and GitHub](https://github.com/microsoft/aspire/issues/18036) (inline) | [#17532](https://github.com/microsoft/aspire/pull/17532) (draft) | Decide whether to resolve the stale failures and resume or close the draft. |
| ☐ ⏳ To do | [Add zizmor GitHub Actions security analysis](https://github.com/microsoft/aspire/issues/18036) (inline) | [#15987](https://github.com/microsoft/aspire/pull/15987) (draft) | Decide whether to refresh and resume or close the inactive draft. |

## Completed

| Status | Work / tracking issue | Implementation PR | Completed |
| --- | --- | --- | --- |
| ☑ ✅ Done | [Select installer jobs and loose CI dependencies correctly](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19687](https://github.com/microsoft/aspire/pull/19687) | 2026-08-28 |
| ☑ ✅ Done | [Enable selective test and job execution with a full-CI escape hatch](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19688](https://github.com/microsoft/aspire/pull/19688) | 2026-08-28 |
| ☑ ✅ Done | [Keep CI green while preserving Azure Functions E2E diagnostics](https://github.com/microsoft/aspire/issues/19639) | [#19760](https://github.com/microsoft/aspire/pull/19760) | 2026-09-01 |
| ☑ ✅ Done | [Consolidate test execution into selector-friendly lanes](https://github.com/microsoft/aspire/issues/19788) | [#19761](https://github.com/microsoft/aspire/pull/19761) | PR merged 2026-09-02; issue closed 2026-09-04 |
| ☑ ✅ Done | [Gate all six CLI Starter Validation jobs on selector output](https://github.com/microsoft/aspire/issues/18036) (inline) | [#19807](https://github.com/microsoft/aspire/pull/19807) | 2026-09-03 |
| ☑ ✅ Done | [Fix and automatically validate the Copilot setup workflow](https://github.com/microsoft/aspire/issues/19906) | [#19910](https://github.com/microsoft/aspire/pull/19910) | 2026-09-04 |