Identity ganja presents to GitHub Copilot

What it does

Decides which identity ganja presents to GitHub's device sign-in endpoints and to the Copilot API, which still receive the borrowed upstream User-Agent and client id.

Source

ganja-code-copilot-identity-decision-x3n (which identity ganja presents to GitHub Copilot).

The bead is closed when this issue is published, with its external reference pointing here (#38).

File and line references in this issue are to main as of 75a7a92.

Against the three criteria

• Direction (README): The README says nothing about provider wires.
• Today's terminal users: The borrowed values are sent today (crates/ganja-provider/src/auth/copilot.rs:175-177, crates/ganja-provider/src/provider/copilot.rs:190-193), while the other three credential-bearing hosts moved to ganja's own name under D521.
• Evidence: A wrong identity here risks a suspended account rather than a refused sign-in, so the before-and-after probe that settled the other hosts cannot be run safely. A decision needs evidence about what the host gates on and an explicit acceptance of the residual risk.

Depends on

Nothing.

Verdict

• Verdict: park
• Reopens: at the next landing that touches the Copilot provider or its device sign-in.
• Exception to the probe rule: no.
• Date: 2026-09-19
• Verdict ticket: #44

Theme: #57

Read crates/ganja-provider/src/auth/copilot.rs:175-177 and crates/ganja-provider/src/provider/copilot.rs:190-193, then review verdict ticket #44 and the README discussion of provider wires. The issue is explicitly parked; it reopens when work touches the Copilot provider or device sign-in, with completion dependent on an evidence-based identity decision and accepted residual risk.