feat: prepare repository verification with native composite actions

.copilot/AGENT_GUIDE.md

@@ -51,4 +51,6 @@ The setup runner profile selects placement; it does not install the project's la
 
 Declare reviewed version prefixes in `.copilot/verification-prerequisites.json` (schemaVersion 1, runtimes such as java 17, node 24, pnpm 10). Copilot checks declared versions in the credential-free verification environment before each configured verification command; a missing or incompatible runtime blocks publication. Without this optional declaration, existing verification behavior remains and no language is inferred. Java provisioning may use `actions/setup-java`; `JAVA_HOME` and `PATH` survive isolation, while agent credentials and tool-option injection variables do not. Do not add an unreviewed bootstrap or weaken verification to work around a missing runtime. Read [verification prerequisites and same-job setup](https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites).
 
+The optional repository-owned composite action prepares each candidate before verification. Review `.github/actions/copilot-verification-setup/action.yml` and its assets onto trusted main, update generated workflows, then enable `VERIFICATION_SETUP=true` (Action input `verification-setup`, disabled by default). GitHub Actions executes the trusted snapshot before each command with a fresh private HOME; candidate changes cannot replace it. Native post steps finish before profile cleanup. Setup failure blocks verification and commit/push. The local CLI cannot execute composite actions and fails closed when opted in. Read [repository-owned setup](https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-owned-setup).
+
 For the full contributor flow, read [repository collaboration](https://github.com/vypdev/copilot/blob/master/docs/agents/repository-collaboration.mdx). For drift and recovery, read [guidance troubleshooting](https://github.com/vypdev/copilot/blob/master/docs/agents/repository-guidance-troubleshooting.mdx).

.copilot/setup-manifest.json

@@ -12,7 +12,7 @@
     },
     ".copilot/AGENT_GUIDE.md": {
       "role": "guide",
-      "sha256": "07ef187d584f4da868a6cebe6b6d7c7654b057af703e0d10ede11f768ba64674"
+      "sha256": "4c453f9e76287c970d56787bd082fc2d7d8d432b191a96a7132e811657905dbc"
     },
     ".copilot/repository-profile.json": {
       "role": "profile",

.github/actions/copilot-native-cleanup-check/action.yml

@@ -0,0 +1,6 @@
+name: Verify native setup cleanup
+runs:
+  using: node24
+  main: main.cjs
+  post: post.cjs
+  post-if: always()

.github/actions/copilot-native-cleanup-check/main.cjs

@@ -0,0 +1,2 @@
+const fs = require('node:fs');
+fs.appendFileSync(process.env.GITHUB_STATE, `workspace=${fs.realpathSync(process.cwd())}\n`);

.github/actions/copilot-native-cleanup-check/post.cjs

@@ -0,0 +1,10 @@
+const fs = require('node:fs');
+const path = require('node:path');
+const workspace = process.env.STATE_workspace;
+// Keep the poisoned candidate bundle through every deferred post step, then remove
+// only this job's ignored generated fixture output so subsequent runs start clean.
+fs.rmSync(path.join(workspace, '.github/actions/copilot-native-fixture/dist'), { recursive: true, force: true });
+for (const file of [path.join(workspace, '.git/copilot-verification-setup'), path.join(path.dirname(workspace), '.copilot-native-fixture-runtime')]) {
+  if (fs.existsSync(file)) throw new Error('Native acceptance left owned staging or runtime snapshots after post cleanup.');
+}
+console.log('Native acceptance cleanup passed after all deferred post steps.');

.github/actions/copilot-native-fixture/action.yml

@@ -0,0 +1,10 @@
+name: Copilot native verification acceptance
+inputs:
+  verification-setup:
+    default: 'true'
+    description: Exercise the native verification bridge
+runs:
+  using: node24
+  main: dist/index.js
+  post: dist/index.js
+  post-if: always() && env.COPILOT_NATIVE_PHASE != ''

.github/workflows/copilot_commit.yml

@@ -51,6 +51,7 @@ jobs:
           issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
           issue-managed-branches: true
           pre-branch-sdd: true
+          verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
           debug: ${{ vars.DEBUG }}
           bugbot-severity: ${{ vars.BUGBOT_SEVERITY || 'low' }}
           bugbot-comment-limit: ${{ vars.BUGBOT_COMMENT_LIMIT || '20' }}

.github/workflows/copilot_issue.yml

@@ -26,6 +26,7 @@ jobs:
           issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
           issue-managed-branches: true
           pre-branch-sdd: true
+          verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
           ai-ignore-files: build/*,specs/CATALOG.md
           bugbot-dry-run: ${{ vars.BUGBOT_DRY_RUN || 'false' }}
           bugbot-effort: ${{ vars.BUGBOT_EFFORT || 'smart' }}