runtime-remediation git:20260424.a607dbdA

Immutable. This exact content is served forever at /api/v1/blob/87098e12bc206d97.

---
name: runtime-remediation
description: 'Use when you want live, controlled code edits during an AppSec demo: apply minimal hardening changes, validate outcomes, and provide rollback commands.'
argument-hint: 'Provide finding IDs, target files, and confirmation to run in apply mode'
user-invocable: true
---

# Runtime Remediation Skill

## When to use

Use for live demonstrations where Copilot should edit code during the session.

## Safety constraints

- Only apply edits after explicit user request.
- Keep changes minimal and scoped to confirmed findings.
- Do not perform destructive operations.
- Always include rollback commands.

## Procedure

1. Confirm findings and mapped controls.
2. Restate scope and apply minimal edit set.
3. Summarize all changed files and why they changed.
4. Run lightweight validation checks if available.
5. Report residual risk and rollback commands.

## Required output

- `mode`: apply
- `changed_files`: list
- `control_ids`: list
- `validation_summary`: text
- `rollback_commands`: list

## Rollback guidance

Prefer Git rollback commands for tracked files and clear manual restoration notes for untracked files.