[deps-release-notes] awf v0.27.9 action items #1184

Release Notes Action Items for awf 0.27.3 → 0.27.9

This issue summarizes upstream release notes for the awf dependency between the previously pinned version (0.27.3) and the new pinned version (0.27.9), highlighting items that may need follow-up in ado-aw.

The companion version-bump PR is titled chore(deps): update AWF_VERSION to 0.27.9.

Releases analyzed

• v0.27.4
• v0.27.5
• v0.27.6
• v0.27.7
• v0.27.8
• v0.27.9

Notable features for ado-aw to adopt

• allowedModels/disallowedModels policy enforcement in api-proxy (v0.27.5): AWF's api-proxy now enforces allowed/disallowed model lists at the firewall level. ado-aw could surface this as a model-policy: front-matter field (or as allowed-models:/blocked-models: subkeys under engine:) that gets compiled into the AWF --config JSON, letting pipeline authors restrict which models the agent can request.
• COPILOT_INTEGRATION_ID forwarding from host env (v0.27.5): AWF now forwards the COPILOT_INTEGRATION_ID environment variable from the host into the sandbox. ado-aw could expose this as a configurable field so pipeline authors can set a specific integration identity for Copilot telemetry and billing attribution.
• Copilot Business endpoint auth prefix corrected (v0.27.9): The api-proxy was using the wrong auth prefix for the Copilot Business endpoint (bearer instead of token). Pipelines running against Copilot Business accounts may have been silently experiencing auth failures; this release resolves them. No ado-aw code change needed — the fix is inside AWF — but consider testing Business-endpoint pipelines after upgrade.

This issue was opened automatically by the dependency version updater workflow.

Generated by Dependency Version Updater · 867 AIC · ⌖ 19 AIC · ⊞ 38.9K · ◷