What problem does it solve? When adding or reviewing any Copilot, agent, LLM, tool, permission, sandbox, MCP, model, telemetry, or configuration control in VS Code, contributors must decide where the enterprise policy belongs—runtime managed settings, VS Code configuration policy, extension policy, or a split implementation—and follow the correct declaration, export, and testing procedure. ## Core Features & Use Cases - Decision routing: A flowchart routes each enterprise control to the correct policy destination based on where the governed behavior is implemented, with dedicated guides for SDK/runtime, VS Code, extension, split, and legacy migration paths. - Managed settings reference: Documents the canonical dot-path bag, three delivery channels (native MDM, server, file-based) with per-key precedence, structured JSON-string encoding, and the projection checklist for new keys. - Policy export workflow: Enforces the canonical npm run export-policy-data procedure so policyData.jsonc is never hand-edited and the policy-export integration test passes. - Use Case: When adding a new Copilot agent permission control, use this Skill to determine it belongs in the runtime managed-settings schema, declare the key constant, attach it to a policy with managedSettingValue, and export the policy catalog correctly. ## Quick Start Ask the assistant to use the policy-and-managed-settings skill to decide where a new Copilot enterprise control should be implemented and walk through the required declaration and export steps.