To use an API key from Settings → API Keys, add an Authorization header with the value Bearer minds_YOUR_API_KEY, stored as an input variable rather than in the file.
A useful Copilot task begins with the customer-facing change described in a pull request, rather than the repository as a whole. Extract the proposed benefit, the important limitation, and the explanation a customer would actually see. Ask the assistant to prepare an Audience Study that checks which expectations that explanation creates. Include a question about what respondents think happens after they click the main action.
Bring the findings back into the review as specific wording or acceptance-criteria questions. Keep technical defects, simulated customer concerns, and decisions made by the reviewer distinguishable. A favorable response is not a reason to skip security review, and an objection may call for clearer communication rather than additional implementation.
