chore(model-apps): remove real environment identifiers from a public repo

The genpage eval fixtures are captured agent transcripts, so they recorded
whatever live environment each eval ran against — including `pac auth list`
output carrying the operator's UPN, tenant, and environment URL. That had
accumulated to 98 occurrences of three environments, two tenants and two user
accounts across 28 files, plus provenance comments in four scripts and the
roadmap.

Fixture replacements are equal-length. The fixtures embed `pac auth list`
output as a fixed-width table, so a shorter placeholder would misalign every
following column and make a captured artifact look hand-edited. Verified: the
diff is exactly 65 insertions / 65 deletions with no line-ending drift (the
fixtures are LF, the scripts CRLF).

Script provenance comments are generalised rather than substituted. "Verified
live on <envname>" carries a real claim; swapping in a fake environment name
would keep the sentence readable but make it false, so the claim is kept and
the environment dropped ("verified live on a Dataverse test environment").

Adds `scripts/validate-no-real-environments.js` so the scrub sticks. Pasting a
fresh live transcript is the realistic regression path and it looks correct to
a reviewer. The guard matches on shape, not just on the strings removed here:
`org<8 hex>` is what Dataverse auto-generates, so it is rejected even though it
starts with the otherwise-allowed word `org`. Scoped to model-apps, because
other plugins still carry pre-existing references of this class and widening
the scan today would fail unrelated PRs; the limitation is documented in the
script header and in AGENTS.md rather than left implicit.

No behaviour change: 1474 plugin tests, 159 eval tests, and 12/12 layer-1
fixtures still pass. The layer-1 assertions match generic URL shapes
(`/https?:\/\/[a-z0-9-]+\.(crm|dynamics)/i`), not any specific environment, so
the rewritten fixtures still exercise them.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 42626da2-b66f-4162-acaa-b1127ef23d89

Author: akshay-viz

.github/workflows/validate-repository-metadata.yml

@@ -10,6 +10,7 @@ jobs:
         runs-on: ubuntu-latest
         env:
             POWER_PLATFORM_SKILLS_TELEMETRY_POWER_PAGES_OPTOUT: "1"
+            POWER_PLATFORM_SKILLS_TELEMETRY_MODEL_APPS_OPTOUT: "1"
         steps:
             - name: checkout
               uses: actions/checkout@v4
@@ -36,3 +37,13 @@ jobs:
 
             - name: validate-secure-process-execution
               run: node scripts/validate-secure-process-execution.js
+
+            # This repository is public, and the genpage eval fixtures are captured
+            # agent transcripts that will faithfully record whatever live environment
+            # an eval was run against. Guarding this in CI is the only reliable
+            # control: a pasted transcript looks correct to a reviewer.
+            - name: test-no-real-environments-validator
+              run: node --test scripts/tests/validate-no-real-environments.test.js
+
+            - name: validate-no-real-environments
+              run: node scripts/validate-no-real-environments.js

AGENTS.md

@@ -37,6 +37,21 @@ rebuild a vendored bundle. Both carry real "why" context and disclose no content
 a committed file. When editing an existing doc, keep this rule in mind for the lines around your
 change, not just the ones you add.
 
+**CI enforcement (partial).** `node scripts/validate-no-real-environments.js` (wired into the
+`validate-repository-metadata` workflow) fails the build when a real Dataverse host, tenant, or
+previously-removed identifier appears under `plugins/model-apps/**` or `evals/model-apps/**`. It
+matches on *shape* — `org<8 hex>` is what Dataverse auto-generates, so it is rejected even though it
+starts with the otherwise-allowed word `org` — rather than only re-catching known strings. Run it
+locally after touching eval fixtures or any file that quotes an environment URL.
+
+The scan is **scoped to model-apps only**, and this is a real gap rather than an oversight: other
+plugins still carry pre-existing references of this class (for example real `org<8 hex>` orgs cited
+in power-pages provenance comments), so widening the scan today would fail unrelated PRs. Scrub a
+plugin first, then add it to `SCAN_PATHS`. The guard also cannot see the *local part* of a UPN, so
+`firstname.lastname@contoso.onmicrosoft.com` passes — use a role word (`maker@`, `tester@`).
+Captured `pac auth list` transcripts are the most common source of all three; when scrubbing one,
+prefer an **equal-length** placeholder so the fixed-width table stays aligned.
+
 ## Repository Structure
 
 ```

evals/model-apps/genpage/fixtures/1-account-card-gallery/genpage-plan.md

@@ -16,8 +16,8 @@ D:\Projects\power-platform-skills\plugins\model-apps
 
 ## Environment
 
-- Active Profile: aurora365-user1@auroratstgeo.onmicrosoft.com
-- URL: https://aurorabapenv4ab3f.crm10.dynamics.com/
+- Active Profile: contoso-user001@contosotest1.onmicrosoft.com
+- URL: https://contosobapenv0002.crm10.dynamics.com/
 - App: Sales Hub (12345678-1234-1234-1234-123456789abc)
 - Languages: English (1033) only
 - Solution: Default

evals/model-apps/genpage/fixtures/1-account-card-gallery/workflow-log.md

@@ -12,8 +12,8 @@
 - (Run separately, not chained with &&)
 
 ### Auth check
-- `pac auth list` → active profile aurora365-user1@auroratstgeo.onmicrosoft.com
-- Active environment: https://aurorabapenv4ab3f.crm10.dynamics.com/ (reported to user)
+- `pac auth list` → active profile contoso-user001@contosotest1.onmicrosoft.com
+- Active environment: https://contosobapenv0002.crm10.dynamics.com/ (reported to user)
 
 ### Entity discovery
 - `pac model list-tables --search 'account'` — Account entity detected as existing (exact logical-name match: `account`)

evals/model-apps/genpage/fixtures/11-recruitment-multi-page/genpage-plan.md

@@ -16,8 +16,8 @@ D:\Projects\power-platform-skills\plugins\model-apps
 
 ## Environment
 
-- Active Profile: aurora365-user1@auroratstgeo.onmicrosoft.com
-- URL: https://aurorabapenv4ab3f.crm10.dynamics.com/
+- Active Profile: contoso-user001@contosotest1.onmicrosoft.com
+- URL: https://contosobapenv0002.crm10.dynamics.com/
 - App: Recruitment Hub (44444444-3333-4444-5555-666666666666)
 - Languages: English (1033) only
 - Solution: Default

evals/model-apps/genpage/fixtures/11-recruitment-multi-page/workflow-log.md

@@ -11,8 +11,8 @@
 - `pac help` → PAC CLI Version 2.11.0 (> 2.10.0 verified)
 
 ### Auth check
-- `pac auth list` → active profile aurora365-user1@auroratstgeo.onmicrosoft.com
-- Active environment: https://aurorabapenv4ab3f.crm10.dynamics.com/ (reported to user)
+- `pac auth list` → active profile contoso-user001@contosotest1.onmicrosoft.com
+- Active environment: https://contosobapenv0002.crm10.dynamics.com/ (reported to user)
 
 ### Entity discovery
 - `pac model list-tables --search 'contact,appointment'` — both entities detected as existing

evals/model-apps/genpage/fixtures/11-recruitment-pages-real/README.md

@@ -6,7 +6,7 @@ First real capture taken after the v2.2 planner-spec tightening landed.
 ## Source
 
 Captured from a real `/genpage` session against
-`https://aurorabapenv610b3.crmtest.dynamics.com`. Driven by
+`https://contosobapenv0001.crmtest.dynamics.com`. Driven by
 `claude-sonnet-4-6` under the v2.1 plugin + v2.2 Phase 0.5 manifest generator
 + v2.2 spec-tightening. Working dir was `D:/temp/recruitment-app/`.
 

evals/model-apps/genpage/fixtures/11-recruitment-pages-real/genpage-plan.md

@@ -10,7 +10,7 @@ D:/temp/recruitment-app
 D:/Projects/power-platform-skills/plugins/model-apps
 
 ## Environment
-- URL: https://aurorabapenv610b3.crmtest.dynamics.com
+- URL: https://contosobapenv0001.crmtest.dynamics.com
 - App: create new: Recruitment App
 - Languages: English (1033) only
 - Solution: Crdec34

evals/model-apps/genpage/fixtures/11-recruitment-pages-real/workflow-log.md

@@ -13,13 +13,13 @@ PAC CLI Version 2.11.0+g06bb2eb (.NET 10.0.8)
 `pac auth list`
 Index Active Kind      Name User                                          Cloud  Type            Environment       Environment Url
 [1]          UNIVERSAL      akmaloo@microsoft.com                         Public OperatingSystem
-[2]          UNIVERSAL      aurorauser14@capintegration01.onmicrosoft.com Test   User            TMSBAPEnv5ee52    https://tmsbapenv5ee52.crmtest.dynamics.com/
-[3]   *      UNIVERSAL      Aurora365-User1@auroratstgeo.onmicrosoft.com  Test   User            AuroraBAPEnv610b3 https://aurorabapenv610b3.crmtest.dynamics.com/
+[2]          UNIVERSAL      fabrikamusr1@fabrikamtenant01.onmicrosoft.com Test   User            FabrikamEnv001    https://fabrikamenv001.crmtest.dynamics.com/
+[3]   *      UNIVERSAL      Contoso-User001@contosotest1.onmicrosoft.com  Test   User            ContosoBAPEnv0001 https://contosobapenv0001.crmtest.dynamics.com/
 
-AskUserQuestion: Which environment should be used for the recruitment app? → [3] Aurora365-User1@auroratstgeo.onmicrosoft.com — AuroraBAPEnv610b3 (currently active)
+AskUserQuestion: Which environment should be used for the recruitment app? → [3] Contoso-User001@contosotest1.onmicrosoft.com — ContosoBAPEnv0001 (currently active)
 
 `pac auth select --index 3`
-New default profile: * UNIVERSAL : Aurora365-User1@auroratstgeo.onmicrosoft.com Test https://aurorabapenv610b3.crmtest.dynamics.com/
+New default profile: * UNIVERSAL : Contoso-User001@contosotest1.onmicrosoft.com Test https://contosobapenv0001.crmtest.dynamics.com/
 
 `pac model list-languages`
 Found 1 enabled language(s):
@@ -75,7 +75,7 @@ User response: approved
 - Files written: package.json, genpage.d.ts (features: charts)
 
 ### Decisions
-- Environment: AuroraBAPEnv610b3 (https://aurorabapenv610b3.crmtest.dynamics.com/)
+- Environment: ContosoBAPEnv0001 (https://contosobapenv0001.crmtest.dynamics.com/)
 - PAC CLI: 2.11.0 (> 2.10.0 requirement met)
 - Node: v20.18.2
 - Languages: English only — no localization code needed

evals/model-apps/genpage/fixtures/13-contact-localization/genpage-plan.md

@@ -14,8 +14,8 @@ D:\Projects\power-platform-skills\plugins\model-apps
 
 ## Environment
 
-- Active Profile: aurora365-user1@auroratstgeo.onmicrosoft.com
-- URL: https://aurorabapenv4ab3f.crm10.dynamics.com/
+- Active Profile: contoso-user001@contosotest1.onmicrosoft.com
+- URL: https://contosobapenv0002.crm10.dynamics.com/
 - App: Sales Hub (55555555-4444-5555-6666-777777777777)
 - Languages: English (1033) only
 - Solution: Default