A major reason I tried out the plugin was seeing prominently:

🔒 Explicit context sharing - only sends what you specifically request, either as context or selection

which I greatly appreciated.

I've only used it casually so far and have thus far been using the contexts functionality via e.g. #files:*.lua and have been assuming that what was sent was only what I specifically requested.

But I've just had Copilot include a reference to a buffer containing private data which I definitely didn't intend to be shared with anyone (let alone Copilot).

It appears this is the case due to the second bit of functionality there ("selection") wherein the contents of the buffer were sent because I had 3 windows open and the private buffer was the buffer I entered just before CopilotChat. While I can understand some users might expect the buffer they came from to be automatically sent over -- as maybe when there is just one other buffer it's clear that's what's going to be referenced -- that behavior seems to me to be the opposite of explicitly sharing content.

I believe for myself that I can simply disable the selection functionality and/or limit it to just visual selection -- but I think the README seems to leave what to be desired there as I don't think I'm the only one who would read "only sends what you specifically request" in this way.

If the default stays what it is (sending buffers) I think that line should be changed to say something more like "Minimal default sharing - sends only the contents of the previous buffer" or something, and links to a section saying how to limit that even further.

(Thanks again for the plugin!)