Repository navigation
Record privacy-preserving safe-output outcomes in unified sessions - #72138
Merged
Merged
Conversation
… sessions Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
Record privacy-preserving safe-output application outcomes in unified sessions
Record privacy-preserving safe-output outcomes in unified sessions
Oct 26, 2026
pelikhan
marked this pull request as ready for review
October 26, 2026 15:57
Contributor
|
✅ PR Code Quality Reviewer completed the code quality review.
|
Contributor
|
✅ Ponytail Reviewer completed successfully! Ponytail ReviewerOutcome: The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible. Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.
|
Contributor
|
🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅
|
Contributor
|
✅ Design Decision Gate 🏗️ completed the design decision gate check. See the comment below for the result and any generated ADR draft. Design Decision Gate 🏗️Outcome: The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible. Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.
|
Contributor
|
✅ Test Quality Sentinel completed test quality analysis. Test Quality SentinelOutcome: The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible. Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Review summary
No actionable blocking issues found in the changed lines. The specialist pass was unavailable because its permitted diff read was rejected; this review was completed independently from the pre-fetched diff. No repository code or tests were executed per the static-review constraints.
🔎 Code quality review by PR Code Quality Reviewer · copilot · gpt50 · ~4 AIC · ⌖ ~1 AIC · ⊞ 1.6K
Comment /review to run again
Contributor
There was a problem hiding this comment.
Skills-Based Review 🧠
Applied /codebase-design and /improve-codebase-architecture (fallback heuristic used, since pr-triage output did not map directly). No blocking issues found; this is a well-scoped, privacy-focused addition.
📋 Analysis
What I checked
- safe_output_outcomes.cjs (new module): canonicalSafeOutputUrl() URL allowlist, buildSafeOutputOutcomes() fan-out/status logic, and finalizeBufferedReviewOutcomes() resolution logic — manually traced against the 318-line test suite and verified edge cases (credential stripping, query-param stripping, enterprise origin support, fan-out of array results, incomplete review evidence) via a sandboxed Node REPL since npm/vitest were unavailable offline (self-signed cert blocked registry access).
- Integration points in safe_output_handler_manager.cjs, safe_output_manifest.cjs, unified_session.cjs, unified_session_payload.cjs, unified_session_render.cjs — wiring is consistent with existing patterns (claim-scoped artifact writes, secret redaction reuse via redactManifestValue/collectArtifactSecretValues).
- Schema/spec/d.ts changes (unified-session.schema.json, spec doc, unified_session.d.ts) are consistent with the implementation and the breaking removal of message/error/free-form errors fields is intentionally covered by updated test expectations.
- Go compiler changes (compiler_safe_outputs_steps.go, golden files) correctly add the new safe-output-outcomes.jsonl artifact path for both standard and claim-scoped uploads, with matching test assertions.
Notable design strengths
- ✅ Privacy allowlist approach (projectSafeOutputData) is defense-in-depth: unknown fields are dropped by default rather than passed through, which is the right default for a privacy-sensitive surface.
- ✅ canonicalSafeOutputUrl() has strong, well-tested boundaries (HTTPS-only, no credentials, strict path allowlist per resource type, enterprise origin support, conservative comment-anchor allowlist).
- ✅ writeSafeOutputOutcomes() is wrapped in try/catch at the call site so a failure to persist outcomes doesn't fail the whole handler run — appropriate since this is best-effort telemetry, not core application logic.
- ✅ Test suite directly asserts that stringified outcomes never contain "PRIVATE" across many scenarios — a strong, literal proof of the privacy contract rather than just structural assertions.
Minor observations (non-blocking)
- finalizeBufferedReviewOutcomes() matches review comments to results using a metadata comparison (path/line/start_line/side); reasonable for typical cases but could theoretically misattribute a URL if two comments share identical metadata. Already covered by a dedicated test, so this is a low-risk edge case worth a short code comment for future maintainers rather than a required change now.
- The path regex/allowlists in canonicalSafeOutputUrl are intricate; a short inline comment mapping each branch to its resource type (issues/pull/discussions/runs/artifacts/commit/projects) would help future readers faster than reverse-engineering from tests.
Verification caveat
- I could not run make test-js / vitest in this sandbox (no network access to install node_modules, self-signed cert error from the npm registry). I verified logic manually via Node one-liners against canonicalSafeOutputUrl and traced the diff against existing call sites instead. The existing 318-line test file appears comprehensive and the manual checks I performed agreed with its expectations.
🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · copilot · sonnet50 · ~112 AIC · ⌖ ~16 AIC · ⊞ 10.2K
Comment /matt to run again
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Missing setup/CLI dependencies cause runtime failures, and outcome classification, review finalization, delegation, and GHES replay correctness issues remain unresolved.
3 open issues
What changed in this PR
Adds privacy-preserving safe_output.outcome events to unified sessions, distinguishing requested operations from application outcomes while retaining canonical GitHub/GHES resource identities.
Changes:
- Records handler outcomes, delegation, staging, and buffered-review finalization.
- Filters sensitive content and canonicalizes recognized resource URLs.
- Integrates root and claim-scoped artifacts with session collection, rendering, schemas, compiler output, tests, and generated workflows.
Unresolved findings include missing setup/CLI dependencies, premature success reporting for downstream uploads and queued ledger appends, inconsistent delegation, GHES URL loss during replay, false review skips, duplicate payload allowlists, misleading test naming, and specification/version inconsistencies.
| File | Description |
|---|---|
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden |
Updates expected outcome upload. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden |
Updates expected outcome upload. |
pkg/workflow/compiler_safe_outputs_steps.go |
Uploads root and claim-scoped outcomes. |
pkg/workflow/compiler_safe_outputs_job_test.go |
Checks outcome artifact paths. |
docs/src/content/docs/specs/unified-agent-session-specification.md |
Documents outcome and privacy semantics. |
docs/public/schemas/unified-session.schema.json |
Adds outcomes and restricts payloads. |
actions/setup/js/upload_artifact.test.cjs |
Tests staged upload outcomes. |
actions/setup/js/upload_artifact.cjs |
Exposes upload staging state. |
actions/setup/js/unified_session.cjs |
Collects root and claim-scoped outcomes. |
actions/setup/js/unified_session_render.cjs |
Renders outcome events. |
actions/setup/js/unified_session_payload.test.cjs |
Updates privacy projection expectations. |
actions/setup/js/unified_session_payload.cjs |
Applies shared safe-output projection. |
actions/setup/js/types/unified_session.d.ts |
Defines outcome payloads and restricted errors. |
actions/setup/js/safe_outputs_status.cjs |
Recognizes nested delegation flags. |
actions/setup/js/safe_output_outcomes.test.cjs |
Tests classification, privacy, and collection. |
actions/setup/js/safe_output_outcomes.cjs |
Classifies outcomes and canonicalizes URLs. |
actions/setup/js/safe_output_manifest.cjs |
Persists redacted outcomes; excludes delegated results. |
actions/setup/js/safe_output_handler_manager.cjs |
Captures outcomes and finalizes buffered reviews. |
actions/setup/js/safe_output_action_handler.test.cjs |
Checks custom-action delegation. |
actions/setup/js/safe_output_action_handler.cjs |
Marks payload exports as delegated. |
.github/workflows/workflow-skill-extractor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/workflow-normalizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/workflow-health-manager.lock.yml |
Uploads outcome artifacts. |
.github/workflows/workflow-generator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/windows.lock.yml |
Uploads outcome artifacts. |
.github/workflows/windows-grower.lock.yml |
Uploads outcome artifacts. |
.github/workflows/weekly-safe-outputs-spec-review.lock.yml |
Uploads outcome artifacts. |
.github/workflows/weekly-network-domains-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/weekly-issue-summary.lock.yml |
Uploads outcome artifacts. |
.github/workflows/weekly-editors-health-check.lock.yml |
Uploads outcome artifacts. |
.github/workflows/weekly-blog-post-writer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/visual-regression-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/video-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/update-astro.lock.yml |
Uploads outcome artifacts. |
.github/workflows/unbloat-docs.lock.yml |
Uploads outcome artifacts. |
.github/workflows/uk-ai-operational-resilience.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ubuntu-image-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/typist.lock.yml |
Uploads outcome artifacts. |
.github/workflows/tidy.lock.yml |
Uploads outcome artifacts. |
.github/workflows/test-quality-sentinel.lock.yml |
Uploads outcome artifacts. |
.github/workflows/terminal-stylist.lock.yml |
Uploads outcome artifacts. |
.github/workflows/technical-doc-writer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/super-linter.lock.yml |
Uploads outcome artifacts. |
.github/workflows/sub-issue-closer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/step-name-alignment.lock.yml |
Uploads outcome artifacts. |
.github/workflows/static-analysis-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/stale-pr-cleanup.lock.yml |
Uploads outcome artifacts. |
.github/workflows/squad.lock.yml |
Uploads outcome artifacts. |
.github/workflows/squad-plan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/squad-implement-worker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/squad-game-planner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/spec-librarian.lock.yml |
Uploads outcome artifacts. |
.github/workflows/spec-extractor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/spec-enforcer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-workflow-call.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-workflow-call-with-inputs.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-work-queue.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-work-queue-worker.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/smoke-work-queue-dispatcher.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-update-cross-repo-pr.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-test-tools.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-temporary-id.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-service-ports.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-security-alerts.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-repo-memory-ledger.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-pydantic.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-project.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-pi.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-pi-routed.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-pi-routed-claude.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-pi-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-otel-backends.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-opencode.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-multi-pr.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-kiro.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-issues.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-goose.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-github-codex.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-github-claude.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-gemini.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-drive.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-deepseek-harness.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-cursor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-crush.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-create-cross-repo-pr.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-sub-agents.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-small.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-sdk.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-sdk-routed.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-sdk-routed-claude.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-routed.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-routed-steering.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-routed-claude.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-mai.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-dynamic-workflow.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-arm.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-aoai-entra.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-copilot-aoai-apikey.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-codex.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-codex-bare-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-codex-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-sub-agents.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-routed.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-on-copilot.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-dynamic.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-copilot.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-copilot-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-claude-auto.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-ci.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-checkout-pr-dispatch.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-call-workflow.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-builtin-ledgers.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-azure-pi.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-azure-codex.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-aider.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-agent-scoped-approved.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-agent-public-none.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-agent-public-approved.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-agent-all-none.lock.yml |
Uploads outcome artifacts. |
.github/workflows/smoke-agent-all-merged.lock.yml |
Uploads outcome artifacts. |
.github/workflows/slide-deck-maintainer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/skillet.lock.yml |
Uploads outcome artifacts. |
.github/workflows/sighthound-security-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/sergo.lock.yml |
Uploads outcome artifacts. |
.github/workflows/semantic-function-refactor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/security-review.lock.yml |
Uploads outcome artifacts. |
.github/workflows/security-compliance.lock.yml |
Uploads outcome artifacts. |
.github/workflows/scout.lock.yml |
Uploads outcome artifacts. |
.github/workflows/schema-feature-coverage.lock.yml |
Uploads outcome artifacts. |
.github/workflows/schema-consistency-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/safe-output-health.lock.yml |
Uploads outcome artifacts. |
.github/workflows/research.lock.yml |
Uploads outcome artifacts. |
.github/workflows/repository-quality-improver.lock.yml |
Uploads outcome artifacts. |
.github/workflows/repo-tree-map.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/repo-audit-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/release.lock.yml |
Uploads outcome artifacts. |
.github/workflows/refiner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/refactoring-cadence.lock.yml |
Uploads outcome artifacts. |
.github/workflows/q.lock.yml |
Uploads outcome artifacts. |
.github/workflows/python-data-charts.lock.yml |
Uploads outcome artifacts. |
.github/workflows/purelock.lock.yml |
Uploads outcome artifacts. |
.github/workflows/prompt-clustering-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pr-triage-agent.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pr-sous-chef.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pr-nitpick-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pr-description-caveman.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pr-code-quality-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/portfolio-analyst.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ponytail-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/plan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/pdf-summary.lock.yml |
Uploads outcome artifacts. |
.github/workflows/org-health-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/objective-impact-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/notion-issue-summary.lock.yml |
Uploads outcome artifacts. |
.github/workflows/necromancer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/metrics-collector.lock.yml |
Uploads outcome artifacts. |
.github/workflows/mergefest.lock.yml |
Uploads outcome artifacts. |
.github/workflows/mcp-inspector.lock.yml |
Uploads outcome artifacts. |
.github/workflows/mattpocock-skills-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/lockfile-stats.lock.yml |
Uploads outcome artifacts. |
.github/workflows/linter-miner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/lint-monster.lock.yml |
Uploads outcome artifacts. |
.github/workflows/layout-spec-maintainer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/jsweep.lock.yml |
Uploads outcome artifacts. |
.github/workflows/issue-triage-agent.lock.yml |
Uploads outcome artifacts. |
.github/workflows/issue-monster.lock.yml |
Uploads outcome artifacts. |
.github/workflows/issue-arborist.lock.yml |
Uploads outcome artifacts. |
.github/workflows/instructions-janitor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/impeccable-skills-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/hourly-ci-cleaner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/hippo-embed.lock.yml |
Uploads outcome artifacts. |
.github/workflows/grumpy-reviewer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/gpclean.lock.yml |
Uploads outcome artifacts. |
.github/workflows/go-pattern-detector.lock.yml |
Uploads outcome artifacts. |
.github/workflows/go-logger.lock.yml |
Uploads outcome artifacts. |
.github/workflows/go-fan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/glossary-maintainer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/github-remote-mcp-auth-test.lock.yml |
Uploads outcome artifacts. |
.github/workflows/github-mcp-tools-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/github-mcp-structural-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/functional-pragmatist.lock.yml |
Uploads outcome artifacts. |
.github/workflows/front-page-copy-guard.lock.yml |
Uploads outcome artifacts. |
.github/workflows/firewall.lock.yml |
Uploads outcome artifacts. |
.github/workflows/firewall-escape.lock.yml |
Uploads outcome artifacts. |
.github/workflows/feature-grower.lock.yml |
Uploads outcome artifacts. |
.github/workflows/example-workflow-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/example-permissions-warning.lock.yml |
Uploads outcome artifacts. |
.github/workflows/example-failure-category-filter.lock.yml |
Uploads outcome artifacts. |
.github/workflows/evoskill-evolver.lock.yml |
Uploads outcome artifacts. |
.github/workflows/eslint-refiner.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/eslint-monster.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/eslint-miner.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/eslint-factory-dispatcher.lock.yml |
Uploads outcome artifacts. |
.github/workflows/engine-conformance-pydantic-ai.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-pi.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-opencode.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-kiro.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-goose.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-gemini.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-dispatcher.lock.yml |
Uploads outcome artifacts. |
.github/workflows/engine-conformance-deepseek-harness.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-cursor.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-crush.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-copilot.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-codex.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-claude.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-aider.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/engine-conformance-agy.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/duplicate-code-detector.lock.yml |
Uploads outcome artifacts. |
.github/workflows/draft-pr-cleanup.lock.yml |
Uploads outcome artifacts. |
.github/workflows/docs-noob-tester.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dictation-prompt.lock.yml |
Uploads outcome artifacts. |
.github/workflows/developer-docs-consolidator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dev.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dev-hawk.lock.yml |
Uploads outcome artifacts. |
.github/workflows/detection-analysis-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/designer-drift-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/design-decision-gate.lock.yml |
Uploads outcome artifacts. |
.github/workflows/deployment-incident-monitor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dependabot-go-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dependabot-burner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/delight.lock.yml |
Uploads outcome artifacts. |
.github/workflows/deepsec-security-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/deep-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/dead-code-remover.lock.yml |
Uploads outcome artifacts. |
.github/workflows/dataflow-pr-discussion-dataset.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-yamllint-fixer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-workflow-updater.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-workflow-security-model.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-work-queues-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-windows-terminal-integration-builder.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-windows-defender-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-vulnhunter-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-trajectory-grader-implementer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-token-consumption-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-testify-uber-super-expert.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-team-status.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-team-evolution-insights.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-syntax-error-quality.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-storify.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-squid-image-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-spending-forecast.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-spec-coverage-kiro.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-spdd-spec-planner.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-semgrep-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-security-red-team.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-security-observability.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-secrets-analysis.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-schema-audit-cursor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-safeoutputs-git-simulator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-safe-outputs-conformance.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-safe-output-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-safe-output-integrator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-report-dispatcher.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-repo-chronicle.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-rendering-scripts-verifier.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-reliability-review.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-regulatory.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-regression-audit-kiro.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-pr-review-cursor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-performance-summary.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-observability-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-news.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-multi-device-docs-tester.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-model-resolution.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-model-inventory.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-mcp-concurrency-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-max-ai-credits-test.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-malicious-code-scan.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-issues-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-hippo-learn.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-harness-experiment-proposer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-graft-intelligence.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-grader-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-go-test-stubs-aider.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-go-test-parallelizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-github-docs-seo-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-geo-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-function-namer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-formal-spec-verifier.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-firewall-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-file-diet.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-fact.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-experiment-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-evals-report.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-elixir-credo-snippet-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-ecosystem-explorer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-documentation-diagram.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-doc-updater.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-doc-healer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-credit-limit-test.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-compiler-quality.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/daily-community-attribution.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-code-metrics.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-code-debt-aider.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-cli-tools-tester.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-cli-performance.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-caveman-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-cache-strategy-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-byok-ollama-test.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-aw-cross-repo-compile-check.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-assign-issue-to-user.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-arxiv-researcher.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-architecture-diagram.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-ambient-context-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-agentrx-trace-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/daily-action-setup-security-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/craft.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-session-insights.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-pr-prompt-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-pr-nlp-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-pr-merged-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-opt.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-cli-deep-research.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-centralization-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-centralization-drilldown.lock.yml |
Uploads outcome artifacts. |
.github/workflows/copilot-agent-analysis.lock.yml |
Uploads outcome artifacts. |
.github/workflows/contribution-check.lock.yml |
Uploads outcome artifacts. |
.github/workflows/constraint-solving-potd.lock.yml |
Uploads outcome artifacts. |
.github/workflows/commit-changes-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/codex-github-remote-mcp-test.lock.yml |
Uploads outcome artifacts. |
.github/workflows/code-simplifier.lock.yml |
Uploads outcome artifacts. |
.github/workflows/code-scanning-fixer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/cloclo.lock.yml |
Uploads outcome artifacts. |
.github/workflows/cli-version-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/cli-consistency-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/claude-code-user-docs-review.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ci-coach.lock.yml |
Uploads outcome artifacts. |
.github/workflows/chaos-pr-bundle-fuzzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/changeset.lock.yml |
Uploads outcome artifacts. |
.github/workflows/breaking-change-checker.lock.yml |
Uploads outcome artifacts. |
.github/workflows/bot-detection.lock.yml |
Uploads outcome artifacts. |
.github/workflows/blog-auditor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/aw-issue-clustering.lock.yml |
Uploads outcome artifacts. |
.github/workflows/aw-failure-investigator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/avenger.lock.yml |
Uploads outcome artifacts. |
.github/workflows/auto-triage-issues.lock.yml |
Uploads outcome artifacts. |
.github/workflows/audit-workflows.lock.yml |
Uploads outcome artifacts. |
.github/workflows/artifacts-summary.lock.yml |
Uploads root and claim outcomes. |
.github/workflows/archivx-agentic-workflows-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/architecture-guardian.lock.yml |
Uploads outcome artifacts. |
.github/workflows/archie.lock.yml |
Uploads outcome artifacts. |
.github/workflows/approach-validator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/api-consumption-report.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ai-moderator.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agentic-token-trend-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agentic-token-optimizer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agentic-token-audit.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agent-persona-explorer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agent-performance-analyzer.lock.yml |
Uploads outcome artifacts. |
.github/workflows/agent-job-health.lock.yml |
Uploads outcome artifacts. |
.github/workflows/actions-aw-linter-factory.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ace-editor.lock.yml |
Uploads outcome artifacts. |
.github/workflows/ab-testing-advisor.lock.yml |
Uploads outcome artifacts. |
Review effort: Max
Collaborator
|
@copilot address the following outstanding work in one pass:
Push the necessary fixes, reply to each listed review thread and resolve it when addressed. Ignore feedback already answered or resolved. Use the pr-finisher skill and stop when only human review or CI remains; do not trigger CI. Sous-chef head: 56bfa62
|
…utputs-in-session-file Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>
Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>
Contributor
Author
Merged the latest |
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
pelikhan
enabled auto-merge (squash)
October 26, 2026 18:49
pelikhan
disabled auto-merge
October 26, 2026 18:49
Regenerate conflicting Aider workflow locks from merged sources, preserving safe-output and memory persistence observations. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Include the newly merged Codex routing changes and preserve safe-output outcome collection in its generated workflow. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Collaborator
|
@copilot address the following outstanding work in one pass:
Push the necessary fixes, reply to each listed review thread and resolve it when addressed. Ignore feedback already answered or resolved. Use the pr-finisher skill and stop when only human review or CI remains; do not trigger CI. Sous-chef head: 73a56b7
|
Collaborator
|
@copilot resolve the merge conflicts on this branch. |
…utputs-in-session-file # Conflicts: # .github/workflows/daily-code-debt-aider.lock.yml # .github/workflows/daily-go-test-stubs-aider.lock.yml # .github/workflows/engine-conformance-aider.lock.yml # .github/workflows/smoke-aider.lock.yml # actions/setup/js/safe_output_manifest.cjs # actions/setup/js/unified_session_render.cjs Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>
Contributor
Author
Merged the latest |
Contributor
Author
The merge conflicts were resolved and committed in |
This was referenced Oct 27, 2026
Contributor
|
🎉 This pull request is included in a new release. Release: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Capture whether safe outputs were applied—not merely requested—and retain canonical URLs for generated resources without exposing content or credentials.
safe_output.outcomeevents with operation type, message index, status, and staging state. Distinguish success, failure, skips, warnings, cancellation, deferral, delegation, and previews; resolve buffered reviews after submission.