docs/adr/ - github/gh-aw | Sourcebot

File Tree

Loading...

0001-conditional-oidc-env-var-forwarding-to-mcp-gateway.md

0002-allow-secrets-in-step-env-bindings-under-strict-mode.md

0002-explicit-opt-in-allow-workflows-permission.md

25819-unified-copilot-error-detection-step.md

25821-rust-style-source-context-and-plain-english-synthesis-for-compiler-errors.md

25822-version-gated-no-ask-user-flag-for-autonomous-copilot-runs.md

25830-opencode-engine-integration.md

25902-pre-clean-firewall-dirs-and-propagate-features-in-detection-job.md

25948-version-gated-integrity-reactions-for-mcpg-allow-only-policy.md

26060-add-gemini-api-target-to-awf-proxy.md

26113-env-field-support-in-shared-workflow-imports.md

26137-propagate-github-token-to-activation-checkout-and-hash-steps.md

26148-deterministic-audit-metrics-via-run-summary-cache.md

26278-split-logs-report-by-section.md

26292-checkout-field-in-shared-workflow-imports.md

26297-split-compiler-safe-outputs-config-by-concern.md

26321-track-time-between-turns-tbt-metric.md

26322-step-scoped-env-injection-for-difc-proxy.md

26323-tools-config-base-wins-on-type-conflict.md

26336-same-repo-guard-for-workflow-call-checkout.md

26339-protected-files-exclude-option.md

26357-yaml-round-trip-fidelity-for-proxy-env-injection.md

26377-use-github-repository-env-var-for-mcp-subprocess-repo-resolution.md

26382-auto-generate-side-repo-maintenance-workflows.md

26385-fast-text-preflight-for-template-injection-validation.md

26482-peel-annotated-tags-to-commit-sha.md

26535-event-scoped-activation-permission-derivation.md

26544-byok-copilot-feature-flag-composition.md

26551-migrate-github-app-token-input-to-client-id.md

26587-pre-agent-cache-memory-working-tree-sanitization.md

26666-add-pre-agent-steps-support.md

26688-configurable-expiration-for-action-failure-issues.md

26693-reaction-target-scoping-and-union-activation-permission-derivation.md

26827-cap-gh-aw-native-action-updates-at-cli-version.md

26879-activation-job-builder-context-phase-based-construction.md

26903-frontmatter-redirect-support-for-workflow-updates.md

26915-add-team-reviewer-support-to-safe-outputs.md

26919-automated-codemods-for-strict-mode-secret-leak-remediation.md

26968-mcp-compile-tool-stdout-only-success-response.md

27137-add-ambient-context-metric.md

27138-add-job-level-pre-steps-to-workflow-jobs.md

27193-gated-merge-pull-request-safe-output.md

27198-consolidate-expression-helpers-and-unify-cli-version-state.md

27205-integration-testing-interactive-tui-workflows-via-tuistory.md

27325-organize-workflow-helpers-by-semantic-responsibility.md

27327-parser-utility-test-strategy.md

27387-filter-non-frontmatter-markdown-during-compile-all.md

27476-extend-safe-outputs-dependencies-via-needs-field.md

27479-comment-memory-file-based-agent-memory-with-github-persistence.md

27523-extract-pure-helpers-in-actionpins.md

27626-sandbox-agent-version-and-network-firewall-migration.md

27639-unify-activation-sanitize-allowed-domains.md

27707-unify-github-access-mode-under-tools-github-mode.md

27708-universal-llm-consumer-engine-for-multi-provider-routing.md

27762-embedded-container-pin-fallback-at-compile-time.md

27825-reorganize-compile-pipeline-helpers-by-single-responsibility.md

27895-on-needs-explicit-pre-activation-job-dependencies.md

27902-make-copilot-byok-behavior-default.md

28003-fallback-audit-metrics-without-aw-info.md

28080-multi-path-serena-codemod-with-structural-yaml-mutation.md

28114-decompose-mcp-setup-generator-into-single-responsibility-helpers.md

28160-interface-level-node-driver-detection-for-threat-detection-job.md

28282-relocate-outlier-functions-to-semantic-homes.md

28290-base-restore-before-pre-agent-steps.md

28365-optional-branch-protection-check-for-push-to-pull-request-branch.md

28366-two-phase-resolution-of-body-level-import-directives.md

28482-centralize-cache-memory-directory-path-computation.md

28483-unify-audit-multi-run-diff-into-main-command.md

28486-protect-top-level-dot-folders-in-safe-outputs.md

28494-tool-calls-and-tokens-per-turn-in-audit-diff.md

28524-support-object-form-for-otlp-headers.md

28549-compile-deployment-status-state-filter-into-if-condition.md

28557-zero-allocation-fast-path-for-parser-hot-paths.md

28560-compilation-scoped-memoization-for-permissions-and-domain-computation.md

28622-test-validation-via-real-function-invocation.md

28737-first-class-labels-filter-for-labeled-events.md

28744-cache-concurrency-validation-and-toolset-parsing.md

28897-extract-parsemcpscripttoolconfig-helper.md

28900-add-wiki-field-to-checkout-configuration.md

28930-mcp-server-auto-containerization-entrypoint-arg-separation.md

28998-auto-extract-shell-injection-expressions-into-env-vars.md

29008-compile-time-warning-slash-command-bots-conflict.md

29031-threat-detection-resilience-in-warn-mode.md

29037-time-bounded-cache-eviction-via-after-flag-in-logs-command.md

29084-json-serialization-for-array-typed-import-inputs.md

29089-compile-workflow-run-conclusion-into-if-condition.md

29094-lenient-string-coercion-for-toolsets-field.md

29123-compile-time-validation-for-safe-outputs-shell-expansion.md

29156-extract-permissions-compiler-validator.md

29170-stdin-input-mode-for-logs-and-audit-commands.md

29212-expression-inputs-for-list-constraints.md

29230-parameterize-safe-output-policy-fields-for-workflow-call.md

29257-expression-controlled-threat-detection-for-workflow-call.md

29269-label-triggered-maintenance-jobs.md

29336-relocate-misplaced-functions-to-semantic-homes.md

29354-per-workflow-mcp-session-timeout-via-engine-frontmatter.md

29360-multi-path-artifact-discovery-for-firewall-audit.md

29406-mcp-receiving-middleware-for-validation-error-messages.md

29411-copilot-byok-provider-vars-strict-mode-allowlist.md

29433-pull-request-target-security-validation.md

29450-guard-bot-filter-against-dependabot-confused-deputy-injection.md

29455-infer-minimal-secrets-for-call-workflow-jobs.md

29483-automate-removal-of-deprecated-sandbox-keys-via-codemods.md

29534-frontmatter-ab-experiments-variant-selection.md

29567-decompose-main-job-steps-and-safe-outputs-job-into-phase-helpers.md

29581-claude-agent-retry-harness-for-transient-api-errors.md

29588-targeted-credential-cleanup-for-known-github-actions.md

29618-rich-experiment-metadata-schema-extension.md

29628-experiment-variant-filter-flags-for-audit.md

29663-sandbox-agent-default-awf-and-strict-mode-explicit-id.md

29668-inline-sub-agent-syntax-using-h2-heading-delimiters.md

29721-extract-focused-helpers-from-post-agent-compiler.md

29776-handle-filepath-walk-errors-in-log-scanning.md

29793-best-effort-inline-sub-agent-frontmatter-validation.md

29804-surface-missing-tool-data-as-agent-failures.md

29952-semantic-function-clustering-pkg-cli.md

29961-pre-agent-workspace-audit-step.md

29963-otel-episode-lineage-context.md

29985-experiment-per-run-state-otel-integration-and-schema-extensions.md

29995-compile-time-model-alias-format-validation.md

29996-experiment-state-git-branch-storage.md

30020-add-experiments-cli-command.md

30021-multiple-otlp-endpoints-with-json-array-fan-out.md

30029-experiment-statistical-analysis-in-cli.md

30035-codex-engine-node-harness-with-retry.md

30071-decouple-safe-outputs-base-branch-from-event-context.md

30166-reflection-based-mcp-tool-parameter-extraction.md

31193-propagate-global-setup-parent-span-id-across-jobs.md

31336-refactor-download-workflow-logs-to-options-struct.md

31377-monte-carlo-projection-for-forecast-command.md

31390-rename-rate-limit-to-user-rate-limit.md

31398-sync-awf-firewall-spec-and-wire-model-multipliers.md

31418-move-engine-max-runs-to-top-level-with-awf-enforcement.md

31605-centralized-slash-command-routing.md

31614-auto-detect-arc-dind-docker-host-path-prefix.md

31820-aw-context-fallback-for-injected-github-routing-context.md

31872-lowercase-discussion-trigger-categories-codemod.md

31874-codemod-rewrite-single-quoted-bash-tool-args.md

32227-centralize-condition-and-token-helpers-and-normalize-entity-helper-naming.md

32248-add-deploy-command-for-workflow-rollout.md

32280-pass-otel-headers-as-container-env-var.md

32295-thread-context-through-resolvesha-call-chains.md

32489-canonical-descriptor-table-for-safe-output-dispatch.md

32507-consolidate-config-parser-proxies-and-share-mount-classification.md

32550-honor-workflows-dir-at-all-path-join-sites.md

32805-non-handler-top-level-keys-in-safe-outputs-handler-config.md

32849-infer-gh-cli-permissions-from-step-scripts.md

33200-opt-in-workflow-call-network-allowed-input.md

33273-synthetic-pull-request-reviewer-trigger.md

33276-adopt-lipgloss-tree-for-cli-hierarchies.md

33353-reject-queue-max-with-cancel-in-progress-at-compile-time.md

33491-migrate-validation-paths-to-structured-validation-error.md

33608-add-regexp-compile-in-function-linter.md

33610-allowed-branches-enforcement-for-create-pull-request.md

33629-effective-token-delta-per-mcp-tool-call.md

33660-package-raw-action-workflow-yml-files-in-aw-manifest.md

33808-remove-deprecated-infer-field.md

33810-context-cancellation-as-sole-stop-signal-for-compile.md

33834-add-file-close-not-deferred-linter.md

34007-shared-runs-on-schema-and-any-typed-frontmatter.md

34008-manifest-scoped-source-tracking-and-update.md

34037-resolve-remote-workflow-filename-via-directory-listing.md

34091-add-manual-mutex-unlock-linter.md

34144-cluster-config-preprocessing-and-co-locate-workflow-helpers.md

34224-replace-pkg-cli-test-seams-with-dependency-injection.md

34450-inject-otel-resource-attributes-for-child-otel-sdk-correlation.md

34498-add-fprintlnsprintf-linter.md

34525-decouple-claude-permission-mode-from-bash-wildcard.md

34526-ghe-shorthand-cross-host-fallback-for-public-orgs.md

34693-add-antigravity-engine-deprecate-gemini.md

34738-add-uncheckedtypeassertion-linter.md

34782-unified-event-timeline-across-mcp-gateway-firewall-agent.md

34835-add-view-command-for-streaming-timeline-replay.md

34874-inline-skill-syntax-mirroring-inline-sub-agents.md

34875-generate-pr-patches-from-current-checkout-path.md

34941-body-hash-in-lock-metadata-and-stale-check-full.md

35091-reorganize-workflow-and-parser-packages-by-semantic-clustering.md

35111-harden-runtime-type-assertions-with-per-site-recovery.md

35218-typed-review-lifecycle-evaluators-and-manifest-metadata.md

35286-compiler-managed-enterprise-env-controls.md

35338-env-command-default-prefix-keys-and-null-delete.md

35376-per-tool-call-limits-in-tools-github-allowed.md

35544-add-strconvparseignorederror-linter.md

35557-process-lifetime-memoization-for-compile-hot-paths.md

35694-expose-authheader-in-awf-apiproxy-targets.md

35778-extend-aw-yml-for-skills-and-agents.md

35802-mount-non-opt-runner-tool-cache-into-awf-chroot.md

35812-decompose-claude-allowed-tools-assembly.md