[observability] Observability Coverage Report - 2026-03-27

[github-actions[bot]]

Executive Summary

Over the last 7 days, I analyzed 126 workflow runs downloaded by the logs MCP tool for github/gh-aw.

Observability coverage is strong for MCP Gateway telemetry and mostly complete for firewall logs. MCP-enabled runs had telemetry coverage of 100.0% using rpc-messages.jsonl as the canonical source. Firewall-enabled runs had access.log coverage of 91.9%, with 3 missing artifacts in currently active runs.

Key Alerts and Anomalies

🔴 Critical Issues:

• Missing access.log artifact in firewall-enabled run §23672283536 (Workflow Normalizer).
• Missing access.log artifact in firewall-enabled run §23672173721 (Daily Safe Output Tool Optimizer).
• Missing access.log artifact in firewall-enabled run §23672172137 (Daily Observability Report for AWF Firewall and MCP Gateway).

⚠️ Warnings:

• Telemetry present but no MCP tool calls recorded in §23671677038 (Daily Project Performance Summary Generator (Using MCP Scripts)), likely due to early failure.

Coverage Summary

Component	Runs Analyzed	Logs Present	Coverage	Status
AWF Firewall (access.log)	37	34	91.9%	⚠️
MCP Gateway (gateway.jsonl or rpc-messages.jsonl)	29	29	100.0%	✅

📋 Detailed Run Analysis

Firewall-Enabled Runs

Workflow	Run ID	access.log	Entries	Allowed	Blocked	Status
Workflow Normalizer	23672283536	❌	N/A	N/A	N/A	🔴
Daily Safe Output Tool Optimizer	23672173721	❌	N/A	N/A	N/A	🔴
Daily Observability Report for AWF Firewall and MCP Gateway	23672172137	❌	N/A	N/A	N/A	🔴
Daily Semgrep Scan	23672141070	✅	N/A	N/A	N/A	✅
Daily Project Performance Summary Generator (Using MCP Scripts)	23671677038	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23671157889	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23671140529	✅	N/A	N/A	N/A	✅
Daily Safe Output Integrator	23671061937	✅	N/A	N/A	N/A	✅
Daily Secrets Analysis Agent	23669789733	✅	N/A	N/A	N/A	✅
Draft PR Cleanup	23669274675	✅	N/A	N/A	N/A	✅
Daily Safe Outputs Conformance Checker	23669254588	✅	N/A	N/A	N/A	✅
Daily Compiler Quality Check	23668595906	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23668438079	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23668423909	✅	N/A	N/A	N/A	✅
Daily Code Metrics and Trend Tracking Agent	23668326806	✅	N/A	N/A	N/A	✅
Daily Malicious Code Scan Agent	23667995245	✅	N/A	N/A	N/A	✅
Go Logger Enhancement	23667934544	✅	N/A	N/A	N/A	✅
Daily Regulatory Report Generator	23667498546	✅	N/A	N/A	N/A	✅
Copilot CLI Deep Research Agent	23667403832	✅	N/A	N/A	N/A	✅
Contribution Check	23667362044	✅	N/A	N/A	N/A	✅
Agentic Workflow Audit Agent	23667334043	✅	N/A	N/A	N/A	✅
Daily Workflow Updater	23667136119	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23667067977	✅	N/A	N/A	N/A	✅
Daily Documentation Updater	23665954017	✅	N/A	N/A	N/A	✅
Sergo - Serena Go Expert	23665763953	✅	N/A	N/A	N/A	✅
Daily DIFC Integrity-Filtered Events Analyzer	23665157709	✅	N/A	N/A	N/A	✅
Copilot Agent Prompt Clustering Analysis	23664944049	✅	N/A	N/A	N/A	✅
AI Moderator	23664638400	✅	N/A	N/A	N/A	✅
Static Analysis Report	23664251532	✅	N/A	N/A	N/A	✅
Metrics Collector - Infrastructure Agent	23663993174	✅	N/A	N/A	N/A	✅
Step Name Alignment	23663991136	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23662084001	✅	N/A	N/A	N/A	✅
AI Moderator	23661986669	✅	N/A	N/A	N/A	✅
AI Moderator	23661256757	✅	N/A	N/A	N/A	✅
PR Triage Agent	23660968453	✅	N/A	N/A	N/A	✅
Auto-Triage Issues	23660085898	✅	N/A	N/A	N/A	✅
AI Moderator	23660068878	✅	N/A	N/A	N/A	✅

Missing Firewall Logs (access.log)

Workflow	Run ID	Date	Link
Workflow Normalizer	23672283536	2026-03-27	§23672283536
Daily Safe Output Tool Optimizer	23672173721	2026-03-27	§23672173721
Daily Observability Report for AWF Firewall and MCP Gateway	23672172137	2026-03-27	§23672172137

MCP-Enabled Runs

Workflow	Run ID	Telemetry Source	Entries	Servers	Tool Calls	Errors	Status
Daily Semgrep Scan	23672141070	rpc-messages.jsonl	5	2	5	0	✅
Daily Project Performance Summary Generator (Using MCP Scripts)	23671677038	rpc-messages.jsonl	0	0	0	0	⚠️
Auto-Triage Issues	23671157889	rpc-messages.jsonl	8	2	8	0	✅
Auto-Triage Issues	23671140529	rpc-messages.jsonl	8	2	8	0	✅
Daily Safe Output Integrator	23671061937	rpc-messages.jsonl	1	1	1	0	✅
Daily Secrets Analysis Agent	23669789733	rpc-messages.jsonl	4	2	4	0	✅
Draft PR Cleanup	23669274675	rpc-messages.jsonl	3	2	3	0	✅
Daily Safe Outputs Conformance Checker	23669254588	rpc-messages.jsonl	1	1	1	0	✅
Daily Compiler Quality Check	23668595906	rpc-messages.jsonl	7	2	7	0	✅
Auto-Triage Issues	23668438079	rpc-messages.jsonl	8	2	8	0	✅
Auto-Triage Issues	23668423909	rpc-messages.jsonl	8	2	8	0	✅
Daily Code Metrics and Trend Tracking Agent	23668326806	rpc-messages.jsonl	8	1	8	0	✅
Daily Malicious Code Scan Agent	23667995245	rpc-messages.jsonl	1	1	1	0	✅
Go Logger Enhancement	23667934544	rpc-messages.jsonl	4	2	4	0	✅
Daily Regulatory Report Generator	23667498546	rpc-messages.jsonl	13	3	13	0	✅
Copilot CLI Deep Research Agent	23667403832	rpc-messages.jsonl	2	1	2	0	✅
Contribution Check	23667362044	rpc-messages.jsonl	55	2	55	0	✅
Daily Workflow Updater	23667136119	rpc-messages.jsonl	1	1	1	0	✅
Auto-Triage Issues	23667067977	rpc-messages.jsonl	8	2	8	0	✅
Daily Documentation Updater	23665954017	rpc-messages.jsonl	17	2	17	0	✅
Sergo - Serena Go Expert	23665763953	rpc-messages.jsonl	5	2	5	0	✅
AI Moderator	23664638400	rpc-messages.jsonl	39	2	39	0	✅
Step Name Alignment	23663991136	rpc-messages.jsonl	1	1	1	0	✅
Auto-Triage Issues	23662084001	rpc-messages.jsonl	183	2	183	0	✅
AI Moderator	23661986669	rpc-messages.jsonl	7	2	7	0	✅
AI Moderator	23661256757	rpc-messages.jsonl	5	2	5	0	✅
PR Triage Agent	23660968453	rpc-messages.jsonl	8	2	8	0	✅
Auto-Triage Issues	23660085898	rpc-messages.jsonl	8	2	8	0	✅
AI Moderator	23660068878	rpc-messages.jsonl	4	2	4	0	✅

Missing MCP Telemetry (no gateway.jsonl or rpc-messages.jsonl)

Workflow	Run ID	Date	Link
None	-	-	-

🔍 Telemetry Quality Analysis

Firewall Log Quality

• Total firewall-enabled runs: 37
• Runs with access.log artifact: 34
• Runs missing access.log: 3
• Note: detailed per-entry Squid parsing (allowed/blocked/domain counts) was not available from accessible artifacts in this batch; run_summary.json contained no populated firewall_analysis counts.

Gateway Log Quality

• Telemetry source distribution: rpc-messages.jsonl in 29/29 MCP-enabled runs, gateway.jsonl in 0 runs
• Total MCP tool calls observed: 422
• MCP tool-call errors observed: 0
• Warning runs with low telemetry activity: 1

Healthy Runs Summary

• Firewall healthy coverage: 34/37
• MCP healthy coverage: 29/29
• Agent log artifacts: agent-stdio.log present in 33 runs, safe-output logs present in 29 runs

Recommended Actions

1. Enforce artifact upload checks for firewall-enabled workflows so firewall-audit-logs/logs/access.log is always present before run completion.
2. Add a post-run validation step that fails runs when firewall is enabled but access.log artifact is missing.
3. Standardize gateway telemetry output to always include gateway.jsonl (while keeping rpc-messages.jsonl fallback) and publish parsed telemetry counts directly in run_summary.json.

📊 Historical Trends

• Current snapshot (last 7 days): Firewall coverage 91.9%, MCP telemetry coverage 100.0%.
• This report instance is a point-in-time baseline for daily comparison.

References:

• §23672283536
• §23672173721
• §23672172137

---

Report generated automatically by the Daily Observability Report workflow
Analysis window: Last 7 days | Runs analyzed: 126

AI generated by Daily Observability Report for AWF Firewall and MCP Gateway · history

• expires on Mar 28, 2026, 11:55 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-03-28T23:55:55.299Z.

Closed by Workflow