feat: default to strict security mode, stop injecting sudo and --enable-host-access by lpcox · Pull Request #45360 · github/gh-aw

lpcox · 2026-07-14T02:46:40Z

Overview

This PR changes the default AWF execution mode from legacy security to strict security. Compiled workflows now default to running awf rootlessly without injected host-access flags. Legacy behavior remains available as an explicit opt-in through workflow frontmatter.

What changed

Changed the default AWF command from sudo -E awf to awf
Added AWFLegacySecurityCommand = "sudo -E awf"
Added AWFLegacySecurityMinVersion = "v0.27.32" for --legacy-security support
Added sandbox.agent.legacy-security to the workflow schema as a string enum with supported value "enable"
Parsed legacy-security: enable from sandbox.agent into AgentSandboxConfig.LegacySecurity
Added LegacySecurity bool to AgentSandboxConfig
Updated AWF command generation to use sudo -E awf only in legacy mode; strict mode skips all host-access flags
Added an AWF version guard for --legacy-security (requires AWF >= v0.27.32)
Kept apiProxy.enabled emission for backward compatibility; --enable-api-proxy is deprecated in AWF v0.27.32+
Opted smoke-service-ports.md and test-service-ports.md into legacy security because service-port forwarding requires host access
Updated compiled lock files and golden files; AWF image bumped from 0.27.31 to 0.27.35

Key details

Default is strict security when sandbox.agent.legacy-security is omitted
GetAWFCommandPrefix selects awf (strict) or sudo -E awf (legacy)
BuildAWFArgs emits --legacy-security, --enable-host-access, --allow-host-ports only in legacy mode, with version gating for --legacy-security
BuildAWFCommand gates --allow-host-service-ports on legacy mode
Tests cover version gating, service-port behavior, frontmatter extraction, and end-to-end compilation in both modes

Breaking/migration notes

Workflows that previously relied on implicit sudo, host access, or host service ports now run in strict mode by default.

To opt into legacy security:

sandbox:
  agent:
    id: awf
    legacy-security: enable

Generated by PR Description Updater for #45360 · 82.7 AIC · ⌖ 4.49 AIC · ⊞ 4.7K · ◷

- Change AWFDefaultCommand from 'sudo -E awf' to 'awf' (strict mode) - Add AWFLegacySecurityCommand for explicit legacy mode opt-in - Add LegacySecurity field to AgentSandboxConfig (frontmatter: legacy-security: enable) - GetAWFCommandPrefix() returns 'awf' by default, 'sudo -E awf' only for legacy - BuildAWFArgs() only emits --legacy-security, --enable-host-access, --allow-host-ports when LegacySecurity is true - Bump DefaultFirewallVersion to v0.27.32 (requires --legacy-security flag) - Update all test assertions for new default behavior - Update golden files for strict-mode output Note: Container pin tests will fail until 'make build && make recompile && make recompile' is run with registry access to resolve v0.27.32 SHA digests. Closes #45344 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee

Copilot

Pull request overview

Updates the compiler for AWF v0.27.32’s strict-security default and introduces legacy-security opt-in behavior.

Changes:

Removes sudo and host-access flags from default AWF execution.
Adds legacy-security: enable handling and legacy command arguments.
Bumps AWF to v0.27.32 and refreshes tests/golden outputs.

Show a summary per file

File	Description
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden`	Updates AWF fixture version.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden`	Updates AWF fixture version.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden`	Updates AWF fixture version.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden`	Updates AWF fixture version.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden`	Updates Pi AWF output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden`	Updates Gemini AWF output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden`	Updates Copilot AWF output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden`	Updates Codex AWF output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden`	Updates Claude AWF output.
`pkg/workflow/sandbox.go`	Adds legacy-security state.
`pkg/workflow/sandbox_mounts_test.go`	Updates AWF command assertions.
`pkg/workflow/gh_cli_mount_test.go`	Updates AWF command assertions.
`pkg/workflow/frontmatter_extraction_security.go`	Extracts legacy-security configuration.
`pkg/workflow/firewall_workflow_test.go`	Updates firewall command assertion.
`pkg/workflow/firewall_args_test.go`	Updates firewall argument assertions.
`pkg/workflow/compiled_lock_files_test.go`	Updates compiled-command assertion.
`pkg/workflow/claude_engine_network_test.go`	Updates Claude network assertions.
`pkg/workflow/awf_helpers.go`	Implements strict and legacy command behavior.
`pkg/workflow/awf_helpers_test.go`	Tests strict and legacy behavior.
`pkg/workflow/awf_config.go`	Documents unconditional API proxy behavior.
`pkg/workflow/awf_config_test.go`	Updates generated-command assertions.
`pkg/workflow/agentic_output_test.go`	Updates AWF wrapper assertions.
`pkg/constants/version_constants.go`	Bumps AWF and adds compatibility boundary.
`pkg/constants/spec_test.go`	Updates documented default-command test.
`pkg/constants/constants.go`	Defines strict and legacy commands.
`pkg/constants/constants_test.go`	Updates constant expectations.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 26/26 changed files
Comments generated: 3
Review effort level: Medium

1. Schema: Add legacy-security field (enum: ['enable']) to sandbox.agent object in main_workflow_schema.json so frontmatter passes validation. 2. Service ports: Gate --allow-host-service-ports on LegacySecurity mode. Strict mode no longer emits host-access flags for service ports. 3. Version guard: Only emit --legacy-security flag when AWF version >= v0.27.32. Older AWF versions default to legacy mode and don't recognize the flag. --enable-host-access is still emitted for backward compat with older AWF. 4. Tests: Full-compilation tests validating legacy-security: enable passes schema validation and produces expected output. Unit tests for version guard and service port gating. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee

gh-aw-bot · 2026-07-14T03:38:18Z

pr-sous-chef
@copilot please run the pr-finisher skill, address these unresolved review comments, and rerun checks once finished:

Copilot: feat: default to strict security mode, stop injecting sudo and --enable-host-access #45360 (comment)
Copilot: feat: default to strict security mode, stop injecting sudo and --enable-host-access #45360 (comment)
Copilot: feat: default to strict security mode, stop injecting sudo and --enable-host-access #45360 (comment)

Run: https://github.com/github/gh-aw/actions/runs/29303664684

Generated by 👨‍🍳 PR Sous Chef · 14.9 AIC · ⌖ 5.2 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-07-14T03:54:53Z

pr-sous-chef
@copilot please run the pr-finisher skill, address these unresolved review comments, and rerun checks once finished:

Copilot: feat: default to strict security mode, stop injecting sudo and --enable-host-access #45360 (comment)...

Addressed in a29dcc3.

Local checks rerun:

make fmt ✅
make lint ✅
go test -tags=integration ./pkg/cli -run 'TestCompileServicePorts' ✅
go test ./pkg/workflow -run 'TestBuildAWFCommand_ServicePortsRequireLegacy|TestCompileWorkflow_LegacySecurityFromFrontmatter|TestCompileWorkflow_StrictSecurityDefault' ✅
make test-unit / make test still hit the pre-existing AWF v0.27.32 pinning failures already noted in the PR description (TestBuildAWFImageTagWithDigests, TestCompileWorkflow_FirewallImagesPinnedForDefaultVersion, TestCompileWorkflow_BuildToolsImagePinnedForArcDind, TestApplyContainerPins_DefaultFirewallVersion).

I also recompiled .github/workflows/smoke-service-ports.md; CI on this new HEAD still needs a maintainer-triggered rerun because agent pushes do not start workflows.

lpcox · 2026-07-14T04:22:37Z

@copilot revert all .lock.yml updates to main

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-07-14T04:40:49Z

@copilot revert all .lock.yml updates to main

Addressed in 8c420f9.

I reverted the incidental .lock.yml churn back to the pre-change/main state. I kept .github/workflows/smoke-service-ports.lock.yml aligned with its updated .md source, because reverting that one also reintroduces the lockfile hash-consistency failure.

gh-aw-bot · 2026-07-14T04:43:04Z

pr-sous-chef
@copilot please run the pr-finisher skill, address unresolved review comments, and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 12.8 AIC · ⌖ 5.92 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-07-14T04:58:24Z

pr-sous-chef
@copilot please run the pr-finisher skill, address unresolved review comments, and rerun checks once the branch is up to date.
...

No additional code changes were needed; the unresolved review items are already addressed on this branch in 946e5aa and a29dcc3, and I replied on each review thread.

Reran local validation:

make fmt ✅
make lint ✅
go test ./pkg/workflow -run 'TestBuildAWFArgs_LegacySecurityVersionGuard|TestBuildAWFCommand_ServicePortsRequireLegacy|TestCompileWorkflow_LegacySecurityFromFrontmatter|TestCompileWorkflow_StrictSecurityDefault' ✅
go test -tags=integration ./pkg/cli -run 'TestCompileServicePorts' ✅
make test ❌ still hits the known AWF v0.27.32 pinning failures already called out in the PR (TestBuildAWFImageTagWithDigests, TestCompileWorkflow_FirewallImagesPinnedForDefaultVersion, TestCompileWorkflow_BuildToolsImagePinnedForArcDind, TestApplyContainerPins_DefaultFirewallVersion).

Branch is already up to date with main; CI on this HEAD still needs a maintainer-triggered rerun because agent pushes do not start workflows.

gh-aw-bot · 2026-07-14T18:54:05Z

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh this branch for the latest base branch state if needed, and rerun checks when complete.

Generated by 👨‍🍳 PR Sous Chef · 7.67 AIC · ⌖ 5.51 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

…compiler # Conflicts: # .github/workflows/daily-multi-device-docs-tester.lock.yml # .github/workflows/dependabot-repair.lock.yml # .github/workflows/impeccable-skills-reviewer.lock.yml # .github/workflows/mattpocock-skills-reviewer.lock.yml # .github/workflows/pr-code-quality-reviewer.lock.yml # .github/workflows/pr-sous-chef.lock.yml # .github/workflows/semantic-function-refactor.lock.yml # .github/workflows/sighthound-security-scan.lock.yml # .github/workflows/smoke-copilot.lock.yml # .github/workflows/smoke-crush.lock.yml # .github/workflows/smoke-opencode.lock.yml Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-07-14T19:17:08Z

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh this branch for the latest base branch state if needed, and rerun checks when complete.

...

Addressed in 3965642 and 3ce6ce6.

Refreshed the branch from main and resolved the generated .lock.yml merge conflicts by taking the current main versions.
Fixed the merged-head unit failure in pkg/workflow/behavior_defined_engine_harness_test.go by asserting on strict-mode AWF invocation (awf --config) instead of sudo.

Local validation on the updated head:

make fmt ✅
make lint ✅
go test ./pkg/workflow -run 'TestBehaviorDefinedEngineHarnessScript' ✅
make test-unit ❌ only the known AWF v0.27.32 pinning failures remain (TestBuildAWFImageTagWithDigests, TestCompileWorkflow_FirewallImagesPinnedForDefaultVersion, TestCompileWorkflow_BuildToolsImagePinnedForArcDind, TestApplyContainerPins_DefaultFirewallVersion)
make test ❌ same known pinning failures
make agent-report-progress ❌ same known pinning failures

CI on this pushed head is still unverified until a maintainer re-triggers it, since agent pushes do not start workflows.

github-actions · 2026-07-15T23:52:21Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-07-15T23:52:23Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-07-15T23:52:23Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-07-15T23:52:25Z

🚀 Smoke Gemini MISSION COMPLETE! Gemini has spoken. ✨

github-actions · 2026-07-15T23:58:28Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	v4.53.3
curl	✅	8.5.0
gh	✅	2.96.0
node	✅	v20.20.2
python3	✅	3.11.15 (PyPy 7.3.23)
go	✅	1.24.13
java	✅	10.0.301
dotnet	✅	10.0.301

Result: 12/12 tools available ✅

Overall Status: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔧 Tool validation by Agent Container Smoke Test · 12.3 AIC · ⌖ 7.84 AIC · ⊞ 4.5K · ◷
_{Comment /smoke-test-tools to run again}

github-actions · 2026-07-15T23:58:50Z

Smoke Test Results

GitHub MCP Testing: ✅
Web Fetch Testing: ✅
File Writing Testing: ✅
Bash Tool Testing: ✅
Build gh-aw: ❌

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

✨ Smoke Gemini — Powered by Gemini · 6.54 AIC · ⌖ 6.3 AIC · ⊞ 9.3K · ◷
_{Comment /smoke-gemini to run again}

github-actions · 2026-07-16T00:06:05Z

Comment Memory

Night bot taps cold keys
Tiny tests drum in cave mist
Green sparks chase sunrise

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

📰 BREAKING: Report filed by Smoke Copilot · 89.1 AIC · ⌖ 3.78 AIC · ⊞ 19K · ◷
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions

Smoke review done.

📰 BREAKING: Report filed by Smoke Copilot · 89.1 AIC · ⌖ 3.78 AIC · ⊞ 19K
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions · 2026-07-16T00:06:57Z

PRs:

optimize(detection-analysis-report): ~45 AIC/run savings via prompt compaction and script extraction (optimize(detection-analysis-report): ~45 AIC/run savings via prompt compaction and script extraction #45820)
feat: read evals from usage artifact instead of dedicated evals artifact (feat: read evals from usage artifact instead of dedicated evals artifact #45797)
Results: 1✅ 2❌ 3❌ 4❌ 5✅ 6✅ 7❌ 8✅ 9✅ 10✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex · 13.3 AIC · ⌖ 1.7 AIC · ⊞ 10.3K · ◷
_{Comment /smoke-codex to run again}

github-actions · 2026-07-16T00:06:57Z

Comment Memory

Moonlit cache drifts
Steel scripts hum through quiet checks
Smoke clears, logs stay warm

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

🔮 The oracle has spoken through Smoke Codex · 13.3 AIC · ⌖ 1.7 AIC · ⊞ 10.3K · ◷
_{Comment /smoke-codex to run again}

github-actions

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude · 98.8 AIC · ⌖ 14 AIC · ⊞ 8.4K
_{Comment /smoke-claude to run again}

github-actions · 2026-07-16T00:08:43Z

      "digest": "sha256:58fee05c1c54ba5ca1e7056b3aaea30281841d5899093002e2c650710c50540f",
      "pinned_image": "ghcr.io/github/gh-aw-firewall/agent-act:0.27.31@sha256:58fee05c1c54ba5ca1e7056b3aaea30281841d5899093002e2c650710c50540f"
    },
+    "ghcr.io/github/gh-aw-firewall/agent-act:0.27.34": {


Smoke test review: new pinned image entry looks correctly formatted with digest.

Confirmed on the current head (1d8c322): no change was needed here; the pinned image entry remains correctly formatted with its digest.

github-actions · 2026-07-16T00:08:43Z

      "digest": "sha256:84d861cb6da723ac10b7a00dddf778be681b8cd74b2091f18ce1d67fe4b3e7a1",
      "pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.27.31@sha256:84d861cb6da723ac10b7a00dddf778be681b8cd74b2091f18ce1d67fe4b3e7a1"
    },
+    "ghcr.io/github/gh-aw-firewall/agent:0.27.34": {


Smoke test review: agent image version bump entry is consistent with the firewall entry above.

Confirmed on the current head (1d8c322): no change was needed here; the agent image version bump remains aligned with the firewall entry.

gh-aw-bot · 2026-07-16T01:01:33Z

@copilot please run the pr-finisher skill, address any unresolved review feedback, and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 3.47 AIC · ⌖ 11.2 AIC · ⊞ 5.1K · ◷
_{Comment /souschef to run again}

lpcox · 2026-07-16T03:50:29Z

@copilot bump the awf/firewall container versions to https://github.com/github/gh-aw-firewall/releases/tag/v0.27.35

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-07-16T04:07:01Z

@copilot bump the awf/firewall container versions to https://github.com/github/gh-aw-firewall/releases/tag/v0.27.35

Addressed in 1c81bc4.

Copilot AI review requested due to automatic review settings July 14, 2026 02:46

Copilot started reviewing on behalf of lpcox July 14, 2026 02:47 View session

Copilot AI reviewed Jul 14, 2026

View reviewed changes

Comment thread pkg/workflow/frontmatter_extraction_security.go

Comment thread pkg/workflow/awf_helpers.go

Comment thread pkg/workflow/awf_helpers.go Outdated

github-actions Bot mentioned this pull request Jul 14, 2026

[pr-sous-chef] Run report — 4 nudged, 3 skipped #45345

Closed

Copilot started work on behalf of gh-aw-bot July 14, 2026 03:39 View session

Copilot AI and others added 2 commits July 14, 2026 03:44

chore: begin review feedback follow-up

b89da77

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

fix: opt service-port workflows into legacy security

a29dcc3

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot July 14, 2026 03:57

Copilot AI requested a review from gh-aw-bot July 14, 2026 03:57

Copilot started work on behalf of lpcox July 14, 2026 04:23 View session

chore: revert incidental lockfile updates

8c420f9

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox July 14, 2026 04:41

Merge branch 'main' into feat/legacy-security-compiler

c225286

Copilot started work on behalf of gh-aw-bot July 14, 2026 04:43 View session

Copilot finished work on behalf of gh-aw-bot July 14, 2026 04:59

pelikhan reviewed Jul 14, 2026

View reviewed changes

Comment thread .github/workflows/smoke-service-ports.md

Copilot started work on behalf of gh-aw-bot July 14, 2026 18:54 View session

Copilot AI and others added 3 commits July 14, 2026 18:58

chore: start PR finisher pass

e846401

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

test: align harness AWF assertion with strict mode

3ce6ce6

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

github-actions Bot temporarily deployed to aoai-model July 15, 2026 23:52 Inactive

github-actions Bot mentioned this pull request Jul 15, 2026

[aw] Smoke Antigravity produced no safe outputs #45841

Open

github-actions Bot temporarily deployed to aoai-model July 16, 2026 00:02 Inactive

github-actions Bot temporarily deployed to aoai-model July 16, 2026 00:05 Inactive

github-actions Bot reviewed Jul 16, 2026

View reviewed changes

github-actions Bot temporarily deployed to aoai-model July 16, 2026 00:06 Inactive

github-actions Bot mentioned this pull request Jul 16, 2026

[aw] Smoke Copilot - AOAI (apikey) is missing required tool #45848

Open

github-actions Bot mentioned this pull request Jul 16, 2026

[aw] Smoke Codex is missing required data #45850

Open

github-actions Bot reviewed Jul 16, 2026

View reviewed changes

This was referenced Jul 16, 2026

[aw] Smoke Copilot reported incomplete result #45851

Open

[Outcome Report] Outcome Report — 2026-07-16 · 83.3% acceptance, 22 pending items #45857

Open

github-actions Bot mentioned this pull request Jul 16, 2026

[pr-sous-chef] Run report — 0 nudged, 9 skipped #45855

Open

Copilot started work on behalf of gh-aw-bot July 16, 2026 01:01 View session

Copilot started work on behalf of lpcox July 16, 2026 03:50 View session

chore: bump awf firewall containers to v0.27.35

1c81bc4

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox July 16, 2026 04:07

lpcox merged commit 1ac664c into main Jul 16, 2026
29 checks passed

lpcox deleted the feat/legacy-security-compiler branch July 16, 2026 04:53

Uh oh!

Conversation

lpcox commented Jul 14, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Overview

What changed

Key details

Breaking/migration notes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

Uh oh!

Uh oh!

Uh oh!

gh-aw-bot commented Jul 14, 2026

Uh oh!

Copilot AI commented Jul 14, 2026

Uh oh!

lpcox commented Jul 14, 2026

Uh oh!

Copilot AI commented Jul 14, 2026

Uh oh!

gh-aw-bot commented Jul 14, 2026

Uh oh!

Copilot AI commented Jul 14, 2026

Uh oh!

Uh oh!

gh-aw-bot commented Jul 14, 2026

Uh oh!

Copilot AI commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 15, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Jul 15, 2026

Smoke Test Results

Uh oh!

github-actions Bot commented Jul 16, 2026

Comment Memory

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Comment Memory

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

gh-aw-bot commented Jul 16, 2026

Uh oh!

lpcox commented Jul 16, 2026

Uh oh!

Copilot AI commented Jul 16, 2026

lpcox commented Jul 14, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jul 15, 2026 •

edited

Loading