Skip to content

Compliance: stub-surface-drift-agent-shield.yml-on #578

Closed
Closed
Compliance: stub-surface-drift-agent-shield.yml-on#578
Labels
compliance-auditAutomated compliance audit findingcompliance-findingMachine-owned: created and auto-closed by the compliance audit. Do not hand-apply.dev-leadFor dev-lead agent pickupdev-lead:needs-humandev-lead could not complete this issue; needs human attention

Description

@don-petry
don-petry
opened on Sep 25, 2026

Compliance Finding

Category: ci-workflows
Severity: error
Check: stub-surface-drift-agent-shield.yml-on

Detail

The agent-shield.yml caller stub's on: surface has drifted from the canonical standards/workflows/agent-shield.yml. These stubs are thin callers — the on: triggers, permissions: grants, and concurrency: block are owned centrally and are not repo-adjustable (only the documented with: inputs and the tier channel pin may differ per repo). Re-sync on: from standards/workflows/agent-shield.yml.

Standard Reference

standards/ci-standards.md#centralization-tiers

Remediation

Copy the relevant workflow template from standards/workflows/ verbatim — do not generate from scratch:

gh api repos/petry-projects/.github/contents/standards/workflows/<template>.yml --jq '.content' | base64 -d > .github/workflows/<template>.yml

Available templates: agent-shield.yml, dev-lead.yml, dependabot-automerge.yml, dependabot-rebase.yml, dependency-audit.yml, feature-ideation.yml

This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry
    added
    compliance-auditAutomated compliance audit finding
    dev-leadFor dev-lead agent pickup
    compliance-findingMachine-owned: created and auto-closed by the compliance audit. Do not hand-apply.
    and removed
    dev-leadFor dev-lead agent pickup
    on Sep 25, 2026

  2. don-petry commented on Sep 27, 2026

    @don-petry
    don-petry
    on Sep 27, 2026
    ContributorAuthor

    Dev-Lead: issue #578 implementation failed — will retry

    The engine failed (engine-error — e.g. a timeout or transient engine error). This was attempt 1 of 3; dev-lead will retry automatically. You can also re-apply the dev-lead label to retry now.

    Last 40 lines of engine output (redacted) 
    Warning: 256-color support not detected. Using a terminal with at least 256-color support is recommended for a better visual experience.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Ripgrep is not available. Falling back to GrepTool.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Error when talking to Gemini API Full report available at: /tmp/gemini-client-error-Turn.run-sendMessageStream-2026-09-27T18-22-35-931Z.json ModelNotFoundError: This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).
    at classifyGoogleError (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:307292:12)
    at retryWithBackoff (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:308062:29)
    at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
    at async GeminiChat.makeApiCallAndProcessStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332326:28)
    at async GeminiChat.streamWithRetries (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332079:29)
    at async Turn.run (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:333001:24)
    at async GeminiClient.processTurn (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346675:22)
    at async GeminiClient.sendMessageStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346772:14)
    at async file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:12198:26
    at async main (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:17627:5) {
  code: 404
}
{
  "session_id": "31550bf5-42db-46e1-95d4-45dea578789d",
  "error": {
    "type": "Error",
    "message": "This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).",
    "code": 1
  }
}

  3. don-petry commented on Sep 27, 2026

    @don-petry
    don-petry
    on Sep 27, 2026
    ContributorAuthor

    Dev-Lead: issue #578 implementation failed — will retry

    The engine failed (engine-error — e.g. a timeout or transient engine error). This was attempt 2 of 3; dev-lead will retry automatically. You can also re-apply the dev-lead label to retry now.

    Last 40 lines of engine output (redacted) 
    Warning: 256-color support not detected. Using a terminal with at least 256-color support is recommended for a better visual experience.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Ripgrep is not available. Falling back to GrepTool.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Error when talking to Gemini API Full report available at: /tmp/gemini-client-error-Turn.run-sendMessageStream-2026-09-27T18-30-22-835Z.json ModelNotFoundError: This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).
    at classifyGoogleError (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:307292:12)
    at retryWithBackoff (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:308062:29)
    at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
    at async GeminiChat.makeApiCallAndProcessStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332326:28)
    at async GeminiChat.streamWithRetries (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332079:29)
    at async Turn.run (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:333001:24)
    at async GeminiClient.processTurn (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346675:22)
    at async GeminiClient.sendMessageStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346772:14)
    at async file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:12198:26
    at async main (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:17627:5) {
  code: 404
}
{
  "session_id": "1f0b4885-d7cc-434e-aa60-f25aa132c6f0",
  "error": {
    "type": "Error",
    "message": "This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).",
    "code": 1
  }
}
  4. don-petry
    added
    dev-leadFor dev-lead agent pickup
    dev-lead:needs-humandev-lead could not complete this issue; needs human attention
    and removed
    dev-leadFor dev-lead agent pickup
    on Sep 27, 2026

  5. don-petry commented on Sep 27, 2026

    @don-petry
    don-petry
    on Sep 27, 2026
    ContributorAuthor

    Dev-Lead: cannot implement issue #578 — needs human attention

    Automatic retries are exhausted (attempt 3 of 3). The most recent failure was engine-error.

    Please review the failures above. To retry anyway, remove the dev-lead:needs-human label and re-apply the dev-lead label.

    Last 40 lines of engine output (redacted) 
    Warning: 256-color support not detected. Using a terminal with at least 256-color support is recommended for a better visual experience.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Ripgrep is not available. Falling back to GrepTool.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Both GOOGLE_API_KEY and GEMINI_API_KEY are set. Using GOOGLE_API_KEY.
Error when talking to Gemini API Full report available at: /tmp/gemini-client-error-Turn.run-sendMessageStream-2026-09-27T22-09-17-185Z.json ModelNotFoundError: This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).
    at classifyGoogleError (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:307292:12)
    at retryWithBackoff (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:308062:29)
    at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
    at async GeminiChat.makeApiCallAndProcessStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332326:28)
    at async GeminiChat.streamWithRetries (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:332079:29)
    at async Turn.run (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:333001:24)
    at async GeminiClient.processTurn (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346675:22)
    at async GeminiClient.sendMessageStream (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/chunk-JDPZ4CE3.js:346772:14)
    at async file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:12198:26
    at async main (file:///home/runner/.npm-global/lib/node_modules/@google/gemini-cli/bundle/gemini-3HFX2LNT.js:17627:5) {
  code: 404
}
{
  "session_id": "cb3e70bc-b748-4df8-ada5-3eaf75c0d2f7",
  "error": {
    "type": "Error",
    "message": "This model models/gemini-2.5-pro is no longer available to new users. Please update your code to use models/gemini-3.1-pro-preview for the latest features and improvements. We recommend you to use the Interactions API (https://ai.google.dev/gemini-api/docs/get-started).",
    "code": 1
  }
}

  6. don-petry commented on Sep 27, 2026

    @don-petry
    don-petry
    on Sep 27, 2026
    ContributorAuthor

    dev-lead is withholding action on this item.

    It is labeled dev-lead:needs-human (escalated for a human to take over), so dev-lead will not pick it up while that label is present. This notice is posted once so the withhold is visible rather than looking like a stalled run.

    To re-enable automated pickup: remove the dev-lead:needs-human label.

  7. don-petry
    added
    dev-leadFor dev-lead agent pickup
    and removed
    dev-leadFor dev-lead agent pickup
    on Sep 28, 2026

  8. 150 remaining items

  9. don-petry
    added
    dev-leadFor dev-lead agent pickup
    and removed
    dev-leadFor dev-lead agent pickup
    on Oct 15, 2026

  10. don-petry commented on Oct 16, 2026

    @don-petry
    don-petry
    on Oct 16, 2026
    ContributorAuthor

    Resolved! This check is now passing as of 2026-10-16. Closing automatically.

  11. don-petry
    closed this as completedon Oct 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingcompliance-findingMachine-owned: created and auto-closed by the compliance audit. Do not hand-apply.dev-leadFor dev-lead agent pickupdev-lead:needs-humandev-lead could not complete this issue; needs human attention

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions