Recompile all workflows with latest gh-aw pre-release

[lpcox]

Summary

Recompiles all 36 workflows using the latest gh-aw pre-release compiler.

Verification

• make agent-finished passes (format, build, lint, all tests including Rust guard)

[Copilot]

Pull request overview

Recompiles all 36 agentic workflows with gh-aw v0.86.1.

Changes:

• Updates compiler metadata, runtime versions, and pinned setup actions.
• Removes obsolete COPILOT_GITHUB_TOKEN declarations.
• Refreshes maintenance workflow and action lock data.

Show a summary per file

File	Description
.github/aw/actions-lock.json	Pins gh-aw actions v0.86.1.
.github/workflows/agentics-maintenance.yml	Updates maintenance tooling and checkout action.
.github/workflows/daily-compliance-checker.lock.yml	Recompiled with v0.86.1.
.github/workflows/duplicate-code-detector.lock.yml	Recompiled with v0.86.1.
.github/workflows/gateway-issue-dispatcher.lock.yml	Recompiled with v0.86.1.
.github/workflows/ghcr-download-tracker.lock.yml	Recompiled with v0.86.1.
.github/workflows/github-mcp-guard-coverage-checker.lock.yml	Recompiled with v0.86.1.
.github/workflows/go-fan.lock.yml	Recompiled with v0.86.1.
.github/workflows/go-logger.lock.yml	Recompiled with v0.86.1.
.github/workflows/gpl-dependency-checker.lock.yml	Recompiled with v0.86.1.
.github/workflows/guard-status-tracker.lock.yml	Recompiled with v0.86.1.
.github/workflows/integrity-filtering-audit.lock.yml	Recompiled with v0.86.1.
.github/workflows/issue-monster.lock.yml	Recompiled with v0.86.1.
.github/workflows/large-payload-tester.lock.yml	Recompiled with v0.86.1.
.github/workflows/mcp-gateway-log-analyzer.lock.yml	Recompiled with v0.86.1.
.github/workflows/nightly-docs-reconciler.lock.yml	Recompiled with v0.86.1.
.github/workflows/nightly-schema-updater.lock.yml	Recompiled with v0.86.1.
.github/workflows/nightly-workflow-compiler.lock.yml	Recompiled with v0.86.1.
.github/workflows/plan.lock.yml	Recompiled with v0.86.1.
.github/workflows/readonly-stress-default.lock.yml	Recompiled with v0.86.1.
.github/workflows/readonly-stress-gvisor.lock.yml	Recompiled with v0.86.1.
.github/workflows/readonly-stress-sbx.lock.yml	Recompiled with v0.86.1.
.github/workflows/release.lock.yml	Recompiled with v0.86.1.
.github/workflows/repo-assist.lock.yml	Recompiled with v0.86.1.
.github/workflows/rust-guard-improver.lock.yml	Recompiled with v0.86.1.
.github/workflows/semantic-function-refactor.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-allowonly.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-copilot.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-long-session.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-otel-tracing.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-proxy-github-script.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-safeoutputs-discussions.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-safeoutputs-issues.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-safeoutputs-labels.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-safeoutputs-prs.lock.yml	Recompiled with v0.86.1.
.github/workflows/smoke-safeoutputs-reviews.lock.yml	Recompiled with v0.86.1.
.github/workflows/test-coverage-improver.lock.yml	Recompiled with v0.86.1.
.github/workflows/test-improver.lock.yml	Recompiled with v0.86.1.

Review details

Tip

Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 38/38 changed files
• Comments generated: 0
• Review effort level: Balanced

[github-actions]

🔒 mcpg Read-Only Stress — default AWF

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: default AWF (normal container isolation)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (issues/PRs/file/commits)	data returned	ALLOWED	✅
B	MCP	writes (reaction/star/issue/comment/branch/file/PR)	Error [-32602]: unknown tool — gateway exposes only 22 read-only tools	BLOCKED	✅
C	CLI	reads (github list_issues, list_pull_requests, get_file_contents, list_commits)	data returned	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment/file)	gh unauthenticated — all blocked	BLOCKED	✅
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	gh unauthenticated — all blocked	BLOCKED	✅

Overall: PASS

Notes: Part B gateway enforces read-only by advertising only 22 read-only tools; write tools produce MCP -32602 errors. Parts D/E: gh has no token in this sandbox.

References: §31265700255

🔒 mcpg read-only stress (default AWF runtime) by Read-Only Stress: default runtime

[github-actions]

🔒 mcpg Read-Only Stress — docker-sbx

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: docker-sbx (KVM-isolated microVM)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues/list_prs/get_file/list_commits)	data returned	ALLOWED	✅
B	MCP	writes (reaction/star/issue/comment/branch/file/PR)	Error[-32602]: unknown tool — no write succeeded	BLOCKED	✅
C	CLI	reads (list_issues/get_file_contents)	data returned	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment/file)	HTTP 401 Bad credentials	BLOCKED	✅
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	HTTP 401 Bad credentials	BLOCKED	✅

Overall: PASS

Note on Part B: Write tools are absent from the read-only MCP backend (not registered), returning Error[-32602]: unknown tool. No write reached the GitHub API.
Note on Parts D & E: gh is unauthenticated (401 Bad credentials) — no writes reached the API.

References: §31265700185

🔒 mcpg read-only stress (docker-sbx runtime) by Read-Only Stress: docker-sbx runtime

[github-actions]

🔒 mcpg Read-Only Stress — gVisor

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: gVisor (runsc) kernel-level isolation

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues, list_prs, get_file, list_commits)	data returned	ALLOWED	✅
B	MCP	writes (reaction/star/issue/comment/branch/file/PR)	Error[-32602]: unknown tool	BLOCKED	✅
C	CLI	reads via github CLI (22 read-only tools)	data returned	ALLOWED	✅
D	CLI	REST writes via gh	rejected (GH_TOKEN unset)	BLOCKED	✅
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	rejected (GH_TOKEN unset)	BLOCKED	✅

Gateway enforcement (Part B): The gateway exposes exactly 22 read-only MCP tools. All 7 write tool calls returned gateway-level JSON-RPC error -32602: unknown tool "<name>" — stripped at gateway before reaching upstream. No write succeeded.

Overall: PASS ✅

Run: §31265700176

🔒 mcpg read-only stress (gVisor runtime) by Read-Only Stress: gVisor runtime