Description
The Schema Consistency Check (discussion #55947, 2026-08-26) found two related documentation gaps in docs/src/content/docs/reference/frontmatter.md, both verified against live parser/schema code:
max-daily-ai-credits supports an object form ({value, github-app}, implemented in pkg/workflow/daily_aic_workflow.go via extractMaxDailyAICObjectValue/extractMaxDailyAICGitHubApp, and required by $defs.max_daily_ai_credits_limit in the schema) but the docs only show scalar examples (10000, -1) — the object form and its dedicated github-app token option are undiscoverable.- The top-level
permissions: description says permissions specify "GitHub read permissions relevant to the agentic part," but the schema/parser ($defs.github_actions_permissions, pkg/workflow/permissions.go) actually support write scopes and GitHub App-only scopes (copilot-requests: write, id-token: write, organization-*, secret-scanning-alerts, etc.) — readers may wrongly conclude write scopes aren't valid at top level. Additionally, safe-outputs.jobs is implemented (pkg/workflow/safe_jobs.go, SafeOutputsConfig.Jobs) but not surfaced in the frontmatter guide's safe-outputs customization section.
Expected Impact
Makes two supported, non-trivial configuration surfaces (object-form AI-credit limits with per-workflow GitHub App tokens, and write/app-only permission scopes + safe-outputs.jobs) discoverable to users who currently have no way to find them except reading source.
Suggested Agent
New agent / general-purpose (docs-only PR) — add the missing examples/sections to frontmatter.md.
Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport Intelligence analysis, 2026-08-26 cycle, source discussion #55947 (Schema Consistency Check).
Generated by 🔬 Deep Report · claude · agent · 127.2 AIC · ⌖ 8.75 AIC · ⊞ 12.4K · ◷
Description
The Schema Consistency Check (discussion #55947, 2026-08-26) found two related documentation gaps in
docs/src/content/docs/reference/frontmatter.md, both verified against live parser/schema code:max-daily-ai-creditssupports an object form ({value, github-app}, implemented inpkg/workflow/daily_aic_workflow.goviaextractMaxDailyAICObjectValue/extractMaxDailyAICGitHubApp, and required by$defs.max_daily_ai_credits_limitin the schema) but the docs only show scalar examples (10000,-1) — the object form and its dedicatedgithub-apptoken option are undiscoverable.permissions:description says permissions specify "GitHub read permissions relevant to the agentic part," but the schema/parser ($defs.github_actions_permissions,pkg/workflow/permissions.go) actually support write scopes and GitHub App-only scopes (copilot-requests: write,id-token: write,organization-*,secret-scanning-alerts, etc.) — readers may wrongly conclude write scopes aren't valid at top level. Additionally,safe-outputs.jobsis implemented (pkg/workflow/safe_jobs.go,SafeOutputsConfig.Jobs) but not surfaced in the frontmatter guide's safe-outputs customization section.Expected Impact
Makes two supported, non-trivial configuration surfaces (object-form AI-credit limits with per-workflow GitHub App tokens, and write/app-only permission scopes + safe-outputs.jobs) discoverable to users who currently have no way to find them except reading source.
Suggested Agent
New agent / general-purpose (docs-only PR) — add the missing examples/sections to
frontmatter.md.Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport Intelligence analysis, 2026-08-26 cycle, source discussion #55947 (Schema Consistency Check).