[deep-report] Fix max-daily-ai-credits default-behavior contradiction across docs, schema, and compiler

Description

max-daily-ai-credits has three-way disagreement between docs, schema, and actual compiler behavior:

docs/src/content/docs/reference/frontmatter.md:479 says the guardrail is "disabled by default when omitted."
docs/src/content/docs/reference/rate-limiting-controls.md:137 says "the default threshold is 5000 AIC."
The schema description (pkg/parser/schemas/main_workflow_schema.json:13213) says the cap is "for runs of this workflow by the triggering user," but docs/src/content/docs/reference/frontmatter.md and docs/src/content/docs/reference/glossary.md both describe it as aggregated workflow-wide (not per-user) — consistent with the already-merged fix in fix: scope daily AIC guardrail to repo+workflow, not per user #37634 ("scope daily AIC guardrail to repo+workflow, not per user"), which the schema wording was apparently never updated to reflect.

Verified live in pkg/workflow/daily_aic_workflow.go:131-152 (resolveMaxDailyAIC) and pkg/constants/constants.go:426-427: omitting the field always falls back to constants.DefaultMaxDailyAICredits = "5000" — the guardrail is enabled by default at 5000 AIC, matching rate-limiting-controls.md and contradicting frontmatter.md and the schema's own "leave the guardrail disabled" description.

Expected Impact

Removes a real user-facing contradiction: someone reading frontmatter.md or the JSON schema would reasonably conclude omitting the field disables budget enforcement, when in practice a 5000 AIC/day cap is silently applied. Also removes stale "by the triggering user" wording that no longer matches the workflow-wide scoping shipped in #37634.

Suggested Fix

Update frontmatter.md:479 and the schema description at main_workflow_schema.json:13213 to state the true default (5000 AIC, workflow-wide, not per-user) — matching rate-limiting-controls.md and the actual resolveMaxDailyAIC behavior.
Remove/replace "by the triggering user" in the schema description with workflow-wide aggregation language.

Suggested Agent

Repository Quality / deep-report doc-drift fixer (New Agent not needed — this is docs+schema text only, no code change).

Estimated Effort

Quick (< 1 hour)

Data Source

DeepReport Intelligence Briefing analysis, 2026-08-27 cycle (window since discussion #56215). Source: Schema Consistency Checker report #56291, findings 1-2.

Generated by 🔬 Deep Report · claude · agent · 153.6 AIC · ⌖ 8.47 AIC · ⊞ 12.4K · ◷

expires on Aug 29, 2026, 1:31 AM UTC-08:00

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.7 AIC · ⌖ 2.85 AIC · ⊞ 18.3K · ◷

🍪 Issue Monster selected this for Copilot

I identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.25 AIC · ⌖ 1.56 AIC · ⊞ 19.3K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.92 AIC · ⌖ 0.439 AIC · ⊞ 18.3K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 3.3 AIC · ⌖ 0.375 AIC · ⊞ 19.2K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.27 AIC · ⌖ 0.612 AIC · ⊞ 19.9K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.9 AIC · ⌖ 0.693 AIC · ⊞ 19.1K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.61 AIC · ⌖ 0.443 AIC · ⊞ 20.1K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.27 AIC · ⌖ 0.517 AIC · ⊞ 20.2K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.09 AIC · ⌖ 0.444 AIC · ⊞ 20.2K · ◷

🍪 Issue Monster selected this for Copilot. I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent. If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix. Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.83 AIC · ⌖ 0.609 AIC · ⊞ 20.2K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.55 AIC · ⌖ 0.602 AIC · ⊞ 20.3K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.04 AIC · ⌖ 0.687 AIC · ⊞ 20.3K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.71 AIC · ⌖ 0.53 AIC · ⊞ 20.3K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 1.96 AIC · ⌖ 0.871 AIC · ⊞ 20.4K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.25 AIC · ⌖ 0.79 AIC · ⊞ 20.4K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.36 AIC · ⌖ 0.53 AIC · ⊞ 20.4K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.37 AIC · ⌖ 0.534 AIC · ⊞ 20.4K · ◷

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.24 AIC · ⌖ 0.523 AIC · ⊞ 20.4K · ◷

This issue was automatically closed because it expired on 2026-08-29T09:31:05.181Z.

Closed by Workflow

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
api.github.com
chatgpt.com
github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

🍪 Om nom nom by Issue Monster · codex · mai10 · 2.31 AIC · ⌖ 0.526 AIC · ⊞ 20.4K · ◷

Navigation Menu

Repository navigation

[deep-report] Fix max-daily-ai-credits default-behavior contradiction across docs, schema, and compiler #56301

Description

Expected Impact

Suggested Fix

Suggested Agent

Estimated Effort

Data Source

6 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[deep-report] Fix max-daily-ai-credits default-behavior contradiction across docs, schema, and compiler #56301

Description

Description

Expected Impact

Suggested Fix

Suggested Agent

Estimated Effort

Data Source

Activity

github-actions commented on Aug 27, 2026

github-actions commented on Aug 27, 2026

github-actions commented on Aug 28, 2026

github-actions commented on Aug 28, 2026

github-actions commented on Aug 28, 2026

github-actions commented on Aug 28, 2026

6 remaining items

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

github-actions commented on Aug 29, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions