[oddharsh]

#313 was a CSS-only change and failed github-advanced-security carrying the artifact's whole signature: output.title null, empty summary, one annotation, COPILOT_JOB_NONCE in the job log, and CodeQL reporting "No new alerts in code changed by this pull request." That is the fifth sighting, after #289, #295, #305 and #307.

Two things it added beyond incrementing the tally.

The annotation line is a fingerprint, not a location. #313's lone annotation sat at .github:213 — the same line as #307, on a diff sharing no content with it. A line number that repeats across two unrelated PRs is a property of the harness, so read it as one more signature and never go looking for what lives there.

gh pr checks does not list the failing check at all, which is the part that changes how you look. On #313 it printed seven rows, every one pass or skipping, with no github-advanced-security among them:

Analyze (actions)                 pass
Analyze (javascript-typescript)   pass
CodeQL                            pass
Workers Builds: aadhar-sh         pass
validate                          pass
wire size vs merge base           pass
annotate                          skipping

while /commits/<sha>/check-runs reported that same check as failure on the same head commit. Reproduced twice minutes apart, so it is not a timing gap. The consequence is that the convenient command reports the PR green while the notification says a check failed, which reads exactly like a stale alert and is not one. The check-runs call the note already recommends is the source of truth for this check; gh pr checks stays fine for everything else.

Documentation only — CLAUDE.md, which AGENTS.md symlinks to. 206/206 contract tests.

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	aadhar-sh	c44f879	Aug 10 2026, 08:08 PM