[Issue Arborist] Issue Arborist Report — 2026-07-27

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 56

Parent issues created

None — no orphan cluster of 5+ unlinked issues without an existing parent was found.

Links created (24 total)

Parent	Sub-issue	Reasoning
#1535 (AI-credits rate-limit failures)	#1678	Issue Arborist hit AI credits rate limit
#1535	#1665	Issue Arborist hit AI credits rate limit
#1535	#1641	Issue Arborist hit AI credits rate limit
#1535	#1598	Issue Arborist hit AI credits rate limit
#1549 (recurring non-rate-limit failures)	#1686	Bash Step Hygiene Auditor failed
#1549	#1661	Bash Step Hygiene Auditor failed
#1549	#1627	Bash Step Hygiene Auditor failed
#1549	#1592	Bash Step Hygiene Auditor failed
#1549	#1680	Copilot Model List Updater reported incomplete result
#1549	#1585	Copilot Model List Updater reported incomplete result
#1283 (upstream deps release notes)	#1305	copilot-cli upstream release action items
#1283	#1304	awf upstream release action items
#1283	#1253	mcpg upstream release action items
#1321 (MCPG infrastructure)	#254	Surface MCPG backend failures in pipeline logs
#1321	#945	Custom MCP container env passthrough never reaches server
#1321	#1034	MCPG step fails with docker invalid reference format
#1321	#1652	Proxy Stage 1 ADO reads without exposing SC_READ_TOKEN (MCPG as the trusted proxy mechanism)
#1286 (compiler internals)	#1378	Unify AzureCLI@2 token-mint steps behind shared typed helper
#1286	#987	Split agentic-pipeline shape out of standalone_ir.rs
#1286	#384	YAML generation uses manual string building in compile_gate_step_external
#1649 (runtime & execution pipeline)	#432	Inject runtime parameter values into agent prompt via ado-script
#1649	#860	Built-in PR context precomputation for PR-triggered agents
#1649	#237	Decouple prompt body from compiled pipeline output (runtime-import)
#1649	#1375	Reject unwireable cross-job provider-env macros on engine.env

Suggested (not linked — for maintainer review)

• docs: fix AGENTS.md accuracy — add trigger-e2e to ado-script tree and export-fact-catalog to CLI index #1583 (docs: fix AGENTS.md accuracy) → could link to [Parent] Compiler internals and pipeline generation improvements (IR types, YAML gen, prompt decoupling) #1286 (compiler internals/docs), but it's a narrow docs fix rather than a compiler improvement task.
• [agent-issue]: align GitHub issue-reporting token variable names #1632 (align GitHub issue-reporting token variable names) → touches automation/refactor; could link to [Parent] Compiler internals and pipeline generation improvements (IR types, YAML gen, prompt decoupling) #1286 or a new parent if similar issues accumulate.
• chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156, chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041, chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027 (chore: recompile safe-output fixtures with vX.Y.Z) — three related chore issues without a parent. Below the 5-issue threshold for a new parent; watch for more to appear after future releases.
• debug: Noop smoke pipeline fails to pull non-existent ghcr.io/github/gh-aw-mcpg:v0.3.7 (manifest unknown) #621 (noop smoke pipeline fails to pull mcpg image) → tangentially related to [Parent] MCPG infrastructure and safe-output tooling improvements #1321 but is a specific version-pinning defect; left unlinked to avoid noise on the MCPG improvements parent.
• 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 (shell injection via runtimes.lean.toolchain) + Proxy Stage 1 Azure DevOps reads without exposing SC_READ_TOKEN #1652 (proxy SC_READ_TOKEN) — security cluster currently only 2 issues; not enough for a new parent yet.
• feat: align FrontMatter fields with gh-aw schema — run-name, labels, metadata, tracker-id, source, strict #451 (align FrontMatter fields with gh-aw) — no clear parent; could seed a "gh-aw schema alignment" epic if related issues grow.

Observations

• The rate-limit ([Parent] Track and resolve recurring AI-credits rate-limit failures in scheduled agentic workflows #1535) and non-rate-limit failure ([Parent] Track and resolve recurring agentic workflow execution failures (non-rate-limit) #1549) parents are doing good triage work; new [aw]-prefixed failure reports reliably fall into one or the other.
• [Parent] Track and act on upstream dependency release-note action items (awf, mcpg, copilot-cli) #1283 (upstream deps) had 3 floating release-notes tracking issues that are now linked.
• [Parent] Track agent runtime and execution pipeline improvements #1649 (runtime improvements) was recently created and already has substantial scope — 4 concrete feature issues now linked.
• Several older bugs (compile: directory argument silently no-ops instead of auto-discovering or erroring #867, debug: v0.31.1 compiler emits different YAML than committed *.lock.yml files from #861, breaking integrity check #866, 🧪 Test gap analysis — 3 gaps found in compile/job, compile/stage, and update_check #647, debug: upload-pipeline-artifact fails with ContainerWriteAccessDeniedException when uploading to other builds #471, fix(safe-outputs): add file staging to upload-workitem-attachment #381, add-pr-comment: render inline threads as applyable single/multi-line suggestions #1103, feat(ir): add EnvValue::RuntimeExpression variant to prevent $[] in step env #1081) remain unlinked orphans; they may warrant a "bug triage" parent if the set grows or a dedicated milestone is planned.
• [Parent] Issue Arborist - Issue Group #1284 ("[Parent] Issue Arborist - Issue Group") appears to be a stale/meta parent with unusual label formatting — maintainers may want to close or clean it up.

Generated by Issue Arborist · 57.9 AIC · ⌖ 6.33 AIC · ⊞ 6.1K · ◷

• expires on Aug 3, 2026, 8:55 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #1702.