[Issue Arborist] Issue Arborist Report — 2026-07-28

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 55

Parent issues created

None — no orphan cluster of 5+ unparented issues found. All clusters already had existing parent issues.

Links created (26 total)

Parent	Sub-issue	Reasoning
#1535 (AI-credits rate-limit failures)	#1692	Issue Arborist rate-limit instance
#1535	#1678	Issue Arborist rate-limit instance
#1535	#1665	Issue Arborist rate-limit instance
#1535	#1641	Issue Arborist rate-limit instance
#1549 (non-rate-limit execution failures)	#1686	Bash Step Hygiene Auditor failed
#1549	#1661	Bash Step Hygiene Auditor failed
#1549	#1627	Bash Step Hygiene Auditor failed
#1549	#1680	Copilot Model List Updater reported incomplete
#1283 (upstream dependency release notes)	#1305	copilot-cli deps release items
#1283	#1304	awf deps release items
#1283	#1253	mcpg deps release items
#1286 (compiler internals / pipeline generation)	#384	Manual YAML string building in compile_gate_step_external
#1286	#987	Refactor agentic-pipeline shape out of standalone_ir.rs
#1286	#1378	Unify AzureCLI@2 token-mint steps
#1286	#1081	Add EnvValue::RuntimeExpression IR variant
#1286	#1375	Reject unwireable cross-job provider-env macros
#1321 (MCPG infrastructure & safe-output tooling)	#945	Custom MCP container env passthrough missing
#1321	#1034	MCPG docker invalid reference format bug
#1321	#254	Surface MCPG backend failures in pipeline logs
#1321	#1652	Proxy Stage 1 ADO reads without exposing SC_READ_TOKEN
#1428 (safe-output executor E2E / correctness)	#381	Missing file staging in upload-workitem-attachment
#1428	#1103	add-pr-comment inline thread suggestion rendering
#1428	#471	upload-pipeline-artifact ContainerWriteAccessDeniedException
#1649 (agent runtime & execution pipeline improvements)	#237	Decouple prompt body via runtime-import approach
#1649	#432	Inject runtime parameter values into agent prompt
#1649	#860	Built-in PR context precomputation for PR-triggered agents

Suggested (not linked — for maintainer review)

• gh-aw parity cluster ([agent-issue]: Parity gap with gh-aw — safe-outputs.threat-detection.prompt is not supported #1701, [agent-issue]: Port gh-aw's set-issue-type safe output to ado-aw (native GitHub Issue Types) #1621, feat: align FrontMatter fields with gh-aw schema — run-name, labels, metadata, tracker-id, source, strict #451): Three issues tracking parity gaps with gh-aw (threat-detection prompt, set-issue-type safe output, FrontMatter field alignment). Only 3 issues — below the 5-issue threshold — but a [Parent] gh-aw schema and feature parity tracking issue could be useful if more parity items arise.
• Fixture recompile chores (chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156, chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041, chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027): Three chore(workflows): recompile safe-output fixtures issues. Routine housekeeping; no parent needed unless a pattern of blocking failures emerges.
• debug: v0.31.1 compiler emits different YAML than committed *.lock.yml files from #861, breaking integrity check #866 (compiler emits different YAML than lock files): Potentially related to compile: directory argument silently no-ops instead of auto-discovering or erroring #867 (compile directory argument no-ops). Both are compile correctness debug issues but differ enough in root cause to not link confidently.
• 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 (shell injection via runtimes.lean.toolchain): Security finding. Could relate to a broader hardening parent if one is created.
• 🧪 Test gap analysis — 3 gaps found in compile/job, compile/stage, and update_check #647 (test gap analysis): Could link to [Parent] Safe-output executor E2E test coverage and tool correctness #1428 (safe-output E2E coverage), but the gaps are in compile/job, compile/stage, and update_check — not safe-output execution — so not linked.

Observations

• The backlog is well-structured with 7 active parent issues covering the main effort areas.
• Recurring [aw] workflow failure issues (rate limits, bash hygiene auditor) are now properly routed to [Parent] Track and resolve recurring AI-credits rate-limit failures in scheduled agentic workflows #1535 and [Parent] Track and resolve recurring agentic workflow execution failures (non-rate-limit) #1549.
• The dependency release-notes family ([Parent] Track and act on upstream dependency release-note action items (awf, mcpg, copilot-cli) #1283, [deps-release-notes] mcpg — upstream release action items #1253, [deps-release-notes] awf — upstream release action items #1304, [deps-release-notes] copilot-cli — upstream release action items #1305) is clean and complete.
• A gh-aw parity tracking parent may be worth creating proactively as the feature-gap list grows.
• ~10 issues remain unparented and appear to be genuinely standalone items (security findings, one-off bugs, standalone feature requests).

Generated by Issue Arborist · 61.8 AIC · ⌖ 6.29 AIC · ⊞ 6.1K · ◷

• expires on Aug 4, 2026, 8:51 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #1722.