Add AI artifact audit workflow

[akhera99]

Part of: https://github.com/dotnet/roslyn-private-planning/issues/69
Adds a weekly, manually runnable agentic workflow that audits Roslyn’s AI guidance for broken, duplicated, contradictory, or stale instructions and opens a tracking issue when action is needed

Created following instructions https://docs.github.com/en/copilot/how-tos/github-agentic-workflows/creating-github-agentic-workflows

Microsoft Reviewers: Open in CodeFlow

[azure-pipelines]

Azure Pipelines:
Successfully started running 2 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Adds a new GitHub Agentic Workflow (gh-aw) that runs on a weekly schedule (and via manual dispatch) to audit Roslyn’s AI guidance artifacts under .github/ and to open (or update) a single tracking issue when actionable problems are found.

Changes:

• Adds the gh-aw source workflow definition for the AI artifact audit (.github/workflows/ai-artifact-audit.md).
• Adds the generated/compiled workflow lock file that actually runs in GitHub Actions (.github/workflows/ai-artifact-audit.lock.yml).
• Marks workflow lock files as generated in .gitattributes (and attempts to force “ours” merges).

Show a summary per file

File	Description
.github/workflows/ai-artifact-audit.md	Defines the audit scope and agent instructions (paths to audit, what to report, and when to create an issue vs noop).
.github/workflows/ai-artifact-audit.lock.yml	Generated workflow that executes the agentic run, safe-outputs processing, and issue creation.
.gitattributes	Treats *.lock.yml as generated content (and configures a merge strategy).

Copilot's findings

• Files reviewed: 2/3 changed files
• Comments generated: 3

[Copilot]

Copilot's findings

Suppressed comments (2)

.github/workflows/ai-artifact-audit.md:23

• The safe-outputs.noop.report-as-issue setting here is false, but the generated lock workflow currently configures noop as "report-as-issue":"true" (see .github/workflows/ai-artifact-audit.lock.yml:511). This would likely open an issue even when there are no actionable findings, contradicting the body text (“no issue is required”). Update the source so the compiled lock file reflects the intended noop behavior, then re-run gh aw compile to regenerate the lock file.

safe-outputs:
  mentions: false
  allowed-github-references: []
  noop:
    report-as-issue: false
  create-issue:

.gitattributes:75

• merge=ours in .gitattributes only takes effect if a merge driver named ours is configured (e.g. git config merge.ours.driver true) in the local Git config. Without that config, this line won’t actually auto-resolve conflicts for contributors (and may not behave as expected on GitHub merges). Consider dropping merge=ours here and relying on regenerating lock files from the .md source when conflicts happen, or document the required Git configuration somewhere contributors will see it.

# Agentic workflow lock files are generated by gh-aw.
.github/workflows/*.lock.yml linguist-generated=true merge=ours

• Files reviewed: 2/3 changed files
• Comments generated: 0 new