[observability] Observability Coverage Report - 2026-04-13

[github-actions[bot]]

Executive Summary

Observability coverage for the last 7 days was assessed across 76 workflow runs using available run summaries and artifact inventories in /tmp/gh-aw/aw-mcp/logs.

AWF Firewall telemetry is mostly present but has critical gaps: 70/76 firewall-enabled runs included access.log artifacts (92.1%). MCP telemetry coverage was complete: 70/70 MCP-enabled runs included either gateway.jsonl or rpc-messages.jsonl (100.0%), with all observed MCP telemetry coming from rpc-messages.jsonl.

The primary risk is missing firewall logs in 6 runs, which blocks network-debug triage for those executions.

Key Alerts and Anomalies

🔴 Critical Issues:

• 6 firewall-enabled runs are missing access.log artifacts.
• 0 MCP-enabled runs are missing both gateway.jsonl and rpc-messages.jsonl.

⚠️ Warnings:

• 3 MCP-enabled runs had telemetry files but zero observed MCP tool calls.
• logs MCP fetch timed out in this run context; analysis used pre-downloaded local run artifacts.

Coverage Summary

Component	Runs Analyzed	Logs Present	Coverage	Status
AWF Firewall (access.log)	76	70	92.1%	🔴
MCP Gateway (gateway.jsonl or rpc-messages.jsonl)	70	70	100.0%	✅

📋 Detailed Run Analysis

Firewall-Enabled Runs (Summary)

• Total firewall-enabled runs: 76
• Runs with access.log present: 70
• Runs missing access.log: 6

Missing Firewall Logs (access.log)

Workflow	Run ID	Date	Link
Go Pattern Detector	24350521968	2026-04-13	§24350521968
Copilot Agent Prompt Clustering Analysis	24364460297	2026-04-13	§24364460297
AI Moderator	24365402913	2026-04-13	§24365402913
Daily Observability Report for AWF Firewall and MCP Gateway	24372788295	2026-04-13	§24372788295
Design Decision Gate 🏗️	24372865173	2026-04-13	§24372865173
Test Quality Sentinel	24372865184	2026-04-13	§24372865184

MCP-Enabled Runs (Summary)

• Total MCP-enabled runs: 70
• Telemetry source: 0 gateway.jsonl, 70 rpc-messages.jsonl
• Runs missing both telemetry files: 0

Missing MCP Telemetry (no gateway.jsonl or rpc-messages.jsonl)

Workflow	Run ID	Date	Link
None	-	-	-

🔍 Telemetry Quality Analysis

Firewall Log Quality

• Total access.log entries analyzed: 2412
• Domains accessed: 14 unique
• Blocked requests: 287 (11.9%)
• Most accessed domains: api.githubcopilot.com:443 (44 runs), api.anthropic.com:443 (19 runs), github.com:443 (14 runs)

Gateway Log Quality

• Total MCP tool calls observed: 1738
• MCP servers used: agenticworkflows, github, mcpscripts, safeoutputs, semgrep, serena
• MCP error count in summaries: 0
• Average response time: N/A from accessible summary artifacts (per-call durations not exposed)

Additional Telemetry Coverage

• agent-stdio.log present: 70/76
• safeoutputs.jsonl present: 68/76

Runs with Zero MCP Tool Calls (warning)

• §24352823434 The Daily Repository Chronicle
• §24356650728 Contribution Check
• §24372228899 Daily Project Performance Summary Generator (Using MCP Scripts)

Recommended Actions

1. Enforce artifact upload checks for firewall-enabled workflows so sandbox/firewall/logs/access.log is always persisted, including on failure/cancel paths.
2. Add a post-run observability validator that fails runs when firewall is enabled and access.log is absent.
3. Add an MCP telemetry assertion that requires at least one of gateway.jsonl or rpc-messages.jsonl, and export per-run latency/duration metrics into the summary artifact.

📊 Historical Trends

Trend comparison is not included in this report because only the current 7-day snapshot was available in accessible local artifacts.

References:

• §24372788295
• §24365402913
• §24364460297

Warning

⚠️ Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

• ab.chatgpt.com
• api.github.com
• chatgpt.com
• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"

See Network Configuration for more information.

Generated by Daily Observability Report for AWF Firewall and MCP Gateway · ◷

• expires on Apr 14, 2026, 11:57 PM UTC