[daily regulatory] Regulatory Report - 2026-06-23

[github-actions[bot]]

39 daily report discussions reviewed for 2026-06-23. Overall data quality is good — all internal math checks pass (12/12), zero same-scope metric contradictions. Two critical gaps: the Daily Issues Report is missing 2+ consecutive days (AWF chroot node PATH failure), and 3 compile-performance regression alarms opened today (+107.4%/+84.6%/+53.4%). One safe-output failure (Changeset Generator) was recorded. All apparent issue-count differences across reports are scope-driven (90d window vs. full-repo snapshot) and consistent with the metrics glossary.

📋 Full Regulatory Report

📊 Reports Reviewed (2026-06-23)

Report	Discussion	Status
Daily Performance Summary	#41107	✅ Valid
Daily Code Metrics	#41096	✅ Valid
Copilot Agent Analysis	#41093	✅ Valid
Repository Chronicle	#41082	✅ Valid
Security Observability	#41084	✅ Valid
Safe Output Health	#40961	⚠️ 1 Failure
Observability Coverage	#40905	⚠️ 1 Missing Log
Workflow Audit (06-22)	#40878	✅ Valid
Secrets Analysis	#41089	✅ Valid
Auto-Triage (×3)	#41095 #41016 #40910	✅ Valid
+ 29 other daily reports	—	✅ Valid
Daily Issues Report	—	❌ MISSING (2+ days)
Workflow Audit (06-23)	—	⚠️ Not Yet Run

Total: 39 reviewed · 36 passed · 2 with issues · 2 missing/absent

🔍 Cross-Report Consistency

Metric	Performance Rpt	Chronicle	Notes
open_issues	189 (90d scope)	318 (total)	i️ Different scopes — expected
merged_prs (90d)	408	—	✅
open_prs	11	—	✅
PRs today	—	18 merged / 33 opened	✅
Agent PRs (24h)	—	—	26/37 merged (84%)
Commits today	—	25	✅
Workflow health	—	—	94.5% (from 06-22 audit)
Safe output success	—	—	90.9% (10/11)

Consistency score: 100% — no same-scope contradictions. Scope differences match glossary definitions.

⚠️ Critical Issues

1. Daily Issues Report — MISSING 2+ Days 🔴
Root cause per Workflow Audit: node not on PATH in AWF chroot. open_issues, stale_issues, issues_without_labels data absent from regulatory analysis.
Fix: Bind-mount node into AWF chroot or add to chroot setup script.

2. Compile Performance Regressions (×3) 🔴
Issues #41069 #41070 #41071: CompileComplexWorkflow +107.4%, CompileMemoryUsage +84.6%, CompileMCPWorkflow +53.4%. Chronicle links to multi-engine architecture PR #40903 merged today.
Fix: Profile compile changes from engine.driver/model-provider feature; determine if regression is real or test-infra noise.

⚠️ High Warnings

3. Safe Output Failure — Changeset Generator 🟡
Run §28003923242 failed with git dubious ownership in safeoutputs bridge. 90.9% success rate (10/11 jobs).
Fix: Add safe.directory to system gitconfig used by safeoutputs bridge process.

4. copilot-sdk-driver Long-Run Failures (5/day) 🟡
20–34 min runtime, then fails. ~130 min compute/day wasted. Highest-ROI fix per Workflow Audit.
Fix: Flush safe-output on session-idle; allowlist routine read-only tool calls.

5. Avenger Workflow — Streak Broken by Absence (WATCH) 🟡
5-day 100%-fail streak ended on 06-22 by having 0 runs — not a confirmed fix. Will recur if schedule resumes without remediation.

📈 Key Metrics Summary

Area	Metric	Value
PRs (90d)	Merged / Total	408 / 500 (81.6%)
Issues (90d)	Closed / Total	811 / 1,000 (81.1%)
Issues (repo)	Open	318
Code Quality	Score	75.4/100 (−0.2 vs prev)
Agent PRs (24h)	Merged / Total	26 / 37 (84%)
Workflow Health	Success rate	94.5% (06-22)
Safe Outputs	Success rate	90.9%
Firewall	Block rate	70.6% (expected, Playwright)
Commits today	To main	25

💡 Recommendations

1. Fix node PATH in AWF chroot — blocks Daily Issues Report (2+ days missing)
2. Profile compile regressions — 3 alarms from multi-engine PR Add engine-level model-provider selection, provider-aware runtime wiring, and a Claude-on-Copilot smoke workflow #40903
3. Fix safeoutputs bridge git config — recurring Changeset Generator failure
4. Backfill 17 missing model costs in models.json (issue [deep-report] Backfill cache prices for 17 models in models.json + warn on unknown-model 0-AIC #41063) — skews AI credit budgets
5. Schedule Workflow Audit before 21:00 UTC — regulatory report runs at ~21:48, audit at ~22:00 creates systematic gap

---

Generated by the Daily Regulatory workflow · github/gh-aw · §28059285594
39 reports reviewed · Metric definitions: scratchpad/metrics-glossary.md

Generated by ⚖️ Daily Regulatory Report Generator · 111.6 AIC · ⌖ 11 AIC · ⊞ 8.9K · ◷

• expires on Jun 26, 2026, 1:57 PM UTC-08:00

[github-actions[bot]]

Smoke test ping from run §28059868477.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• clients2.google.com
• contentautofill.googleapis.com
• safebrowsingohttpgateway.googleapis.com
• www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 223.3 AIC · ⌖ 10.5 AIC · ⊞ 19.2K · ◷

[github-actions[bot]]

Smoke test 28059869445 executed.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• clients2.google.com
• contentautofill.googleapis.com
• safebrowsingohttpgateway.googleapis.com
• www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot - AOAI (apikey) · 364.5 AIC · ⌖ 10.7 AIC · ⊞ 18.1K · ◷