[observability] Observability Coverage Report - 2026-07-16

[github-actions[bot]]

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection engine failed to produce results.

Review the workflow run logs for details.

Executive Summary

Analyzed 8 recent workflow runs from the last 7 days. Firewall coverage is complete across the 5 sampled firewall-enabled runs, and MCP telemetry is complete across the 8 sampled MCP-enabled runs. No critical observability gaps were found. All firewall runs had usable access.log output, and all MCP runs had rpc-messages.jsonl present as the canonical fallback.

Key Alerts and Anomalies

No critical issues detected.

Critical Issues:

• None.

Warnings:

• None.
• gateway.jsonl was not present in the sampled MCP runs; rpc-messages.jsonl covered telemetry successfully in every case.

Coverage Summary

Component	Runs Analyzed	Logs Present	Coverage	Status
AWF Firewall (access.log)	5	5	100%	Healthy
MCP Gateway (gateway.jsonl or rpc-messages.jsonl)	8	8	100%	Healthy

Detailed Run Analysis

Firewall-Enabled Runs

Workflow	Run ID	access.log	Entries	Allowed	Blocked	Status
Smoke Codex	§29459754064	Yes	352	352	0	Healthy
Smoke Copilot	§29459778281	Yes	203	203	0	Healthy
Smoke Copilot - AOAI (apikey)	§29459779324	Yes	257	257	0	Healthy
Smoke Copilot - AOAI (Entra)	§29459780268	Yes	254	254	0	Healthy
Daily Documentation Healer	§29460089532	Yes	164	164	0	Healthy

Missing Firewall Logs (access.log): None in the sampled set.

MCP-Enabled Runs

Workflow	Run ID	Telemetry Source	Entries	Servers	Tool Calls	Errors	Status
AI Moderator	§29456330354	rpc-messages.jsonl	28	1	1	0	Healthy
AI Moderator	§29456557661	rpc-messages.jsonl	6	2	0	0	Healthy
AI Moderator	§29457276763	rpc-messages.jsonl	6	2	0	0	Healthy
Smoke Codex	§29459754064	rpc-messages.jsonl	34	2	14	0	Healthy
Smoke Copilot	§29459778281	rpc-messages.jsonl	60	4	25	0	Healthy
Smoke Copilot - AOAI (apikey)	§29459779324	rpc-messages.jsonl	26	4	8	0	Healthy
Smoke Copilot - AOAI (Entra)	§29459780268	rpc-messages.jsonl	32	4	11	0	Healthy
Daily Documentation Healer	§29460089532	rpc-messages.jsonl	4	1	1	0	Healthy

Missing MCP Telemetry (gateway.jsonl and rpc-messages.jsonl both absent): None in the sampled set.

Telemetry Quality Analysis

Firewall log quality:

• Total access.log requests analyzed: 451
• Unique allowed domains observed: 15
• Blocked requests observed: 0
• Sampled traffic was dominated by api.openai.com, gh-aw-foundry.openai.azure.com, api.anthropic.com, api.githubcopilot.com, github.com, and observability endpoints

MCP log quality:

• Telemetry source: rpc-messages.jsonl in all sampled MCP runs
• Total JSONL lines analyzed: 196
• Total tool calls observed: 60
• JSON parse errors: 0
• Servers observed: safeoutputs, serena, mcpscripts, agenticworkflows, github
• Average response time: N/A from this fallback source; gateway.jsonl was not emitted in the sampled runs

Healthy runs summary:

• All sampled firewall-enabled runs had complete access.log coverage
• All sampled MCP-enabled runs had usable telemetry via rpc-messages.jsonl

Recommended Actions

1. Keep access.log collection mandatory for firewall-enabled workflows.
2. Preserve rpc-messages.jsonl fallback until gateway.jsonl is emitted consistently.
3. If blocked-network debugging becomes important, add at least one intentionally blocked egress test to the sampling plan so firewall logs show both allowed and denied paths.

References:

• §29459779324
• §29459778281
• §29460089532

---

Report generated automatically by the Daily Observability Report workflow
Analysis window: Last 7 days | Runs analyzed: 8

Generated by 📊 Daily Observability Report for AWF Firewall and MCP Gateway · 17.1 AIC · ⊞ 12.4K · ◷

• expires on Jul 16, 2026, 4:11 PM UTC-08:00