[uk ai resilience] UK AI Governance: Recent-Changes Risk & Resilience Review — 2026-08-20

[github-actions[bot]]

Executive summary

Recent-changes review (7-day lookback, 418 commits, 108 security-signal commits) of github/gh-aw found no new unaddressed high-severity risks. Of 6 open CodeQL alerts, one is a confirmed smoke-test dummy (#564), one is historical/informational git-history bloat already remediated (#653, actionlint/gosec binaries removed and .gitignore-hardened via PR #53764), and the two substantive findings — a likely false-positive redirect-check on manifest path validation (#656) and GraphQL string-interpolation in owner validation queries (#651/#652) — already have open tracking issues (#54037 and #52749 respectively) with correct Tier B classification. No duplicate issues were created. Zero open secret-scanning alerts is a strong baseline. Overall posture: resilient, actively remediated, no exception-governance items required this cycle.

Asset graph summary (recent-change scoped)

Changed surfaces and likely runtime areas

Segment	Change signal	Runtime area
pkg/cli/add_package_manifest_includes.go	Split from add_package_manifest.go (PR #54030)	CLI package-install manifest resolution (supply-chain path handling)
pkg/cli/project_command.go	GraphQL query hardening (PR #52378)	GitHub Projects v2 CLI integration
scripts/ensure-docs-slide-pdf.js	Docs build tooling	CI doc-build pipeline (network fetch → file write)
Build tooling (actionlint, gosec)	Binary-commit hardening (PR #53764), actionlint CI fix (#54028)	CI linting/security-scan tooling
Dependencies	~20 dependabot commits in window	Go module / npm supply chain

Ownership signals: window activity dominated by Copilot (bot, agentic PRs with "Initial plan" commit pattern) and pelikhan (human maintainer, co-author on nearly all Copilot PRs), plus dependabot[bot] and github-actions[bot] automation. This indicates active human review co-authorship on agentic changes rather than unattended merges.

Tier classification table

Tier assignments

Finding	Alert(s)	Tier	Status
Manifest path validation flagged as bad-redirect-check	#656	B (Open With Conditions)	Tracked in issue #54037 (already Tier B)
GraphQL Sprintf + manual escaping in validateOwner	#651, #652	B (Open With Conditions)	Tracked in issue #52749
PDF download-to-file in docs build script	#654	A (Open Safe)	Mitigated: content-type/size/signature checks + lgtm suppression; no new tracking needed
actionlint/gosec binaries in git history	#653	A (Open Safe)	Remediated via PR #53764; historical/informational only
README.md smoke-test dummy	#564	A (Open Safe)	Confirmed test artifact, not a real finding

Control verification gaps

• Ownership: Adequate — human maintainer co-authors all agentic-bot PRs; no ownerless changed files identified in window.
• SDLC: Adequate — PRs follow plan → implement → review-feedback commit pattern (e.g., Fix false-positive heredoc detection on bare (( )) arithmetic in generatedyamlheredoc linter #53991, Use static GraphQL query constants in project_command.go #52378); no evidence of unreviewed direct-to-main pushes for the flagged files.
• Dependency controls: Adequate cadence — dependabot active (~20 commits/week); no open dependency-linked security issues beyond routine container-image-scan advisories (out of this window's scope).
• Secret exposure: Strong — 0 open secret-scanning alerts.
• Runtime observability: Minor gap — validateOwner GraphQL query construction lacks structured logging of rejected/malformed owner inputs; recommend adding debug-level logging (pkg/logger, e.g. namespace cli:project_command) when input fails escapeGraphQLString normalization, to aid future audits.
• Recovery: Strong — the accidental binary-commit issue (PR fix: downgrade gosec to v2.27.1 to resolve actionlint yaml/v4 compile failure #48979) was identified and fully remediated within the same review cycle via Harden against accidental root binary commits for actionlint/gosec #53764, demonstrating fast MTTR for supply-chain-adjacent findings.

Risk-scoring table and rationale

AI-aware risk scores

Finding	Exposure amplification	Patchability	Detectability	Operational fragility	Ownership confidence	Priority
#656 redirect-check FP	Low	High (already tracked)	High (CodeQL)	Low	High	Medium
#651/#652 GraphQL Sprintf	Low-Med	High (variables migration straightforward)	High (CodeQL)	Low	High	Medium
#654 PDF download-to-file	Low	N/A (mitigated)	High	Low	High	Low
#653 binary-in-history	Low	N/A (remediated)	High	Low	High	Low (informational)

Rationale: All findings are low exposure-amplification (no externally-reachable attack surface confirmed exploitable), already patchable/patched, and detected via CodeQL with high confidence ownership. No item met the bar for Tier C/D restriction.

Remediation queue with SLAs

Item	Action	SLA urgency	Owner
Issue #54037	Confirm CodeQL FP suppression or add inline justification comment on cleanManifestRelativePath	Medium (next sprint)	pkg/cli maintainers
Issue #52749	Migrate validateOwner queries (lines 269/272) to GraphQL variables, matching PR #52378 pattern	Medium (next sprint)	pkg/cli maintainers
New (non-issue)	Add debug logging for rejected owner inputs in validateOwner	Low	pkg/cli maintainers

Exception register

None. No temporary hidden-repo or scope-restriction exceptions were required this cycle.

Operational metrics baseline

• MTTR proxy: ~1 review cycle (binary-commit issue: introduced PR fix: downgrade gosec to v2.27.1 to resolve actionlint yaml/v4 compile failure #48979 → remediated PR Harden against accidental root binary commits for actionlint/gosec #53764, both within the analyzed history).
• Ownership coverage: 100% of changed-surface commits in window have identifiable human co-authorship alongside bot commits.
• Unsupported dependency ratio: Not elevated — routine dependabot cadence, no stale/EOL dependency flagged in this window.
• Exception aging: 0 (no active exceptions).
• Exposure without recovery capability: 0 findings identified without a clear patch path.

Generated by UK AI Operational Resilience · auto · 41.5 AIC · ⌖ 6.31 AIC · ⊞ 9.3K · ◷

• expires on Aug 23, 2026, 7:46 AM UTC-08:00