[detection-analysis] Detection Analysis Report — 2026-09-12 #60483
Closed
Replies: 1 comment
|
This discussion has been marked as outdated by Detection Analysis Report. A newer discussion is available at Discussion #60704. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Summary
gh-awCI runs — and were excluded)gh-aw-detection: false): 1 (0.2%)Warning
No
gh-aw-detectionmisconfigurations were found, but the data surfaces a bigger, repo-wide problem: 54.7% of all runs in the window (233/426) never reached theagentjob because theactivationjob's "Check daily workflow token guardrail" step failed. This is not a detection-feature bug, but it dominates the failure numbers below and is likely why the "Detection Runs" success rate looks so low. See Recommendations.Comparison Chart
Regular runs (1 total) aren't visible as a bar at this scale; the line shows their 100% success rate vs. 35.1% for detection-enabled runs. Average token usage was 0 for both groups —
TokenUsageis reported as 0 across every single run in this window (success and failure alike), so it isn't included as a meaningful comparison; see Recommendations.Misconfigured Workflows
No misconfigured workflows detected in this window (no workflow met the "detection disabled at scale," "detection job itself failing," or "inconsistent flag" criteria).
View All Run Metrics
Top workflows by run count (full long tail of 1-run workflows omitted for brevity — 118 additional workflows had exactly 1 run each in the window):
Root cause behind most of the low success rates above: of the 233 runs whose
agentjob never ran (skipped, upstream of detection), 230 (98.7%) failed at the sameactivationstep — "Check daily workflow token guardrail" — e.g. §34658100900 (PR Sous Chef) and §34663016855 (Issue Monster). This pattern held steady across all 24 hours of the window (roughly 40–100% of runs per hour hit it), not just a brief spike.View Historical Trend
Detection-run success rate has been declining across the last five recorded snapshots: 84.6% (Sep 8) → 80.2% (Sep 9) → 76.3% (Sep 10) → 51.2% (Sep 11) → 35.1% (Sep 12), tracking the ramp-up of the
activation-job guardrail failures described above.detection_avg_tokensalso dropped to 0 starting Sep 11, consistent with the same root cause suppressing normal telemetry.Recommendations
main, Handle empty AIC accounting for failed agent runs (#60470) — worth checking whether that change (or a preceding one in the same area) introduced a regression in the guardrail check itself.gh-aw-detectionconfiguration specifically — adoption is effectively universal (99.8%) and no workflow shows the disabled/inconsistent/detection-job-failing patterns this report screens for.References:
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
api.anthropic.comTo allow these domains, add them to the
network.allowedlist in your workflow frontmatter:See Network Configuration for more information.
All reactions