[uk ai resilience] [uk-ai-resilience] UK AI governance report - 2026-09-30

[github-actions[bot]]

Executive summary

Window: 2026-09-23 → 2026-09-30 (7 days). 119 commits (46 security-signal), 67 open security issues, 277 open code-scanning alerts, 0 secret-scanning alerts. Recent changes centre on safe-output ledgers/repo-memory, GitHub App token use for gh-proxy, private-to-public flow validation, self-hosted runner enforcement, label-schema narrowing, and pin updates. Nothing critical found; the dominant risks are a persistent supply-chain pin backlog (244 npm-install + 10 uv-pip alerts) and a missing CODEOWNERS file. Sub-agent dispatch was not used; analysis was done directly from the pre-computed data (limitation: lower confidence, no per-file code review).

Asset graph summary

Asset graph (recent-change scoped)

Segment	Changed surface	Signals
pkg/workflow compiler	ledger config, sandbox kebab-case, runner enforcement, label schemas, private→public validation	alerts #944/#945, #941, #681, #676/#675, #677, #665/#664
pkg/cli	ledger projections, audit, version output	alerts #942/#943, #679, #674, #667, #651/#652
.github/workflows/*.lock.yml	recompiles, CLI/action pin updates	244 npm-install + 10 uv-pip non-deterministic install alerts
Container/Dockerfile	scanner image pin updates	#940 (alpine tag unpinned), container CVE issues #52657/#53075
scripts/	docs slide PDF	#663 http-to-file-access
Ownership	no .github/CODEOWNERS	issue #61637 open

Tier classification

Tiers

Area	Tier
Compiler/workflow Go code (allocation-size, redirect checks)	B
CLI Go code (project_command GraphQL sprintf)	B
Workflow lockfiles / CI install determinism	B
Root Dockerfile / container images	B
Security-sensitive paths lacking CODEOWNERS	B (ownership confidence low)
Ledger / repo-memory push paths (new)	B (new, needs review evidence)
scripts/ensure-docs-slide-pdf.js	A/B (low impact)

No Tier C/D areas identified.

Control verification gaps

• Ownership: no CODEOWNERS ([uk-ai-resilience] Missing .github/CODEOWNERS for security-sensitive compiler/CLI paths (Tier B) #61637, open ~13 days).
• SDLC: 244+ CI install steps non-deterministic; Dockerfile base image not SHA-pinned.
• Dependency: unpinned pip install (Fix core.warn API usage and enable comprehensive type checking for JavaScript files #768), missing node-version (📝 Reorganize and Update Documentation Structure #831), container CVE burn-down open.
• Secrets: 0 open secret-scanning alerts — control effective.
• Observability: static-analysis and uk-ai-resilience reports run regularly; good.
• Recovery: release-workflow token minting added/reverted without tracking ([uk-ai-resilience] GitHub App token minting for release workflow added and reverted without documented security sign-off (Tier C [Content truncated #60296); revert capability exists.
• Tracking gap: GraphQL string-interpolation alerts #651/[Custom Engine Test] Test Issue Created by Custom Engine #652 (open since 2026-07-24) have no dedicated tracking issue.

Risk scoring

Scores (1 low – 5 high risk; ownership = confidence low→high inverted as risk)

Area	Exposure	Patchability	Detectability	Fragility	Ownership	Priority
GraphQL sprintf (project_command.go:269,272)	3	2	2	2	4	high
CI install non-determinism (254 alerts)	4	3	1	3	3	high
Missing CODEOWNERS	3	1	3	3	5	medium
Dockerfile pin (#940)	3	1	2	2	3	medium
allocation-size / redirect alerts	2	2	1	2	3	medium

Remediation queue

Item	Action	SLA
GraphQL sprintf alerts #651/#652	Use GraphQL variables / validated escaping; track in issue	high
npm/uv install alerts	Lockfile-based npm ci, hash-pinned pip	high
CODEOWNERS (#61637)	Add for pkg/workflow, pkg/cli, .github/workflows, actions/	medium
Dockerfile #940	Pin base image digest	medium
Allocation/redirect alerts	Bound-check sizes; validate redirect targets	medium

Human review trigger: any change to ledger push/token paths and any alert dismissal.

Exception register

None recorded. No hidden-repo exceptions recommended.

Operational metrics baseline

• MTTR proxy: oldest open alert (#651/[Custom Engine Test] Test Issue Created by Custom Engine #652) ≈ 68 days; recent tracking issues open 2–20 days.
• Ownership coverage: 0% formal (no CODEOWNERS).
• Unsupported dependency ratio: not measurable from inputs (unpinned installs 254/277 alerts ≈ 92% of alerts are pin-related).
• Exception aging: 0 exceptions.
• Exposure without recovery capability: none identified; release token revert ([uk-ai-resilience] GitHub App token minting for release workflow added and reverted without documented security sign-off (Tier C [Content truncated #60296) is untracked.

Generated by UK AI Operational Resilience · copilot · auto · 19 AIC · ⌖ 8.37 AIC · ⊞ 7.8K · ◷

• expires on Oct 3, 2026, 7:43 AM UTC-08:00