[uk ai resilience] [uk-ai-resilience] Governance report 2026-10-15

[github-actions[bot]]

Executive summary

384 commits in 7 days (~167 human, ~158 Copilot, 48 bot), 235 with security signals. 2 open high code-scanning alerts (js/file-system-race in .github/scripts/test_lint_monster_issues.cjs), 0 secret alerts, 22 open security-tagged issues (mostly container CVE burn-downs). Overall posture: Tier B (Open With Conditions). No hiding recommended; remediation velocity is the main lever.

Limitation: sub-agents were not dispatched; synthesis done directly from pre-computed data (reduced confidence).

Asset graph summary (recent-change scoped)

Asset graph

• Compiler/CLI (pkg/cli, pkg/workflow): offline skill command, failure clustering, model routing, multi-repo checkout (multi: true), work-queue dispatch.
• Safe outputs / patch application: validated-bytes binding for patch/bundle (Bind safe-output patch and bundle application to validated bytes #68732), trusted bundle base revert (Revert "Resolve trusted PR bundle validation base from the base branch tip" #68795/Resolve trusted PR bundle validation base from the base branch tip #68717).
• Credential handling: OTLP credential redaction/masking (Harden OTLP credential redaction and eval sandbox isolation #68811, Mask decoded OTLP credentials and redact Grafana Cloud tokens #68779), eval sandbox isolation.
• Dependencies: Dependabot consolidation (build(deps): consolidate all pending Dependabot updates #68784), actions bumps, npm dev bumps.
• Docs/ADR: Model routing, linter-factory.
• Ownership signals: concentrated in a few maintainers plus Copilot-authored PRs reviewed by maintainers.

Tier classification

Tier table

Area	Tier
Safe-output patch/bundle application	B
Credential redaction/OTLP	B
Checkout/multi-repo & dynamic repo lists	B
Container images (CVE burn-downs x9)	B
.github/scripts test utilities (file-system-race)	B
Model routing / docs / ADRs	A
Dependabot/action bumps	A

No Tier C/D areas identified.

Control verification gaps

• Ownership: no CODEOWNERS evidence checked; implicit via maintainers (medium).
• SDLC: CI-gated PRs; revert of Resolve trusted PR bundle validation base from the base branch tip #68717 indicates validation-base design still unsettled.
• Dependency: container CVE burn-down issues open ([container-image-scan] ghcr.io/xberg-io/xberg CVE burn-down #68976, [container-image-scan] Serena CVE burn-down #68975, [container-image-scan] gh-aw-router CVE burn-down #68347, [container-image-scan] grafana/mcp-grafana CVE burn-down #68346, [container-image-scan] Node CVE burn-down #68344, [container-image-scan] GitHub MCP Server CVE burn-down #68342, [container-image-scan] MCP Gateway CVE burn-down #68341, [container-image-scan] Firewall CVE burn-down #68340, [container-image-scan] Container CVE burn-down #52657); unpinned npm/pip installs in lock files ([uk-ai-resilience] [security] Make generated npm/pip/uv installs deterministic in lock files #68043).
• Secrets: 0 open alerts.
• Observability: failure clustering added; OTLP redaction hardened.
• Recovery: revert practice demonstrated; no per-binary release attestations (Add per-binary attestations to release artifacts #52302).

Risk scoring

Scores (1=low risk, 5=high)

Area	Exposure	Patchability	Detectability	Fragility	Ownership conf.	Priority
Safe-output patch application	4	2	2	3	2	medium
Credential redaction	4	2	3	2	2	medium
Container images	3	2	2	3	3	high
file-system-race scripts	2	1	1	2	2	high (scanner severity)

High-severity alerts are in test-only scripts so real exposure is low, but they are open and fresh.

Remediation queue

Action	SLA
Fix/dismiss file-system-race alerts (#1032, #1033)	high (7d)
Burn down container CVE issues	high (14d)
Deterministic installs (#68043), unsafe-quoting triage (#68742)	medium (30d)
Release attestations (#52302)	medium

Human-review triggers: any change to safe-output patch validation or credential redaction.

Exception register

None.

Operational metrics baseline

• MTTR proxy: this week's security issues open <=3 days; oldest container CVE issue 62 days ([container-image-scan] Container CVE burn-down #52657).
• Ownership coverage: not measured; estimated medium.
• Unsupported dependency ratio: not measured.
• Exception aging: 0.
• Exposure without recovery capability: none identified.

Generated by UK AI Operational Resilience · copilot · auto · 18.9 AIC · ⌖ 0.675 AIC · ⊞ 8K · ◷

• expires on Oct 18, 2026, 7:38 AM UTC-08:00

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-10-18T15:38:25.770Z.

Closed by Workflow