[deep-report] daily-experiment-report missing github network preset — gh aw experiments analyze always falls back to descriptive-only

[github-actions]

Description

daily-experiment-report.md (.github/workflows/daily-experiment-report.md:20-22) declares network.allowed: [defaults, go] only. Its core capability, the gh aw experiments analyze CLI, needs outbound access to github.com (via git/gh) to fetch each experiments/<id> branch's decision-engine output (decision, reason_code, readiness, 30-run outcome correlation). Because github.com is not in the allowlist, every run of this workflow falls back to a descriptive-only report (sample counts + chi-square balance only) instead of computing real PROMOTE/EXTEND/REJECT/INCONCLUSIVE decisions — confirmed today (2026-09-04, run 33850615177) via the discussion's own explicit note: "gh aw experiments analyze could not run in this environment (outbound git access to github.com is proxy-blocked)" and a Firewall blocked 1 domain: github.com warning banner. This is the same failure class already fixed for other workflows by adding the github ecosystem network preset (see pkg/workflow/data/ecosystem_domains*.json, "github" preset includes github.com), e.g. issue #58184 (PR Code Quality Reviewer).

Expected Impact

Restores the workflow's actual mission (computing real experiment decisions with guardrail pass/fail) instead of a permanently degraded descriptive-only fallback that has apparently been in place for at least the last several daily runs.

Suggested Agent

New Agent (or general-purpose code-fix agent) — one-line frontmatter change: add github to network.allowed in daily-experiment-report.md, then recompile the lock file.

Estimated Effort

Quick (< 1 hour)

Data Source

DeepReport Intelligence analysis, 2026-09-04 cycle, derived from Daily Experiment Report discussion #58431.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by 🔬 Deep Report · claude · agent · 231.7 AIC · ⌖ 10.9 AIC · ⊞ 12.4K · ◷

• expires on Sep 6, 2026, 4:48 AM UTC-08:00